Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/1vJ-5kkRW73MlKAnQGuL9PpbuG8.roa
File: 1vJ-5kkRW73MlKAnQGuL9PpbuG8.roa (raw, json)
Hash identifier: Q7hzqwxhp+x5A8Pulh8TY7gE8yTD9/HSVvPOUJEs74k=
Subject key identifier: D6:F2:7E:E6:49:11:5B:BD:CC:94:A0:27:40:6B:8B:F4:FA:5B:B8:6F
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 09AA43C0
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/1vJ-5kkRW73MlKAnQGuL9PpbuG8.roa
Signing time: Sat 01 Jan 2022 05:05:32 +0000
ROA not before: Sat 01 Jan 2022 05:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29182
IP address blocks: 2a09:6280:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162153408 (0x9aa43c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 1 05:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f27ee649115bbdcc94a027406b8bf4fa5bb86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:bf:82:e8:81:40:98:49:93:b7:76:56:15:
e2:23:2f:79:c0:9f:95:27:62:77:3f:73:4a:bb:59:
c2:6b:c6:7b:9d:cd:35:75:12:5b:4f:56:c7:d7:ea:
00:df:51:57:5a:db:7e:49:f1:00:63:d7:3d:98:4c:
fe:c8:d1:84:a7:e4:34:7d:5b:0c:45:ec:9a:98:3f:
31:1a:ad:81:66:19:56:e8:da:4f:53:04:fa:ce:03:
03:59:ff:1d:15:7a:f8:06:fd:11:06:2e:9f:34:f6:
53:bd:9d:0b:fa:10:8d:ce:de:5d:7a:11:72:e2:33:
d2:82:b8:cc:a4:ee:db:e9:84:48:fb:9d:a0:cf:ec:
3a:2f:6a:4c:9a:2a:aa:fc:ad:d3:16:e0:03:17:ec:
e5:9a:3e:84:b9:21:89:35:e2:9a:78:c5:a6:a2:bc:
e4:2b:37:ef:03:6b:cc:c6:d5:52:57:fb:b0:8d:0a:
84:ba:dc:0b:67:a1:0a:21:6b:4a:72:a2:ac:af:fa:
e8:88:a8:84:e0:93:3a:12:6d:cd:b8:a1:0c:23:62:
32:68:e4:7d:fd:6f:84:12:9d:1c:a1:d2:0e:f2:75:
2b:7b:47:c7:e3:62:c5:77:fa:9f:1f:47:a9:84:5b:
92:c3:40:08:c1:d4:2f:a1:2b:d8:1d:c1:af:ec:88:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:7E:E6:49:11:5B:BD:CC:94:A0:27:40:6B:8B:F4:FA:5B:B8:6F
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/1vJ-5kkRW73MlKAnQGuL9PpbuG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:4::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f3:3a:a6:ca:79:38:d4:70:31:e3:22:03:43:f8:26:a0:85:
2b:26:98:8a:28:47:71:3f:a9:31:15:b5:cc:7f:2e:8f:96:8a:
21:d2:86:36:53:d7:c7:96:f5:d4:88:ed:d7:76:a9:7a:67:e9:
ac:b4:9f:c9:20:28:39:78:28:32:7e:bc:12:35:92:d3:95:a3:
4c:4f:9e:1a:da:bd:40:3e:44:0b:28:cf:e0:7b:2d:d8:7e:0a:
81:68:34:7d:43:cc:a8:56:7c:51:ea:fd:11:92:a6:e8:bb:a4:
85:bf:d1:70:0c:f9:59:31:f7:a0:95:94:14:57:7e:ec:d4:70:
1f:44:0a:6e:fe:7b:4d:3e:df:17:e4:90:ab:a5:1f:63:93:47:
c5:07:eb:e8:2f:aa:86:ce:3e:93:f5:d8:ac:87:00:89:9d:b2:
60:b0:4c:e3:32:fe:3e:dd:84:c6:fb:e2:64:0a:59:65:b4:75:
44:0d:ef:18:ef:c0:6d:94:a0:ff:60:65:ce:b4:3a:52:a8:d8:
9d:b6:b4:cd:c7:ff:69:bb:d6:54:2b:7c:3d:51:c6:e4:ff:81:
d4:72:67:9d:46:20:30:a7:0f:42:31:0a:d0:6f:e1:89:09:a2:
05:c6:49:60:2f:90:13:d7:8c:92:6e:35:43:61:d4:e1:54:10:
c3:51:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:47 2025 by rpki-client