Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Q3BbD6jw7S_YNZ2KKkZhlOtxpM4.roa
File: Q3BbD6jw7S_YNZ2KKkZhlOtxpM4.roa (raw, json)
Hash identifier: ylT9cVZ2272vge4Jw+Xln0eL5zG31EmNnLTGBxekIWQ=
Subject key identifier: 43:70:5B:0F:A8:F0:ED:2F:D8:35:9D:8A:2A:46:61:94:EB:71:A4:CE
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 01837A620B1A6C73EFC1E67FEC39457B1583
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Q3BbD6jw7S_YNZ2KKkZhlOtxpM4.roa
Signing time: Mon 26 Sep 2022 15:19:48 +0000
ROA not before: Mon 26 Sep 2022 15:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:62:0b:1a:6c:73:ef:c1:e6:7f:ec:39:45:7b:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Sep 26 15:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43705b0fa8f0ed2fd8359d8a2a466194eb71a4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:78:79:44:30:a9:76:1e:52:f7:3a:4c:68:
7f:cd:dc:f6:02:26:14:62:47:1c:9d:dc:0e:93:93:
3f:81:0c:c7:c6:af:49:eb:03:a2:57:c6:40:13:43:
77:7e:6a:72:59:f5:57:ac:91:db:9d:75:6f:c6:b8:
2b:39:e3:45:be:30:7a:52:41:a0:0e:8e:5a:15:a8:
84:24:71:c8:cf:67:d0:63:a8:20:33:d4:60:7f:e4:
bb:1f:db:cb:97:4a:d8:15:cd:ab:ef:6b:78:20:23:
2f:4f:2b:88:da:0a:15:82:45:e7:cf:94:2e:b2:47:
74:ce:08:0b:14:3c:b1:f8:52:e4:4d:b1:4f:56:df:
74:b8:82:ba:94:59:10:31:ea:21:46:3e:60:86:cc:
30:fa:24:79:3b:43:14:b6:9c:c0:d1:e7:bf:97:dc:
f9:4f:9d:bd:af:b1:cf:b4:88:06:c2:74:27:1a:04:
9c:66:ed:f3:ae:72:66:68:40:7c:0a:e9:d3:fb:1d:
89:c1:31:86:b3:6c:35:37:c4:e1:1d:02:3f:86:0f:
1a:5a:cf:5d:db:82:83:d4:3d:65:43:5d:c2:32:d3:
9d:9f:41:6b:42:5f:37:0c:0e:8e:3c:b9:d3:6a:a5:
9e:ac:a6:52:70:93:7e:97:6a:79:ae:7d:52:7b:df:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:5B:0F:A8:F0:ED:2F:D8:35:9D:8A:2A:46:61:94:EB:71:A4:CE
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Q3BbD6jw7S_YNZ2KKkZhlOtxpM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:e5:6c:48:ba:53:d4:d3:f0:7b:de:88:5e:87:48:9c:01:95:
e5:be:32:a0:45:5d:e9:ee:05:70:d8:0a:a9:ce:6e:1b:a3:99:
f6:0e:92:5a:bf:35:b6:2b:c7:75:e6:f0:5a:dc:b9:b8:29:59:
52:e8:fb:4f:0c:63:5c:c7:67:9b:c2:cf:77:5c:98:81:61:01:
79:43:2f:47:97:c8:92:fb:98:e3:a1:d0:32:1c:f0:df:c8:a3:
9a:0c:09:6d:94:b5:9e:eb:a0:77:19:31:f1:2a:34:da:70:8e:
e1:07:de:75:8f:28:96:c3:95:97:5d:27:47:6f:7b:66:6c:63:
31:c4:81:5e:8d:f3:10:52:41:b0:61:ef:e6:be:a0:50:d7:1f:
07:d4:5f:51:d9:0c:da:7a:06:6a:8b:38:2c:d6:57:7e:47:02:
11:55:f2:ef:12:33:4c:a9:78:7d:77:79:eb:0d:e2:7c:2f:83:
ec:bc:88:c2:0f:95:c0:f8:48:a7:a0:ee:d6:7e:ee:64:1e:7d:
33:54:b7:28:72:eb:50:e2:e1:08:d1:f4:09:2f:cc:1d:89:bf:
24:49:3a:45:00:7b:8f:09:40:bd:03:a3:25:71:7b:b1:79:01:
67:76:83:fc:89:68:72:71:33:5c:9e:cd:c1:fd:ea:62:7c:94:
d9:d3:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:34 2025 by rpki-client