Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/k4-Fw40xxJJJi45hO1v_r8o9aL8.roa
File: k4-Fw40xxJJJi45hO1v_r8o9aL8.roa (raw, json)
Hash identifier: hWmYy++hKfDQB/6+GI/e6DdnhLrVEpG9QHZ6MNkJyuI=
Subject key identifier: 93:8F:85:C3:8D:31:C4:92:49:8B:8E:61:3B:5B:FF:AF:CA:3D:68:BF
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 090369
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/k4-Fw40xxJJJi45hO1v_r8o9aL8.roa
Signing time: Wed 16 Mar 2022 07:37:39 +0000
ROA not before: Wed 16 Mar 2022 07:37:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35543
IP address blocks: 2a12:a4c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590697 (0x90369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 16 07:37:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=938f85c38d31c492498b8e613b5bffafca3d68bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:c0:e9:3b:4c:c3:12:c2:3b:39:3f:bd:ac:
26:f7:c0:76:a0:e9:26:4c:e1:64:9a:65:b4:1d:ee:
68:e0:67:e0:25:83:3e:22:2e:71:b1:4b:ea:a1:75:
d8:b9:e8:98:c0:94:a9:43:3a:60:29:cc:af:66:3d:
c6:47:d1:de:9c:ed:73:45:51:ea:3c:b5:3e:5c:9b:
48:3a:7a:ae:50:0f:c5:8f:2c:1c:d4:83:84:63:ba:
48:b6:f8:3a:ff:db:b1:0c:ad:67:ee:49:c1:dc:48:
d5:75:ca:96:fe:88:9e:93:5b:f0:05:ae:c3:a3:00:
c8:89:4c:e3:39:a4:07:e0:2a:c3:9a:a4:b9:99:ff:
16:82:2e:8f:2a:67:21:3a:30:3f:3d:c0:1f:04:f1:
1d:05:2e:0c:2f:20:c4:43:96:04:44:16:1c:24:a6:
76:14:14:5e:6f:c3:20:65:eb:5b:5c:a6:ae:5a:66:
3c:73:82:9e:05:57:f3:ce:b5:67:41:d4:aa:ac:8d:
1c:fd:c9:2b:25:7e:b3:49:35:1b:3f:46:c9:66:3f:
31:1a:8d:a0:87:bf:81:a1:32:23:73:0b:aa:d9:03:
8c:64:f8:43:3f:22:d5:5e:9b:40:c6:e7:95:33:e9:
8d:be:b5:3c:15:f8:2c:64:c5:55:ef:a2:9d:b2:be:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:85:C3:8D:31:C4:92:49:8B:8E:61:3B:5B:FF:AF:CA:3D:68:BF
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/k4-Fw40xxJJJi45hO1v_r8o9aL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a4c1::/32
Signature Algorithm: sha256WithRSAEncryption
87:f2:5a:32:88:ad:b8:65:95:02:1f:c6:41:ef:72:ec:14:04:
08:89:69:65:33:2a:2b:23:5f:ed:0a:79:96:42:7f:7e:52:4e:
64:ad:8f:48:97:33:ab:74:a4:e9:37:3d:2e:51:95:64:18:0c:
fd:05:d3:e9:f0:9f:6c:c7:35:c1:12:91:5b:27:5b:b5:68:cb:
5a:47:20:3f:9b:1a:d8:b2:8c:84:7d:bd:df:ca:12:6b:c2:4b:
a4:f2:94:b8:9e:89:cf:d4:7d:28:1a:39:33:eb:1f:7d:02:83:
97:af:fc:fa:bb:0d:9f:43:60:52:fa:d7:ae:a9:38:c7:3e:73:
88:4a:e5:be:39:64:d2:2b:1b:70:c0:de:7a:0f:bd:7e:96:5e:
cf:a4:6d:52:eb:32:a9:6d:cc:2e:fa:3a:2e:d4:4f:af:f0:12:
bc:78:4f:12:f2:1d:a1:d6:d2:95:b2:5d:be:9c:24:53:7b:80:
b8:a8:1e:2d:fc:3d:8e:43:66:3f:6c:61:62:6e:2e:91:6a:b3:
9a:de:c9:63:2f:ad:3b:d3:f0:1b:54:50:7a:1d:68:f4:29:ae:
92:81:35:b3:8f:ac:65:31:42:d7:71:57:10:23:5e:f9:08:63:
29:63:b6:27:2b:2d:b2:f9:0a:5d:52:ef:df:c2:92:95:0e:2d:
7c:0b:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:10 2025 by rpki-client