Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/0Z_U0-6JncSUG3pU-jXx8T1PRGg.roa
File: 0Z_U0-6JncSUG3pU-jXx8T1PRGg.roa (raw, json)
Hash identifier: Mir3lp3otknAoeWYFz8cexyNQZSn8G+v0iDnhQttdHU=
Subject key identifier: D1:9F:D4:D3:EE:89:9D:C4:94:1B:7A:54:FA:35:F1:F1:3D:4F:44:68
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067ECFC77FA4CDD11D502ACCEBA07E7
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/0Z_U0-6JncSUG3pU-jXx8T1PRGg.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203236
IP address blocks: 2a12:3fc2:aa10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:fc:77:fa:4c:dd:11:d5:02:ac:ce:ba:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19fd4d3ee899dc4941b7a54fa35f1f13d4f4468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:00:a7:3c:aa:02:8d:a1:01:e6:5f:54:9b:
bc:e5:6c:2e:67:46:46:05:67:f0:f0:7c:da:64:d6:
24:1b:23:93:b7:68:27:53:41:c8:11:3f:75:c2:3e:
fc:dc:a7:28:0c:44:4d:77:bd:90:17:b6:27:b3:bd:
7d:f9:c3:05:66:e2:66:c1:6f:9d:f5:49:d5:1f:3b:
18:fa:09:c2:7f:8e:ad:db:ea:2c:d5:62:92:85:6a:
9a:17:a2:98:2b:40:76:4b:43:d4:e3:be:a8:d4:36:
f0:78:c6:93:aa:1f:a8:16:a0:b2:e6:01:4e:54:19:
34:f9:f9:7c:4e:11:54:35:97:f2:97:5b:be:9b:6f:
7d:8c:ea:03:28:7a:19:35:33:e9:1f:be:83:f1:a0:
77:ea:d8:b7:ff:b7:1c:cf:37:6b:c8:e0:51:c1:d5:
06:04:99:c3:8e:50:0b:1c:40:d9:bf:e7:45:02:51:
9b:07:35:e4:d8:f4:2d:55:3d:08:ea:5f:95:00:6e:
80:14:92:26:af:43:01:9d:04:bd:91:44:b5:8b:b4:
6b:f1:aa:c8:d2:e2:0e:8a:70:dc:7a:62:99:03:66:
bf:d7:8f:55:e6:b4:be:4f:e7:fe:70:0f:61:00:26:
b5:bc:df:b9:a7:4f:3b:77:56:da:7b:f2:6c:f4:8e:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:D4:D3:EE:89:9D:C4:94:1B:7A:54:FA:35:F1:F1:3D:4F:44:68
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/0Z_U0-6JncSUG3pU-jXx8T1PRGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa10::/44
Signature Algorithm: sha256WithRSAEncryption
90:d9:cb:51:54:7d:f0:f4:8f:8b:fa:22:bf:35:96:d0:04:07:
1b:13:47:bc:42:b5:5f:79:be:56:40:58:6c:e3:53:14:ad:ab:
65:67:31:cc:43:4a:19:8a:ad:72:0e:29:6c:f6:08:d9:ea:bb:
bc:8a:25:39:1f:11:ce:b0:04:56:5e:93:54:7d:5f:1e:9a:ae:
33:9e:1d:2e:da:69:98:e4:00:92:83:b2:9e:ba:eb:59:57:57:
9a:84:53:32:94:4c:10:84:16:f3:77:2c:3a:21:40:89:8f:6f:
47:11:63:f0:75:d0:4c:a8:82:9f:5e:05:7d:aa:f4:75:a7:74:
c1:c3:d9:21:55:71:91:5e:6f:d9:51:57:d5:4a:61:05:8a:1e:
11:50:27:66:f1:b3:8c:19:08:11:11:93:ea:2e:4e:cb:33:e8:
15:2d:08:71:3e:d5:2b:89:6d:e3:10:4d:08:04:f6:ed:6f:01:
36:2e:64:7e:25:af:2f:20:19:3a:98:38:93:6e:d9:9a:fa:99:
58:af:53:27:26:fa:0c:78:1e:8a:32:8a:f7:95:c7:17:21:ce:
b5:20:b1:ad:06:ef:a6:46:08:9e:c3:22:9b:cf:40:2c:96:36:
76:af:24:b1:a9:c4:96:97:5b:64:4a:c2:cc:df:e9:7e:79:99:
a0:e8:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:25 2025 by rpki-client