Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/T4TcGeLHlQ57sNClmMDRjEU-ej8.roa
File: T4TcGeLHlQ57sNClmMDRjEU-ej8.roa (raw, json)
Hash identifier: aHWMDkqbAFS5y//TMfc4cxqLx85DLuUHfNEaI+Hy9Gg=
Subject key identifier: 4F:84:DC:19:E2:C7:95:0E:7B:B0:D0:A5:98:C0:D1:8C:45:3E:7A:3F
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: 018CC6B785BE6CFD73176EFDEB7FD235BFD1
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/T4TcGeLHlQ57sNClmMDRjEU-ej8.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:be:6c:fd:73:17:6e:fd:eb:7f:d2:35:bf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f84dc19e2c7950e7bb0d0a598c0d18c453e7a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:18:bc:93:81:e1:f3:e3:ee:cc:8a:94:65:
1c:cb:a8:b8:fc:c3:9e:c9:31:c5:d1:b5:da:17:a9:
4d:fd:35:0a:cb:d4:08:82:9e:2c:91:f2:b5:69:3e:
58:a5:e1:e0:cf:35:f1:5b:70:7b:ef:6a:07:49:5a:
10:5a:9b:26:c0:84:45:36:47:86:70:89:bb:07:be:
35:39:44:82:44:9d:9e:5d:cc:1d:e7:a7:4f:8d:19:
a6:40:ff:3d:82:60:26:65:dd:54:9c:b5:0a:99:a4:
2c:d8:91:25:7d:f3:45:25:b7:46:d2:9c:d7:59:62:
d9:5c:2b:73:61:57:ff:05:60:f6:22:7a:85:27:28:
54:68:a7:3c:bc:5b:13:e0:cc:7c:91:86:67:42:32:
3c:ee:dc:3b:2f:44:00:75:6f:48:07:d5:47:50:bf:
79:7e:0c:b3:b8:0c:50:59:7c:55:49:19:01:70:1d:
76:85:f4:47:c3:3c:84:f9:fe:eb:c3:b9:0e:0c:2f:
d8:1a:1d:ff:ae:9d:f9:65:17:9c:7d:40:ef:6e:31:
d1:5d:35:c1:8d:7e:27:73:6f:f6:fe:93:6b:a3:bf:
28:06:a8:3f:2a:e2:d2:b3:0d:49:3d:9f:77:b1:c9:
51:29:02:f4:89:1e:54:79:5d:dd:89:c9:3e:8f:55:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:DC:19:E2:C7:95:0E:7B:B0:D0:A5:98:C0:D1:8C:45:3E:7A:3F
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/T4TcGeLHlQ57sNClmMDRjEU-ej8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7880::/29
Signature Algorithm: sha256WithRSAEncryption
9f:24:3a:fa:dd:ec:cd:c6:2a:b6:06:ae:8f:35:fa:ea:b7:98:
d6:f7:57:8d:9c:01:03:fa:41:87:93:15:1e:69:a9:e1:ff:bc:
37:ad:56:6a:c2:e8:a1:1d:14:e2:f4:b3:ee:68:56:e3:df:8f:
90:5e:00:50:3f:d1:c3:ac:d8:dd:b4:ef:c4:2e:aa:6a:55:4a:
7f:ed:d9:fd:65:b5:9b:79:38:39:57:f0:0c:15:1d:a5:d9:b9:
96:a3:21:02:88:97:9d:9d:f5:3d:e9:fd:88:b4:10:f5:90:89:
96:d2:74:7a:95:26:3d:3e:f4:29:7c:20:56:1c:8e:1a:40:ac:
2e:c8:af:b1:1f:8c:51:a5:d0:b5:d3:8d:08:b5:2b:e4:6d:7c:
3f:eb:be:45:8b:11:82:63:ff:58:3e:7b:c5:02:da:72:84:22:
53:af:d7:00:a2:4b:cd:d3:f9:f1:d9:a3:85:4f:fe:b2:1a:cd:
cf:6f:2c:6d:fd:57:ee:0f:98:ba:f2:c9:6b:ae:17:06:63:b6:
66:31:97:48:d3:de:2a:09:3f:21:06:79:ca:74:dc:93:ce:1c:
b1:a0:77:ce:47:ef:30:0c:d8:47:d6:3a:da:5b:1d:6e:59:30:
0f:a3:fa:48:47:0e:25:1f:91:b7:08:fd:b4:6e:af:81:94:c6:
44:91:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:52 2025 by rpki-client