Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/GHD7ce5flWEmFiRqYCi9iC7_-Vg.roa
File: GHD7ce5flWEmFiRqYCi9iC7_-Vg.roa (raw, json)
Hash identifier: iwYLfymmKIEci89wKJqtzIjVw+Bwo6xm1u6stmpxwek=
Subject key identifier: 18:70:FB:71:EE:5F:95:61:26:16:24:6A:60:28:BD:88:2E:FF:F9:58
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0192D3
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/GHD7ce5flWEmFiRqYCi9iC7_-Vg.roa
Signing time: Mon 14 Mar 2022 19:37:55 +0000
ROA not before: Mon 14 Mar 2022 19:37:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45036
IP address blocks: 2a12:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103123 (0x192d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 14 19:37:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1870fb71ee5f95612616246a6028bd882efff958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:89:5f:f2:9e:e8:d4:02:79:6d:69:ef:95:
be:3f:bc:18:69:e6:08:ec:71:65:03:a7:b9:c2:9e:
e5:16:06:0f:12:1d:29:5a:67:c0:f8:fd:d4:d5:55:
4e:29:ec:20:91:df:ca:bf:ee:ed:21:de:2d:db:8f:
44:69:44:27:dc:58:eb:55:1f:c4:c8:4a:38:eb:5a:
4c:1d:42:ca:ec:44:4d:18:e7:3d:15:e2:a4:a2:c7:
8e:bc:8f:37:29:04:9e:78:82:8b:4c:77:de:35:ea:
c3:6a:b2:d5:af:c7:e1:53:60:de:99:6b:79:ea:d6:
d2:f2:f8:eb:5c:1f:4e:ef:fe:02:f1:7e:1c:d1:0b:
17:27:91:32:e8:c8:9e:5f:3c:1d:68:32:48:d5:ad:
78:eb:b5:b6:70:6b:f8:32:12:31:79:23:d5:2e:b9:
88:bf:a3:7b:4d:fa:0d:f3:0f:d4:00:cb:74:2a:45:
c5:35:f8:71:56:6a:d1:83:a1:dc:57:81:66:b8:46:
1b:a3:f5:92:7a:87:cc:be:52:68:b7:54:06:5a:0d:
ea:95:a2:8f:7a:7b:5d:8a:b5:10:9c:69:0b:68:fc:
12:29:a6:2b:ef:d8:93:5b:8b:1c:c1:9b:c1:23:8a:
11:71:4b:ea:87:01:64:1f:fd:ed:dd:ef:48:a0:b7:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:FB:71:EE:5F:95:61:26:16:24:6A:60:28:BD:88:2E:FF:F9:58
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/GHD7ce5flWEmFiRqYCi9iC7_-Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:df:ec:1a:fd:74:99:22:94:77:d4:b5:c8:94:68:22:2c:ad:
fc:18:32:83:5d:3f:8f:10:68:df:69:79:61:73:59:d3:03:0e:
c9:96:53:91:a5:3a:7b:af:1c:4e:6b:d7:1f:d6:72:b1:0d:24:
f7:5b:79:00:e6:39:e5:a6:4c:34:e8:6d:d0:b2:81:aa:dc:fb:
1a:ef:5c:4e:51:e6:e1:37:35:b4:c6:de:42:4a:d4:34:8e:d8:
ae:c4:d4:28:9b:5e:98:c9:bf:c2:80:a6:0a:b7:e7:cc:01:81:
e9:d5:0c:49:fe:4d:6f:be:23:00:d5:10:c0:b5:64:82:0a:7c:
1b:f6:00:11:87:61:17:99:7e:cc:f8:97:14:7d:4d:73:57:95:
6e:d9:43:b1:78:25:8b:cb:52:26:68:c5:ea:bb:d4:c0:40:b2:
df:07:c9:f0:f9:e0:5b:35:f7:f2:a4:19:40:d2:a7:19:c2:ae:
75:97:13:f4:bd:bf:5b:12:ca:fc:53:16:73:6e:7f:ba:5d:c0:
2d:3a:ba:6e:92:17:2e:24:87:49:54:db:d8:6e:c3:99:0e:4a:
8e:7c:5b:20:9b:21:49:fe:17:14:d1:9f:b3:ab:6f:1a:4e:d9:
a8:f0:99:15:25:1f:bb:98:1a:12:e1:89:66:b3:b5:6a:d3:9b:
7e:d2:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:23 2025 by rpki-client