Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/9TftiVToAee8hlkUeWxnhkdjWvQ.roa
File: 9TftiVToAee8hlkUeWxnhkdjWvQ.roa (raw, json)
Hash identifier: hZGkvFrzBhApGqil6qalhpjvhRXUWwOCsV3ZM7lbDC0=
Subject key identifier: F5:37:ED:89:54:E8:01:E7:BC:86:59:14:79:6C:67:86:47:63:5A:F4
Certificate issuer: /CN=682c16254e72dc4cca375409e59e81cc39c48730
Certificate serial: 01388FFF
Authority key identifier: 68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/9TftiVToAee8hlkUeWxnhkdjWvQ.roa
Signing time: Sat 01 Jan 2022 09:00:44 +0000
ROA not before: Sat 01 Jan 2022 09:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18779
IP address blocks: 2a11:5f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20484095 (0x1388fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c16254e72dc4cca375409e59e81cc39c48730
Validity
Not Before: Jan 1 09:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f537ed8954e801e7bc865914796c678647635af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:89:19:e2:b6:d8:24:47:a9:6a:7c:f2:0d:
bc:86:44:e6:f0:d4:9d:e4:c5:a0:4a:00:ba:b5:e3:
78:2c:a7:90:1f:69:7e:e8:ab:93:ce:e5:ca:ad:17:
d3:63:39:06:ae:dc:de:6e:3b:17:b3:b8:dc:9d:53:
eb:cb:6c:4c:25:5f:80:40:15:0f:ee:8a:4b:0f:3d:
d8:c5:44:7d:e0:fe:32:ff:40:e4:45:34:ab:10:67:
1d:19:43:82:8e:69:9f:99:df:27:23:d0:55:ba:ee:
4e:ea:29:53:6b:ec:d8:dd:05:f7:8b:67:c9:60:2a:
92:41:7e:92:5e:7a:70:c5:58:7d:10:9c:65:8d:3a:
80:e6:c1:7e:fc:e7:b1:ea:ff:b2:61:ef:98:84:a1:
80:96:4c:6b:45:93:7d:30:98:6c:25:60:20:da:d7:
49:05:b0:f9:8f:53:1b:f5:dc:57:97:75:df:b4:35:
16:39:3f:66:fe:fb:b2:de:be:83:0e:8c:64:0d:4a:
61:bd:11:64:cf:4a:fa:25:8e:d2:08:a4:c8:2b:1e:
36:d6:b2:84:01:25:4d:cd:10:bc:82:2d:e7:0f:1d:
fe:b9:46:89:37:d5:3b:5c:f6:1a:26:79:69:8d:17:
9a:2b:ed:1b:ec:90:ef:bf:ed:ba:89:d2:57:e3:fb:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:ED:89:54:E8:01:E7:BC:86:59:14:79:6C:67:86:47:63:5A:F4
X509v3 Authority Key Identifier:
keyid:68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/9TftiVToAee8hlkUeWxnhkdjWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
69:12:5e:d4:cf:d0:a4:32:0e:dd:0a:d0:07:85:1a:2d:ed:17:
07:c5:97:62:e6:ea:60:82:ee:5e:fc:67:0a:72:a0:11:bf:2f:
51:fc:02:ce:a2:35:db:a7:80:73:81:af:e9:15:94:39:32:30:
8c:d8:18:b4:c7:6e:d7:ad:ef:b5:24:4d:d5:ef:d8:dd:5c:d0:
1a:76:2a:88:1f:48:e5:fa:6c:f7:aa:ec:96:c6:08:df:d3:8c:
19:ba:13:01:c6:09:97:74:ca:e6:78:f3:50:69:52:6d:3b:52:
d9:2e:f7:ce:71:c2:fc:0b:32:2a:b7:59:b3:1e:67:69:76:d3:
a5:10:22:cf:6c:98:05:73:92:39:5c:13:56:0f:9f:b1:5e:0f:
2e:05:7d:f7:62:b3:b1:d4:d9:8c:8f:91:f7:63:e6:92:6f:13:
c6:df:c3:c1:ff:74:3f:39:b4:94:fd:a1:42:24:fc:36:89:7d:
9e:4c:92:6d:d2:d6:60:47:06:89:54:fa:b8:8e:cd:ef:d2:7b:
03:28:66:b6:50:a8:1f:48:a3:52:18:7c:c4:58:01:33:f7:9e:
c7:b3:5b:4d:64:24:14:4f:6c:cf:f5:06:93:dc:ad:01:d7:bf:
b4:c2:24:81:65:f1:ed:c7:36:70:58:5d:f8:e9:ae:36:e8:fc:
87:17:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:35 2025 by rpki-client