Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/K6dF15GqT6eppxoEOhu5r3_R23s.roa
File: K6dF15GqT6eppxoEOhu5r3_R23s.roa (raw, json)
Hash identifier: x+atByB7o/FdIzfHqeqNg8YrSnmr/OwGx/SyrU3x2ck=
Subject key identifier: 2B:A7:45:D7:91:AA:4F:A7:A9:A7:1A:04:3A:1B:B9:AF:7F:D1:DB:7B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA738EF338A866097693CB59EEA94
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/K6dF15GqT6eppxoEOhu5r3_R23s.roa
Signing time: Sun 01 Jan 2023 06:54:55 +0000
ROA not before: Sun 01 Jan 2023 06:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202229
IP address blocks: 2a12:3fc2:aa90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a7:38:ef:33:8a:86:60:97:69:3c:b5:9e:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba745d791aa4fa7a9a71a043a1bb9af7fd1db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:b8:02:a0:b3:84:0d:35:ab:67:7b:56:1e:
4f:07:3e:43:a1:97:06:a6:65:54:5a:c6:88:6e:99:
27:ed:dd:43:9d:08:37:1a:3c:3e:cb:fa:88:c8:1a:
ce:00:99:bd:26:a2:41:6c:85:dd:83:ed:dd:ef:50:
35:f8:4d:33:27:6c:4d:bd:71:4b:6f:d0:df:d7:ec:
4a:91:66:21:bf:71:1e:52:aa:78:d8:4f:29:50:d0:
4f:dd:5a:72:6f:73:41:3a:86:ef:36:64:97:99:52:
cd:89:a1:d9:13:b5:41:68:46:f7:44:e9:8b:82:a6:
67:8b:8c:b9:3f:7b:14:ca:4c:de:d1:17:c1:a1:e5:
27:29:32:5a:ed:27:fe:3a:80:11:6b:fd:18:40:ca:
04:b6:d7:fa:03:a4:20:9b:13:c1:dd:ab:45:af:a5:
19:2b:4b:3e:37:95:d7:43:70:89:0a:d4:67:73:05:
0d:b0:31:a9:a3:b8:d6:e6:07:de:f6:71:03:5e:fe:
8a:22:82:7e:b6:84:b4:c4:e1:da:e4:0e:93:24:f9:
68:a1:4f:28:5d:7f:20:e7:87:7c:8f:f4:17:b1:45:
5b:be:88:ab:40:52:8f:61:79:76:51:d6:7d:b5:d9:
0e:f7:f0:22:a3:78:88:e5:3b:f0:e4:a0:b8:4a:96:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:45:D7:91:AA:4F:A7:A9:A7:1A:04:3A:1B:B9:AF:7F:D1:DB:7B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/K6dF15GqT6eppxoEOhu5r3_R23s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa90::/44
Signature Algorithm: sha256WithRSAEncryption
db:0b:97:1a:f1:94:9a:4e:a9:a6:f4:43:de:02:71:d3:96:c0:
d6:f2:df:52:d2:49:21:cd:e8:6c:d8:c1:3f:19:68:64:14:5a:
63:e6:e7:36:ca:54:92:ea:68:67:76:d7:e5:b7:d9:af:6b:9c:
c5:46:9f:31:40:e4:a7:72:48:7f:5d:d5:24:a8:52:fa:9a:d7:
83:d4:25:7d:c3:c0:f6:51:28:0d:1d:f7:03:09:e9:ee:b6:eb:
c1:e2:93:5f:d8:31:49:ec:b4:86:ff:97:85:c8:45:46:69:2c:
91:42:64:b7:70:a3:c2:f6:5f:20:ba:01:19:93:c9:81:d1:59:
5b:5b:a2:65:98:87:38:ce:ad:b4:06:d7:fc:61:c2:ce:13:9c:
8d:ee:3e:63:49:d4:9f:47:80:80:f2:0c:f6:13:e3:2c:eb:f6:
2a:2f:19:2f:80:f0:4a:54:2c:be:16:61:1f:d2:1d:63:4c:06:
b7:10:3b:69:ba:25:b8:20:4e:97:14:91:cf:dc:1b:03:6c:4a:
8f:57:b9:f6:3d:bc:85:88:58:a7:e1:34:65:27:ee:52:58:67:
fb:8a:b8:ba:61:3e:7a:1e:de:5c:89:f5:b7:dc:7d:0d:76:6f:
df:b1:bf:97:df:da:72:dc:1a:3e:cf:ed:f8:14:d7:fb:fc:e7:
74:a2:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:18 2025 by rpki-client