Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/7_5zreqY1IjT3COw5HtZLHEBEVQ.roa
File: 7_5zreqY1IjT3COw5HtZLHEBEVQ.roa (raw, json)
Hash identifier: 66wPHoa44xp3oJQVK/fuLJMUy1XueRUflKMPC/N3Oyc=
Subject key identifier: EF:FE:73:AD:EA:98:D4:88:D3:DC:23:B0:E4:7B:59:2C:71:01:11:54
Certificate issuer: /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial: 0181DACF95569269961963F2615B7D54928A
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/7_5zreqY1IjT3COw5HtZLHEBEVQ.roa
Signing time: Thu 07 Jul 2022 22:37:26 +0000
ROA not before: Thu 07 Jul 2022 22:37:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 2a12:db80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:cf:95:56:92:69:96:19:63:f2:61:5b:7d:54:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Validity
Not Before: Jul 7 22:37:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=effe73adea98d488d3dc23b0e47b592c71011154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:41:13:a7:87:72:ec:b0:8d:c2:b8:18:3b:
13:e4:64:c5:61:8e:2c:4d:2f:56:13:e8:35:03:81:
b5:cf:f7:0f:2b:cc:a0:d1:7b:b5:d5:a0:d5:cb:e5:
49:42:6e:49:74:ed:34:4f:df:61:ce:52:95:5a:78:
e9:e7:49:cc:19:f8:c2:d2:61:c1:a5:db:c2:76:68:
11:e9:e8:b5:1d:ac:de:af:dd:6c:0b:50:85:16:d9:
21:76:74:27:b1:13:42:9b:83:da:31:79:26:b2:46:
db:b4:9d:bb:ce:7b:6c:9f:e8:30:a4:ff:33:eb:3c:
84:c1:60:66:79:e7:e9:bb:78:25:e7:fe:f9:ef:d0:
c0:41:07:d5:d1:8c:35:ef:72:b6:ef:d6:ef:a9:14:
9d:d2:0b:3d:ee:9d:0d:dd:0a:1b:db:e2:7e:95:d7:
63:5c:50:9b:b1:4d:1d:9e:08:8e:31:9a:fa:93:40:
f2:8d:27:b2:88:9e:2e:83:11:02:58:f1:84:58:ed:
32:b0:10:f5:01:7c:02:f7:36:0c:be:db:f4:bf:32:
5f:12:3b:e2:ca:dc:e8:07:51:dc:f7:cc:ad:b5:db:
12:d5:94:77:8f:78:4e:f4:ef:67:53:e5:2c:7c:15:
b3:3b:7d:ef:f5:40:15:3e:93:53:d5:57:fe:5e:6e:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:73:AD:EA:98:D4:88:D3:DC:23:B0:E4:7B:59:2C:71:01:11:54
X509v3 Authority Key Identifier:
keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/7_5zreqY1IjT3COw5HtZLHEBEVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:db80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:f9:cd:e8:17:e2:ee:99:d9:ba:8e:73:b7:05:04:6a:33:08:
08:d6:eb:7a:f8:ac:60:ac:92:af:7d:9e:73:94:1a:5d:e5:66:
e8:d7:f1:35:9e:33:22:0d:af:bb:b8:bb:1c:16:75:2b:17:8a:
c9:98:a6:b0:43:7e:76:4c:30:a3:9b:1e:31:e0:1f:75:d7:5f:
55:44:c1:30:04:51:95:5a:11:1b:5a:91:f2:44:ca:73:96:04:
e6:fd:a0:6d:d1:99:07:13:ca:da:5c:71:9b:03:5a:31:f2:41:
fc:ad:c9:a3:d5:20:bd:09:1a:fe:a1:ee:08:40:6b:66:04:ca:
7d:b3:eb:17:74:3d:08:69:fb:8a:a6:4c:5a:74:53:da:81:ce:
8d:e9:a2:20:98:aa:27:10:3a:68:ef:6f:a0:ac:1a:73:e8:70:
7e:61:6b:92:e6:a9:31:c4:6c:94:d7:69:7c:80:18:49:fa:8e:
f0:7b:5d:c3:88:d7:8c:3a:23:d2:11:14:d7:94:10:dd:d6:ae:
90:55:f1:6d:52:b8:86:f1:fd:ee:f4:6f:67:e6:2c:84:2c:40:
5e:49:cc:d5:d5:82:f0:3b:9f:69:bc:93:50:2f:21:51:fa:b5:
6d:e6:3f:5c:10:ca:7c:96:a0:13:8f:0e:b8:18:25:34:59:21:
a8:f1:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:18:55 2025 by rpki-client