Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/0qi9yWbHZnPLqp_FexcjrZrmbOg.roa
File: 0qi9yWbHZnPLqp_FexcjrZrmbOg.roa (raw, json)
Hash identifier: nGTexcVRXoH1XV6/AHJ8bNPLlgy/nZhjgEMxlYaQ9NE=
Subject key identifier: D2:A8:BD:C9:66:C7:66:73:CB:AA:9F:C5:7B:17:23:AD:9A:E6:6C:E8
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 0183FC7DE43198E7D291A30B3F62D75D71F2
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/0qi9yWbHZnPLqp_FexcjrZrmbOg.roa
Signing time: Fri 21 Oct 2022 21:40:52 +0000
ROA not before: Fri 21 Oct 2022 21:40:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397071
IP address blocks: 2a0c:5e00:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fc:7d:e4:31:98:e7:d2:91:a3:0b:3f:62:d7:5d:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Oct 21 21:40:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2a8bdc966c76673cbaa9fc57b1723ad9ae66ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:c3:c1:18:c4:e3:e6:c2:3f:0a:b4:a9:75:
87:45:33:8b:1f:87:4c:53:99:e3:5e:4f:e5:65:6e:
89:d3:e2:76:51:6b:2e:dd:89:4b:0b:33:4d:ba:2c:
d1:ff:57:ed:2a:cd:00:75:10:84:16:af:cf:98:8b:
11:1b:6f:c4:78:80:d5:24:0e:7d:96:68:7e:49:93:
28:5a:46:69:85:fb:30:b3:0c:08:e8:37:ca:19:ee:
99:6b:a6:ad:35:3c:a6:d2:cd:81:1d:2f:16:5c:98:
01:96:6a:9b:88:ee:88:9f:76:0a:89:18:85:54:37:
53:d5:8c:95:7e:29:d1:5b:fe:10:34:30:c8:82:28:
3a:c1:80:6d:2f:d8:ba:55:55:15:8d:f5:97:60:0c:
9f:09:77:ab:16:56:d1:16:6a:c1:9f:d4:03:33:8c:
31:88:70:7b:ff:a8:8d:1a:2c:ee:78:3c:c6:62:4b:
21:df:80:e7:23:0b:c1:e1:3a:05:9b:74:79:f7:01:
f4:d0:6b:86:02:ac:d4:37:01:00:79:41:14:cf:d5:
4e:ba:cc:6f:11:dc:2a:01:d4:1c:82:12:36:75:7d:
22:1e:ae:30:e4:b5:34:a4:f4:7d:55:97:f7:ec:f0:
0c:95:5a:7d:c4:9f:c8:7d:ec:06:e5:c3:c3:48:cd:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:BD:C9:66:C7:66:73:CB:AA:9F:C5:7B:17:23:AD:9A:E6:6C:E8
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/0qi9yWbHZnPLqp_FexcjrZrmbOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5e00:7::/48
Signature Algorithm: sha256WithRSAEncryption
80:b8:99:0b:df:9a:8d:91:05:54:92:57:54:09:6f:9d:1b:27:
84:b1:b9:6c:db:f4:99:73:fc:0d:ed:9b:24:c9:ee:f7:47:81:
96:5a:f2:65:0f:07:06:70:6f:4b:20:a2:80:55:96:03:5c:4f:
48:52:45:b0:05:7e:44:ce:69:93:d9:28:c5:b9:f4:4d:f2:49:
27:8b:0b:7e:89:b4:95:5a:79:24:6a:d3:bd:7c:da:93:35:76:
5f:c3:07:5a:61:cf:fc:4c:6d:22:5b:0b:84:6b:9c:92:8d:e8:
9c:f1:35:f7:b5:84:36:53:2b:cb:47:2f:95:3d:70:32:76:d5:
41:d9:61:cb:47:a6:41:65:4e:67:b9:ca:e4:3b:a6:30:59:d6:
37:68:6a:3b:9e:d6:57:c1:82:5d:ed:f0:fd:e4:8c:77:0d:fd:
a2:66:e6:c4:5c:3b:d2:8b:42:7d:4e:7e:3e:6d:29:ed:1c:e3:
03:bf:f7:1e:59:46:ad:bb:2c:42:e6:75:19:43:63:27:3b:64:
ed:2f:e2:f4:32:5f:a8:31:2d:c1:9f:03:88:47:44:0f:63:cc:
59:40:88:08:d7:5a:6f:83:53:35:23:14:e1:50:6c:1a:52:2d:
66:34:f8:c4:0b:63:d2:fd:39:69:09:f0:f5:78:62:41:8b:33:
92:2e:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:37 2025 by rpki-client