Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FooseTyVsPfYt1F_KgK3nUzgK8s.roa
File: FooseTyVsPfYt1F_KgK3nUzgK8s.roa (raw, json)
Hash identifier: CPTQXKYUjYkKuFzbvfYyGa5mkfRGNHeXXfk7E642Kiw=
Subject key identifier: 16:8A:2C:79:3C:95:B0:F7:D8:B7:51:7F:2A:02:B7:9D:4C:E0:2B:CB
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018CBB94A76EB7E49101A6DC066887DC343A
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FooseTyVsPfYt1F_KgK3nUzgK8s.roa
Signing time: Sat 30 Dec 2023 16:35:30 +0000
ROA not before: Sat 30 Dec 2023 16:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bb:94:a7:6e:b7:e4:91:01:a6:dc:06:68:87:dc:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 30 16:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=168a2c793c95b0f7d8b7517f2a02b79d4ce02bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:1e:a2:fc:f0:c7:81:76:ac:25:47:09:e3:
2e:68:d4:07:df:34:ac:67:05:14:51:79:c5:57:b4:
40:6a:3f:bb:a8:c1:5f:ab:77:31:6d:3b:4b:a8:e6:
7f:74:67:60:04:91:a6:ce:53:27:26:a1:ca:6b:fc:
fe:45:0c:c0:c1:56:f9:ff:8a:71:4f:f2:ab:c2:84:
eb:f5:73:5d:e0:4f:4a:eb:8e:84:60:99:f4:19:c9:
9d:60:df:e5:bc:f8:b8:0a:41:40:cc:1e:94:00:55:
5b:d4:5d:6f:f9:95:da:0d:46:fc:90:62:d6:1a:2e:
11:e6:b6:b9:12:4d:ab:8a:76:a9:c8:1f:bf:92:56:
aa:9c:8e:34:82:8a:7d:f6:62:2b:62:1c:75:9c:99:
22:64:bf:68:99:43:62:a3:4d:a3:82:c0:61:05:c5:
fc:d7:ba:c9:2a:8b:f6:1c:d1:4a:4d:21:44:cc:b5:
3b:54:72:e4:da:e4:7a:87:7d:55:d9:13:39:72:7f:
39:8a:27:77:19:c6:02:78:6f:2a:73:2e:59:bc:da:
c5:b2:63:5a:3d:58:33:99:27:0b:f9:e6:36:df:34:
ff:fa:44:05:8e:1b:2a:dd:7e:37:91:b8:d9:c1:82:
5c:b1:43:7e:ac:dc:48:01:2a:62:08:13:cf:6b:2d:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:2C:79:3C:95:B0:F7:D8:B7:51:7F:2A:02:B7:9D:4C:E0:2B:CB
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FooseTyVsPfYt1F_KgK3nUzgK8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:cc:5c:e3:dc:d5:d3:27:ac:92:0f:63:71:55:a3:90:90:57:
4c:73:0c:17:d6:4c:5a:6d:1f:ea:97:ea:a6:57:02:5d:b3:fa:
5e:a7:b2:37:0f:6b:4b:63:95:af:eb:12:07:69:1e:df:40:9f:
76:67:ed:f6:04:97:a5:ba:d5:c7:44:6d:c1:ef:fe:59:42:02:
2b:65:b7:4d:98:d0:3a:9a:b8:60:4d:30:d2:eb:91:1d:3e:73:
af:02:3e:fd:80:01:2b:69:3d:ad:0b:78:04:cb:66:53:b9:ec:
bf:e9:8f:06:48:2a:af:44:fd:15:77:ce:93:07:61:05:a1:8d:
39:ad:cf:bc:5f:5f:40:a8:b5:a2:42:8b:22:b4:a8:30:56:01:
a7:43:83:d3:db:4c:eb:f3:f3:11:14:44:c8:58:40:86:a9:a3:
6b:b1:94:a2:c4:fe:dc:40:71:9d:dc:2e:70:75:23:70:0a:ee:
c9:dc:e1:82:4a:ea:69:63:b7:e5:b9:20:b4:b8:cc:6e:e8:2d:
2f:f1:f1:01:57:fb:b8:b6:18:ee:e5:4f:c7:7e:fc:b7:07:98:
7a:6b:eb:5b:da:1d:d3:28:ed:b5:46:36:20:41:f9:ee:73:32:
d3:de:92:54:a7:f0:9f:ca:11:d0:a4:f6:19:9a:37:87:17:54:
c3:f6:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:16 2025 by rpki-client