Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/3mhoTRKeUOz1BxARlciF5NFh2Bs.roa
File: 3mhoTRKeUOz1BxARlciF5NFh2Bs.roa (raw, json)
Hash identifier: XRy15Exvgs4iZ1HHBWzEexl6fXAXMsi2i1LPJ8XlJIw=
Subject key identifier: DE:68:68:4D:12:9E:50:EC:F5:07:10:11:95:C8:85:E4:D1:61:D8:1B
Certificate issuer: /CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Certificate serial: 018453AC9763FF7951F9422908708ED1516E
Authority key identifier: 5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/3mhoTRKeUOz1BxARlciF5NFh2Bs.roa
Signing time: Mon 07 Nov 2022 19:58:50 +0000
ROA not before: Mon 07 Nov 2022 19:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397071
IP address blocks: 2a0c:5e00:7::/64 maxlen: 64
2a0c:5e00:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:53:ac:97:63:ff:79:51:f9:42:29:08:70:8e:d1:51:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af2bf191ffd62b9f27475009c8fb3e0a14a2237
Validity
Not Before: Nov 7 19:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de68684d129e50ecf507101195c885e4d161d81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:89:33:be:51:0e:0a:15:47:4f:cf:36:0c:
9d:1d:a9:7c:2b:35:83:0b:54:9c:3d:68:26:e0:39:
83:6d:51:32:27:12:01:f6:11:d0:29:69:1a:1d:51:
d6:6d:04:a5:73:1e:23:33:06:77:13:f0:ec:22:52:
27:e2:dd:78:2a:80:c9:9b:8a:0a:c1:55:8c:a0:99:
4f:70:3f:78:5a:7f:e0:72:5d:70:a1:9c:1a:7d:fb:
1b:25:d1:69:4d:d2:ad:c0:fd:ab:75:af:04:38:c7:
aa:36:59:5f:a5:ae:9f:6b:d0:a2:f2:5e:0c:66:53:
d2:ad:d4:2d:ce:83:5c:32:fb:8d:91:dc:e5:4d:bd:
bb:d2:b2:d5:3c:05:3a:ad:1c:99:d1:0d:66:73:b7:
b9:94:b5:bf:34:64:aa:2b:1b:60:b0:5a:c2:71:e2:
ac:14:a2:e4:0f:16:85:05:7a:c8:61:17:15:c4:4f:
b7:b5:96:38:42:16:5e:06:c8:9d:5b:31:51:b5:c4:
92:2c:2d:ef:e4:c9:68:bb:a3:df:9a:7e:cc:11:44:
61:27:01:20:85:ff:ee:56:ea:ee:30:54:f9:2f:bf:
c4:26:fd:ab:2a:29:2f:58:65:5a:d2:be:3b:bb:65:
af:9d:c3:3f:df:7c:4a:5c:e2:44:37:11:98:3b:17:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:68:4D:12:9E:50:EC:F5:07:10:11:95:C8:85:E4:D1:61:D8:1B
X509v3 Authority Key Identifier:
keyid:5A:F2:BF:19:1F:FD:62:B9:F2:74:75:00:9C:8F:B3:E0:A1:4A:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvK_GR_9YrnydHUAnI-z4KFKIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/3mhoTRKeUOz1BxARlciF5NFh2Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d8faaa-9b42-4080-9203-e51aa0331df5/1/WvK_GR_9YrnydHUAnI-z4KFKIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5e00:7::/48
Signature Algorithm: sha256WithRSAEncryption
5a:57:f5:12:80:cc:e5:82:a0:93:fb:23:fa:0a:98:b2:02:ee:
fa:70:c8:9c:5f:b5:45:b1:b8:49:23:8a:01:9a:e7:ee:c0:cf:
44:7d:b1:32:bb:08:a9:4f:7e:94:53:4b:c5:4f:06:63:81:e9:
86:e5:84:d3:91:1a:62:d3:68:39:cf:ad:e0:29:f0:11:6d:52:
d7:39:91:e0:71:e9:be:2a:31:20:11:e1:97:09:75:8e:a5:48:
5f:dd:00:03:62:ad:28:05:03:34:26:9c:a3:4d:f1:a8:37:a1:
6a:f5:6a:ff:23:3d:39:72:d2:08:a4:5b:6e:1b:b2:3c:08:66:
13:27:05:a4:8c:1d:81:d6:fb:af:fe:40:c4:1e:81:31:1d:53:
27:3d:fe:f6:d7:9c:ea:c7:cb:62:fa:69:90:b4:bc:f7:2c:27:
16:4e:7e:79:42:33:3a:37:0b:6f:20:58:fb:3c:75:1c:a1:50:
30:24:aa:b2:30:77:b3:6d:96:2e:94:4d:d3:9b:ca:96:b0:db:
cf:cf:16:a0:20:9d:ab:82:8e:e7:87:74:af:ec:3a:ef:1c:5b:
cc:ff:75:48:e7:60:ec:61:fa:20:85:20:f4:44:bd:c5:73:1b:
af:bd:8d:fc:50:99:fb:c6:01:72:66:d7:5c:3e:a0:c9:ae:de:
91:21:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:36 2025 by rpki-client