Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5mwXOt_gG1pPmVNI2TlA0LstRwo.roa
File: 5mwXOt_gG1pPmVNI2TlA0LstRwo.roa (raw, json)
Hash identifier: BrBk3H0RJ7dSra/xP2YPIL0v4qOQGeuHXjkS52iKIfc=
Subject key identifier: E6:6C:17:3A:DF:E0:1B:5A:4F:99:53:48:D9:39:40:D0:BB:2D:47:0A
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0183303A8068A36603AD3AD6521E2D383503
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5mwXOt_gG1pPmVNI2TlA0LstRwo.roa
Signing time: Mon 12 Sep 2022 05:44:43 +0000
ROA not before: Mon 12 Sep 2022 05:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202888
IP address blocks: 2a12:3fc2:bb00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:3a:80:68:a3:66:03:ad:3a:d6:52:1e:2d:38:35:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Sep 12 05:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e66c173adfe01b5a4f995348d93940d0bb2d470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:c3:45:8c:12:19:c1:65:3a:f0:cf:6b:f0:
e4:3e:1c:a0:12:95:ce:2d:50:b5:d1:3f:61:c8:44:
05:98:88:ee:9f:d8:b1:34:30:46:b0:53:85:9b:64:
f4:40:22:42:31:8c:2a:59:5e:db:d6:4d:8f:a2:b9:
6f:6e:fc:b6:23:83:6c:2a:62:c0:f2:cd:87:b0:be:
1c:de:2a:6c:77:42:a0:2d:8b:b8:5b:e8:62:e1:8f:
c9:c7:ad:5f:1b:cc:b5:57:65:06:f0:68:a0:a8:67:
fe:04:ea:d2:f8:27:76:ec:be:3f:11:3e:5a:c2:28:
64:d9:78:6b:59:84:3c:f7:64:3b:1a:60:80:12:9b:
74:b7:02:98:d0:a1:aa:2a:2e:03:15:4a:b9:83:5f:
85:bd:aa:d6:e9:9c:b0:8b:db:8c:07:7c:f6:4a:ca:
0f:0d:ad:26:62:88:74:6a:3b:eb:92:30:6d:8a:80:
cf:a5:02:fd:b1:c6:dc:fb:58:f2:a8:64:4b:55:47:
83:4b:cc:37:e8:6c:33:1e:72:69:b0:85:88:1f:a1:
d2:46:b5:b7:d1:ff:f3:06:6e:83:11:c7:1c:c2:83:
80:99:7a:0e:29:bb:6e:98:22:8b:d9:07:8a:59:74:
49:f4:15:5e:d2:de:e1:11:19:e2:18:0d:12:aa:28:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:17:3A:DF:E0:1B:5A:4F:99:53:48:D9:39:40:D0:BB:2D:47:0A
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5mwXOt_gG1pPmVNI2TlA0LstRwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:bb00::/40
Signature Algorithm: sha256WithRSAEncryption
a9:ee:cc:11:79:bf:bc:11:11:ce:2e:4d:d0:aa:a4:a2:fa:0e:
66:31:82:e5:36:17:8d:68:b8:44:d0:07:ad:c0:81:3b:f3:cc:
4b:61:95:0c:09:3b:75:20:dc:30:76:0e:ae:f5:7c:60:47:82:
00:44:7f:9a:de:4f:19:3d:56:ec:e2:6b:66:fb:37:63:11:9e:
43:0c:2a:c6:4a:52:ee:e2:11:3e:71:22:30:17:74:35:c9:13:
fc:f5:46:80:0e:c2:a9:2c:1f:8c:59:d8:e9:cb:8d:aa:4b:49:
12:c9:d2:17:ef:50:6b:8f:7d:85:79:d1:a1:b5:c6:0f:74:c7:
8a:23:ac:b0:d0:64:d0:3a:56:69:66:b9:bd:db:bf:ad:f0:a3:
9c:e6:2c:ad:6f:c0:2d:60:86:cf:79:cb:6c:09:7c:eb:89:5d:
36:07:4b:99:42:c0:a1:2c:97:52:91:61:1d:65:ea:92:6b:7f:
c2:d7:8e:bd:9a:a6:db:02:23:76:25:dc:5f:11:7f:8b:ba:50:
9f:0a:a1:8e:e5:af:66:8a:59:92:79:11:46:7a:4e:c9:b0:c8:
4e:fe:0d:47:66:15:be:d7:a0:ee:7c:80:1e:55:70:b7:18:2d:
c6:0a:d4:eb:bc:00:3b:10:e0:ff:91:38:47:d9:e4:b9:66:f5:
78:28:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:30 2025 by rpki-client