Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/0sU7kS4bk04MRowpGZxfR6OMd84.roa
File: 0sU7kS4bk04MRowpGZxfR6OMd84.roa (raw, json)
Hash identifier: vnqOjLRPUM7ZEQHFrqGZ3BLQfDR7wsUoEQG2Z1PNpMI=
Subject key identifier: D2:C5:3B:91:2E:1B:93:4E:0C:46:8C:29:19:9C:5F:47:A3:8C:77:CE
Certificate issuer: /CN=5386fa6196b281d7b9342e671068ade678fa5119
Certificate serial: 0185708CA3543353B227DEEE4D15D05EF0A3
Authority key identifier: 53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/0sU7kS4bk04MRowpGZxfR6OMd84.roa
Signing time: Mon 02 Jan 2023 03:35:43 +0000
ROA not before: Mon 02 Jan 2023 03:35:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12502
IP address blocks: 2001:67c:2a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a3:54:33:53:b2:27:de:ee:4d:15:d0:5e:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5386fa6196b281d7b9342e671068ade678fa5119
Validity
Not Before: Jan 2 03:35:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2c53b912e1b934e0c468c29199c5f47a38c77ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:4c:8e:a7:59:00:c0:06:e5:ba:fc:bc:69:
d5:aa:94:0a:6f:05:22:00:fa:43:4a:2a:b6:be:70:
07:69:82:50:7f:0a:1d:5f:59:10:f8:96:d8:11:37:
ae:9c:8d:91:a2:ba:26:d8:44:e5:e3:af:15:8b:28:
fd:e6:0a:97:a4:88:ce:e7:4c:cd:56:09:42:43:9d:
1a:90:2b:ae:04:43:44:5d:e7:32:87:21:90:bc:a6:
da:20:4b:e0:8a:e3:79:dd:cc:0d:f5:af:0b:3e:e7:
b8:4b:50:1b:ca:10:86:f8:35:7d:d2:43:75:be:40:
0c:2d:69:be:20:de:c6:88:d1:aa:97:11:8c:c6:ab:
71:a2:59:21:5f:b4:17:7a:99:6c:93:f2:e8:73:6f:
d3:13:03:61:44:89:54:37:96:bd:8d:fd:a3:7c:0f:
8e:a0:5d:09:c3:db:59:60:7a:ab:b2:92:f4:25:14:
35:3e:ff:85:99:bf:76:f0:8e:e9:be:ed:51:bf:81:
2c:b2:bf:84:49:25:17:f5:40:cf:25:8f:5b:38:0f:
a7:25:6f:ee:ba:7e:62:59:10:a9:b7:8a:7e:3b:12:
42:65:0c:49:38:52:7e:72:fc:c0:91:92:fe:45:47:
3e:b6:af:0c:8e:e8:8a:75:63:d8:d3:af:53:95:08:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:3B:91:2E:1B:93:4E:0C:46:8C:29:19:9C:5F:47:A3:8C:77:CE
X509v3 Authority Key Identifier:
keyid:53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/0sU7kS4bk04MRowpGZxfR6OMd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
07:17:b3:44:50:57:16:f4:b4:b8:d0:05:cf:72:6e:3c:39:de:
37:bd:df:67:29:89:ae:75:a5:46:80:0d:22:71:85:af:9b:53:
e7:83:4a:62:e7:bb:a1:9b:f1:22:14:07:38:df:b8:5e:9d:be:
ac:2e:6a:7a:0a:a7:39:0e:08:7f:2f:73:f0:7a:2b:a0:7d:04:
10:f5:63:be:01:e8:cf:19:d8:d8:33:fd:ee:02:ab:e5:98:96:
73:49:b9:65:62:ca:d8:de:ba:47:30:2d:86:e1:fe:12:f4:b0:
50:d8:eb:af:fb:ad:2d:35:2e:e1:8d:3a:2e:b7:81:46:f7:8d:
1a:15:7d:35:bc:6d:64:a1:c4:22:bd:74:a3:41:24:c0:7e:6d:
12:9d:ae:3c:68:d7:0d:61:89:2f:e3:e4:31:0f:bd:56:6b:c8:
21:d6:1c:9f:e8:1d:1c:a1:6a:59:76:de:e2:ce:d6:dc:ea:cb:
1e:c8:cd:1b:a0:06:ae:6d:d1:5d:bd:2d:c5:02:bd:70:42:cb:
9a:61:86:b0:49:ed:78:14:56:b2:ca:da:be:f5:19:fa:3d:f2:
47:94:1e:07:42:29:71:64:b0:58:42:a5:8c:06:ec:65:0b:14:
8c:66:0d:f9:bb:92:1e:39:bf:56:ab:56:06:79:14:80:c6:b8:
04:80:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:53 2025 by rpki-client