Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Cr1bpx2Cn1292zPP_AUit92_ras.roa
File: Cr1bpx2Cn1292zPP_AUit92_ras.roa (raw, json)
Hash identifier: MMCdWtXawbXcBJZtJ4xlM0DgRUk4xj3LT+vLGBmSMYk=
Subject key identifier: 0A:BD:5B:A7:1D:82:9F:5D:BD:DB:33:CF:FC:05:22:B7:DD:BF:AD:AB
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 09C2DA
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Cr1bpx2Cn1292zPP_AUit92_ras.roa
Signing time: Wed 16 Mar 2022 07:37:40 +0000
ROA not before: Wed 16 Mar 2022 07:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45036
IP address blocks: 2a12:a4c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639706 (0x9c2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 16 07:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0abd5ba71d829f5dbddb33cffc0522b7ddbfadab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:94:32:00:2a:ca:ac:23:f4:c4:89:7d:7f:
1c:69:6e:9e:68:ae:5c:1a:6b:4e:67:03:52:05:42:
bb:be:64:a9:c8:ac:64:cf:83:54:a7:1e:9d:20:ec:
ba:31:77:03:4e:bc:ea:7f:18:34:92:c6:1b:f2:7b:
a3:59:9d:9d:18:f2:87:20:34:0c:d5:e3:0d:de:56:
e8:44:ec:bf:f5:d1:cf:90:f2:e7:2a:b8:93:9d:b2:
4b:a6:71:2a:72:42:8d:43:bf:c3:25:8d:c7:a2:e6:
c7:e3:e7:e3:99:b0:8f:c7:11:3f:28:36:23:e6:50:
d6:8c:6e:9a:b9:b1:9a:ab:d5:6a:d4:79:e8:20:db:
d5:a9:19:7e:ae:12:61:b2:ff:d9:53:a9:dd:89:d5:
8c:92:b0:09:09:f3:24:e0:e5:6e:14:86:c5:5c:18:
0f:c7:a8:a9:8a:d2:0a:d4:16:38:49:a0:5f:af:7a:
78:e0:50:f1:6d:a2:b8:4d:4e:54:d1:cf:dd:32:32:
60:af:c0:35:e1:e6:02:f1:26:f9:4b:f9:9c:2d:56:
a5:f3:b8:99:37:fd:13:6e:33:ba:a1:fa:d3:3d:f3:
14:0e:4f:8f:4c:3f:32:5d:f7:ec:49:64:1a:00:f8:
3a:8e:45:a1:1b:e2:3e:6b:99:00:c5:1f:ef:7d:1f:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:5B:A7:1D:82:9F:5D:BD:DB:33:CF:FC:05:22:B7:DD:BF:AD:AB
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/Cr1bpx2Cn1292zPP_AUit92_ras.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a4c2::/32
Signature Algorithm: sha256WithRSAEncryption
71:bc:43:48:ac:b5:63:cf:9a:e6:4e:e0:c2:9a:7f:ea:54:0b:
dc:1c:17:58:5a:19:c3:4e:61:7d:4a:fc:e4:24:fe:df:d8:2e:
f9:2a:2d:81:6c:41:e7:41:47:ad:31:75:33:90:68:5e:cb:5d:
70:08:71:7b:3a:e8:eb:d5:5b:d4:c2:f4:db:13:64:e7:fa:42:
45:2e:ba:d2:a1:64:75:0e:a5:7a:2d:e5:41:20:c3:a1:51:dc:
fe:3e:68:76:0c:28:d4:56:03:f4:d3:b4:a6:7d:40:b4:b2:93:
15:41:a1:64:68:ec:20:fe:97:a0:8e:39:b9:08:4a:6f:ac:d0:
a0:4d:26:b4:2d:c9:d7:9c:6f:18:2f:49:8e:b1:3e:06:ff:e1:
de:0b:f8:83:3f:6a:64:d7:aa:74:e2:0f:12:a9:92:cd:e6:ed:
11:e4:ae:d1:d6:9c:6e:47:28:9f:3e:06:94:e0:48:10:32:08:
cf:05:e5:74:c6:fe:c1:b7:7a:d4:f9:25:7f:b3:0e:45:11:c6:
fc:a9:b2:7b:1f:37:6b:d7:45:23:5c:1a:27:f9:7a:95:ad:2a:
22:bc:c4:bc:90:55:4c:b6:18:27:d5:b9:64:88:37:7a:14:71:
a5:70:5c:f4:66:f1:b0:2b:c6:3c:a1:f4:c5:32:bc:8f:8d:62:
f7:14:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:10 2025 by rpki-client