Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/DcHcpqcnif929LzTGPMRselr9hI.roa
File: DcHcpqcnif929LzTGPMRselr9hI.roa (raw, json)
Hash identifier: bltTKBDbv576kNZ6zW/kTkARqZ0FL2XpKL/oZi82jxM=
Subject key identifier: 0D:C1:DC:A6:A7:27:89:FF:76:F4:BC:D3:18:F3:11:B1:E9:6B:F6:12
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018B1999DE63B118C371585B3F86CCCC8302
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/DcHcpqcnif929LzTGPMRselr9hI.roa
Signing time: Tue 10 Oct 2023 12:39:56 +0000
ROA not before: Tue 10 Oct 2023 12:39:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48771
IP address blocks: 2a12:3fc0:4877::/48 maxlen: 48
2a12:3fc7:7000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:99:de:63:b1:18:c3:71:58:5b:3f:86:cc:cc:83:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 10 12:39:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc1dca6a72789ff76f4bcd318f311b1e96bf612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:ce:1a:93:8f:3b:35:04:71:f6:38:2e:01:
ca:00:f2:51:da:6b:99:f0:22:3a:67:ff:c8:48:e5:
b5:6d:4d:c3:52:ac:c9:5c:3c:c5:2a:2c:4f:fd:0b:
50:98:00:11:63:a4:4a:26:58:37:60:a2:15:05:40:
09:4c:e7:21:ba:bd:75:07:bd:c8:ed:93:5b:65:36:
d0:8f:98:63:da:50:55:57:5f:10:a9:e3:5d:97:ab:
21:d4:b5:52:77:39:3c:06:b0:20:f5:33:d3:b4:71:
8e:eb:55:be:cc:df:12:b8:e4:36:7e:13:b5:97:a4:
1a:bc:08:fa:33:97:16:4e:6d:cf:ba:dd:ca:eb:fd:
97:8f:5c:e8:da:f6:85:86:a5:d4:f7:cf:3e:e0:9b:
eb:b4:5b:1c:c0:44:59:69:96:79:b1:1b:f5:5b:85:
58:d7:da:ed:8c:b5:dd:65:2c:b8:7b:95:77:1a:65:
94:c9:bf:89:16:38:ba:79:72:d6:10:6a:5e:8b:00:
f8:d8:44:25:86:76:62:84:32:7e:72:2d:13:c0:d0:
7d:fc:d3:c5:1b:65:a3:bb:c3:b8:f9:1d:ee:65:2e:
7c:92:cb:4f:75:ea:e3:e0:d8:d7:7b:a3:5f:18:8b:
a1:75:81:f0:06:0c:28:48:52:a6:b4:c3:e1:86:90:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:DC:A6:A7:27:89:FF:76:F4:BC:D3:18:F3:11:B1:E9:6B:F6:12
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/DcHcpqcnif929LzTGPMRselr9hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc0:4877::/48
2a12:3fc7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:9f:5a:aa:2c:e3:e5:c6:70:49:86:f9:ae:a1:15:45:1f:e6:
fc:a2:d2:08:a3:be:a8:ba:16:c0:b9:a3:10:f9:6e:f0:a4:d7:
2a:2d:77:b6:8a:18:d5:74:58:3a:a3:2a:2c:14:d0:70:ba:34:
8e:79:29:49:e8:d7:97:4a:e3:1f:8f:98:3c:e2:df:d2:dc:14:
f1:36:da:b8:d0:89:d6:ed:f9:07:ce:76:c7:7a:80:56:d4:ff:
0b:b2:08:43:9b:17:dc:c1:99:e5:aa:58:87:08:c5:28:06:4b:
2e:9d:64:94:27:20:7c:07:de:b3:66:20:d0:cc:f0:73:ba:67:
9a:cc:4a:cb:18:a8:4c:92:8e:23:09:7a:e4:4d:af:10:d3:ee:
51:13:aa:c9:19:cb:96:d6:5f:07:02:de:a5:71:0d:ad:7d:34:
d3:fe:84:ce:99:97:00:57:29:e3:af:cb:1e:6e:a2:47:fb:84:
c6:6c:da:df:b8:db:bd:69:4e:b9:5b:63:12:de:26:de:08:51:
8b:f9:6e:b0:91:ee:cb:51:e1:c5:73:03:59:b0:0d:83:f0:d6:
e3:5f:69:b2:0c:63:b5:b8:a4:2c:d2:e9:bd:8a:d6:ce:3e:04:
61:af:b4:0b:aa:9f:3d:41:48:c8:0f:56:f9:e5:96:f9:2c:cc:
52:0d:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:56 2025 by rpki-client