Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/bWpsDSZrpHYXsRuCi5JCoBe5mA8.roa
File: bWpsDSZrpHYXsRuCi5JCoBe5mA8.roa (raw, json)
Hash identifier: 2RScUfnhdFW4T3AZeVYsf87HTSn3e9/JEL6fz6cUvCs=
Subject key identifier: 6D:6A:6C:0D:26:6B:A4:76:17:B1:1B:82:8B:92:42:A0:17:B9:98:0F
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018CB217442393A6B79255EAD8965E11E60E
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/bWpsDSZrpHYXsRuCi5JCoBe5mA8.roa
Signing time: Thu 28 Dec 2023 20:21:58 +0000
ROA not before: Thu 28 Dec 2023 20:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:17:44:23:93:a6:b7:92:55:ea:d8:96:5e:11:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 28 20:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d6a6c0d266ba47617b11b828b9242a017b9980f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:27:01:06:ed:44:fc:aa:05:bb:b6:75:f4:
f3:f8:a5:17:37:b2:b6:39:b4:1b:13:a5:5e:ce:72:
ae:d9:98:cc:56:ed:5c:5d:90:7a:20:ae:93:79:bf:
05:79:a4:13:fc:be:e0:be:12:f3:9c:8f:d1:1e:da:
39:f5:56:81:7e:de:4b:06:e9:73:5c:cd:63:66:a2:
ae:12:e0:f1:62:28:2c:2a:2d:87:55:0e:af:2b:0e:
e8:81:1e:a0:8a:58:f2:77:ad:d4:f0:83:ba:82:88:
12:4d:a5:82:4c:f6:ea:cd:f2:ce:ba:de:d3:d8:d4:
ca:2e:6e:72:66:ca:c3:68:a2:c9:e4:b4:30:fa:45:
18:74:a4:c2:f7:0c:3a:b5:29:a4:bc:67:8a:c7:29:
2c:00:69:e0:bc:3f:61:75:04:22:8c:ca:1a:4a:1b:
a0:50:df:b8:81:99:2e:d5:34:5b:63:c9:da:95:6c:
60:b3:81:a2:10:d6:f0:d9:c7:01:5c:42:54:cc:9a:
ac:c1:68:81:6f:92:73:ff:11:d2:b1:4a:0f:fb:1c:
06:3d:b9:f2:2f:32:c1:27:93:be:5c:21:0f:2d:32:
2b:8b:8c:5e:24:a5:3f:e6:c5:e8:95:de:44:d0:64:
c0:61:bc:e1:72:1b:e3:61:aa:ce:2e:09:1a:31:ca:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:6C:0D:26:6B:A4:76:17:B1:1B:82:8B:92:42:A0:17:B9:98:0F
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/bWpsDSZrpHYXsRuCi5JCoBe5mA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:95:3e:ec:37:a6:45:72:be:0e:ad:33:77:5b:df:0b:2f:a2:
92:59:62:65:b5:2a:97:e2:a7:db:96:89:2c:e4:84:94:90:a2:
95:1f:71:33:83:da:6f:29:05:95:55:26:88:68:ce:43:7f:90:
dd:57:5e:0f:50:90:7c:76:4b:47:9a:79:18:f9:2d:44:ed:3b:
c4:b7:86:9e:35:fb:6c:2a:f3:18:67:cb:1f:d1:49:98:9d:a6:
24:06:eb:b3:f9:81:96:16:f7:4f:0e:c9:b0:c3:97:16:d0:1b:
85:14:f6:e4:b8:11:a3:e5:f7:f9:75:52:de:25:c2:a0:71:f3:
f9:80:9f:9b:d6:64:e9:6d:48:97:70:52:25:f7:ff:be:94:b3:
c5:e1:02:74:8f:b4:c4:0c:52:88:27:cb:90:68:7b:fc:a8:94:
e0:98:68:c1:cf:94:ca:c3:56:f9:11:21:f8:57:d8:41:e3:b3:
2e:4b:2f:50:65:3d:d3:42:17:54:69:36:73:d1:73:8b:87:ed:
63:ff:81:74:b0:19:34:75:c0:68:0f:bc:b1:b7:c7:c7:dd:75:
c5:36:bc:e1:16:a5:b2:ab:91:e3:3a:54:c3:26:40:09:f4:9e:
45:3e:d3:6c:6a:95:f3:ae:77:c0:6a:06:b4:b8:f5:81:bb:9b:
2d:c1:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:32 2025 by rpki-client