Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/DI15uXMK0NpR7e8tDVA8Q7LBN-U.roa
File: DI15uXMK0NpR7e8tDVA8Q7LBN-U.roa (raw, json)
Hash identifier: 5S2ji3rtTu2/x/DBgZaRHk0GQxpstC/8f1YxL0+0hnA=
Subject key identifier: 0C:8D:79:B9:73:0A:D0:DA:51:ED:EF:2D:0D:50:3C:43:B2:C1:37:E5
Certificate issuer: /CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Certificate serial: 01856BD34CA4C10BF2492A07B9572FD681E2
Authority key identifier: 73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/DI15uXMK0NpR7e8tDVA8Q7LBN-U.roa
Signing time: Sun 01 Jan 2023 05:34:47 +0000
ROA not before: Sun 01 Jan 2023 05:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209428
IP address blocks: 2a09:5ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:4c:a4:c1:0b:f2:49:2a:07:b9:57:2f:d6:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Validity
Not Before: Jan 1 05:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c8d79b9730ad0da51edef2d0d503c43b2c137e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:f6:4b:98:aa:4c:d8:2d:2e:21:85:f2:1c:
8d:b0:8a:65:7e:3e:f2:db:6d:dc:20:2a:f4:31:ef:
47:31:7f:ea:d8:7e:31:a8:80:c1:5d:bc:3b:97:fe:
9c:cc:c9:e9:7b:32:24:36:94:2b:b1:ef:de:11:5d:
59:3f:a3:05:fe:68:1f:ae:5c:d6:64:45:f4:7f:04:
aa:74:98:8a:31:78:65:bc:e0:57:d2:94:55:a2:0b:
64:58:f2:8f:d0:03:9c:16:d0:66:94:7e:17:52:43:
d4:7b:75:2a:5d:08:f1:a5:ea:21:8c:0d:54:aa:e3:
b9:6d:54:d6:68:ad:81:bb:3c:5c:1c:cd:a8:59:f1:
bc:f5:30:54:1a:ed:d9:e7:8b:ed:a9:10:95:92:90:
1f:33:45:d3:4c:01:5a:32:74:be:92:67:dc:a8:ba:
82:fc:73:49:6f:35:a5:59:90:ea:1d:65:90:62:88:
09:b3:ad:49:59:84:bd:a2:31:87:0a:1b:8f:d4:82:
b8:58:51:b5:ef:b3:bb:f8:3e:34:f8:f3:82:dc:39:
c8:59:73:7a:31:0a:96:4f:a8:64:b4:32:8a:87:9a:
eb:59:f3:0e:20:8f:0b:4e:86:a1:65:43:09:4c:0d:
5a:d5:97:be:91:0c:9d:93:c8:41:95:6d:ac:81:57:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:79:B9:73:0A:D0:DA:51:ED:EF:2D:0D:50:3C:43:B2:C1:37:E5
X509v3 Authority Key Identifier:
keyid:73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/DI15uXMK0NpR7e8tDVA8Q7LBN-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
92:ab:86:78:1d:67:99:08:59:16:d5:00:40:1c:8f:29:45:2d:
79:d1:d8:74:52:81:8d:cc:3e:21:55:00:eb:e5:75:51:b0:f8:
4b:ae:02:52:a9:ed:31:4d:aa:d2:4f:3c:18:d1:cf:33:35:aa:
e7:21:01:81:db:c1:5e:c6:7d:77:7a:7b:72:aa:4c:b3:b2:78:
bf:4d:cc:ba:a2:cb:4c:e8:e1:ce:92:9f:da:4c:c9:db:80:44:
b7:be:e9:77:43:75:fb:eb:da:cd:b0:df:be:82:66:b0:a1:1f:
b9:7a:1f:09:fb:1a:7d:4e:58:39:d9:c9:2e:1c:65:3d:c1:75:
a9:4d:c3:91:e0:86:53:a9:b8:6e:04:b2:11:9c:13:24:ba:a7:
74:f6:45:1c:bc:b7:44:13:fc:e2:f4:dc:90:e0:6c:72:d8:7f:
8a:43:01:e0:76:18:9e:65:be:4f:08:0f:e7:2d:80:b8:06:b0:
2e:ef:25:c5:d3:20:b0:54:a5:bf:11:48:81:4c:f4:22:91:0b:
b2:0b:b5:38:31:41:a3:32:19:84:9e:44:a5:9d:f3:ba:6d:01:
5d:8e:1b:ca:89:ae:ac:d8:79:90:6f:c7:65:9f:30:77:4e:0c:
e3:e6:53:41:48:64:98:cb:a8:85:c4:70:05:ff:68:8c:05:75:
7b:61:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:32 2025 by rpki-client