Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KYc2hT4aysSv5XyTwDF-_LaPVYA.roa
File: KYc2hT4aysSv5XyTwDF-_LaPVYA.roa (raw, json)
Hash identifier: dxbn7NbT/Zg1E2X3deZWFYP1e39ECyz+bTbrGx2Qsw0=
Subject key identifier: 29:87:36:85:3E:1A:CA:C4:AF:E5:7C:93:C0:31:7E:FC:B6:8F:55:80
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018B1A8C7AF4A3FB86C67BEBEE70B404C011
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KYc2hT4aysSv5XyTwDF-_LaPVYA.roa
Signing time: Tue 10 Oct 2023 17:04:55 +0000
ROA not before: Tue 10 Oct 2023 17:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51101
IP address blocks: 2a00:4120:8000:c::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:8c:7a:f4:a3:fb:86:c6:7b:eb:ee:70:b4:04:c0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Oct 10 17:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298736853e1acac4afe57c93c0317efcb68f5580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:d9:57:c7:32:60:fa:f0:87:68:8d:c2:5c:
60:29:c3:ab:26:ac:07:d7:d3:60:35:93:28:27:26:
2e:5a:17:73:43:ac:47:a9:be:36:ce:49:ca:86:ae:
b1:ce:49:0d:39:06:d2:ff:00:7d:e6:85:30:1a:31:
53:ba:ca:cd:00:1c:59:c8:a1:37:69:62:96:ab:68:
18:a9:4a:34:94:35:bf:f0:de:49:65:36:16:a4:d9:
7f:1b:c4:41:35:58:4a:0a:cd:b2:32:ef:8e:40:63:
53:7e:d9:d1:23:ba:39:57:fa:e8:97:74:e5:d1:a6:
6d:b9:8f:62:98:4f:b6:d7:40:97:54:c7:7d:2a:31:
c8:00:89:e9:85:75:52:61:bc:e3:99:25:42:ed:a6:
6c:c1:fc:61:56:db:a0:41:6f:0f:b4:fa:b9:ef:f5:
2d:a2:e9:87:62:8c:78:6c:2f:8e:14:14:84:50:35:
89:bf:7f:78:8a:0a:d2:d8:2b:dc:b0:79:29:69:39:
f9:83:ef:ef:a0:a3:ba:7d:ee:23:db:f9:ed:81:6b:
7f:02:82:3a:28:58:8b:f4:99:cb:c0:68:8e:ca:81:
dc:a4:c4:d9:cd:06:a4:df:9f:a8:75:19:b4:55:34:
d5:c7:08:ad:53:5e:5d:85:45:fd:f4:42:d9:3e:06:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:36:85:3E:1A:CA:C4:AF:E5:7C:93:C0:31:7E:FC:B6:8F:55:80
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KYc2hT4aysSv5XyTwDF-_LaPVYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4120:8000:c::/64
Signature Algorithm: sha256WithRSAEncryption
0f:b5:20:06:02:d1:80:c0:9a:fc:6b:31:1c:32:87:82:56:80:
fb:e9:80:5c:37:09:25:cf:f0:ff:92:70:8d:93:71:dd:74:4b:
8c:9a:3c:19:c8:8f:00:2f:13:95:a3:c9:da:3d:8a:0b:64:ae:
f9:31:5b:1e:3d:bd:00:0d:ed:2a:a7:c7:7c:19:53:b7:60:9e:
f2:87:a0:db:50:fa:11:1d:eb:76:a9:23:74:42:ac:22:77:48:
37:b4:c1:3e:3d:09:16:75:d5:c1:bc:9e:79:5f:a8:8d:b3:91:
54:ce:9a:0c:f6:22:1c:29:85:4b:f7:47:de:6f:ce:16:f0:72:
9b:9d:0d:00:54:c9:b6:20:d3:17:0d:5b:dc:ce:a1:88:f1:9b:
29:9f:81:f4:9f:22:b1:98:e6:e9:f6:37:9e:16:60:27:4e:29:
a4:c1:68:e7:93:48:fa:1f:dd:bd:78:ee:78:83:48:fa:a6:cb:
bd:46:ec:2f:7a:84:cc:4d:24:ce:c7:6d:a2:4e:07:5b:6e:6e:
51:c2:24:14:37:6c:c1:12:76:47:4a:75:9a:fb:31:fc:eb:20:
f0:8f:a7:7d:95:64:35:ba:52:85:fd:e0:38:e5:7c:49:f1:c3:
34:55:e9:c9:34:bc:85:df:bb:cd:c0:26:9d:dc:59:e6:a3:a2:
ee:c5:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:57 2025 by rpki-client