Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2cam3LBBU8UHmIC7nRyE6zxdd3o.roa
File: 2cam3LBBU8UHmIC7nRyE6zxdd3o.roa (raw, json)
Hash identifier: Winp/y5DNsWtse25YTGu4YYPgHIris3w+DQUdPH3UYY=
Subject key identifier: D9:C6:A6:DC:B0:41:53:C5:07:98:80:BB:9D:1C:84:EB:3C:5D:77:7A
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0183FFC399DD51120ABD6420536BFD808D94
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2cam3LBBU8UHmIC7nRyE6zxdd3o.roa
Signing time: Sat 22 Oct 2022 12:55:52 +0000
ROA not before: Sat 22 Oct 2022 12:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202229
IP address blocks: 2a12:3fc2:aa90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:c3:99:dd:51:12:0a:bd:64:20:53:6b:fd:80:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 22 12:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9c6a6dcb04153c5079880bb9d1c84eb3c5d777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:d9:9c:bb:26:fa:02:3f:37:bb:da:6e:2c:
38:74:43:5c:6a:c4:90:29:ba:3c:15:85:67:e2:46:
2c:cc:60:00:fb:c1:9b:95:20:f8:ee:d1:04:72:88:
df:67:11:00:a0:06:45:05:b2:6d:4e:ce:c3:0b:7f:
e9:73:ac:4b:0e:3f:03:ec:18:6c:ef:f7:6e:3d:ac:
b2:b6:45:af:05:ba:6c:22:c4:9b:fa:7f:54:bf:5f:
f0:3a:6a:8e:a3:e6:b3:3c:a4:05:2c:b3:2f:cd:1d:
94:e8:d3:59:37:c1:55:9d:47:81:db:25:23:68:34:
79:2b:da:b6:9a:c6:d5:c2:a3:11:5a:dd:0a:55:ee:
9b:0b:c2:f2:e4:31:11:6f:8a:91:30:77:e4:ae:4f:
ab:52:72:5d:72:1a:05:25:af:7e:7f:49:57:e0:55:
f0:f5:d7:53:21:19:6a:d9:35:5a:7d:35:fb:e7:d5:
d2:97:da:60:bc:c3:e1:97:3d:6d:a0:dc:15:df:c4:
98:e2:5b:05:f8:97:41:34:1e:d2:42:5e:c1:ad:13:
b7:97:27:29:89:13:b4:1c:2b:c2:64:7e:b1:30:c5:
b3:ec:cc:ab:29:91:a5:f2:7f:99:8b:c9:3b:a9:a4:
43:bf:71:0d:47:04:7d:a9:e9:7a:cd:91:42:4c:7b:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:A6:DC:B0:41:53:C5:07:98:80:BB:9D:1C:84:EB:3C:5D:77:7A
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2cam3LBBU8UHmIC7nRyE6zxdd3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa90::/44
Signature Algorithm: sha256WithRSAEncryption
73:30:54:04:69:f6:81:ff:70:9d:38:fe:c7:93:af:85:49:35:
95:e5:23:0c:19:66:a5:5b:5e:f5:b4:e2:45:f8:e6:a1:89:80:
45:1d:8f:e0:c7:ac:91:67:43:1c:a8:57:5b:06:25:da:a2:23:
e7:d5:a2:d5:7f:f2:da:a7:3a:aa:eb:8f:9b:52:86:f7:aa:ad:
8f:0e:f2:df:0f:31:4e:48:0d:3b:4d:dc:c2:24:b8:ed:0a:4b:
a3:0d:73:e6:60:7f:f8:1e:77:79:00:56:97:5b:91:89:2f:94:
7d:14:89:e9:2f:28:e4:9c:28:d7:69:91:92:18:df:92:af:c7:
ab:f2:b8:ef:20:33:4e:81:22:5e:a2:b9:63:2c:aa:e4:68:f3:
0d:ae:e4:33:44:a5:cc:06:a8:5c:62:07:84:57:db:82:18:bf:
d4:13:a6:35:30:c7:a1:a0:3a:90:ad:a0:a9:50:8f:e4:63:dc:
51:8c:b0:1a:1a:b1:93:ae:66:8d:3f:6d:eb:20:7b:d7:84:4b:
5d:b3:44:5e:4f:70:29:78:e0:2f:62:1e:b8:d7:26:6a:d7:cf:
09:de:c3:69:da:58:03:04:c1:c4:fa:d5:93:1e:40:96:59:8d:
58:0f:36:e0:19:eb:d7:7d:42:85:be:cc:6b:8f:df:e8:0a:6b:
84:0c:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:53 2025 by rpki-client