Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/NnQstdsgu7cxP31PugEtcauLgPc.roa
File: NnQstdsgu7cxP31PugEtcauLgPc.roa (raw, json)
Hash identifier: vWifcevmF4dYQN0zqcsDXmrVqErwKlTUpKKB1tgRqgg=
Subject key identifier: 36:74:2C:B5:DB:20:BB:B7:31:3F:7D:4F:BA:01:2D:71:AB:8B:80:F7
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0184FB8D6DD9F98169620D082FA17F6402FB
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/NnQstdsgu7cxP31PugEtcauLgPc.roa
Signing time: Sat 10 Dec 2022 10:21:00 +0000
ROA not before: Sat 10 Dec 2022 10:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a12:3fc2:e800::/40 maxlen: 48
2a12:3fc2:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:8d:6d:d9:f9:81:69:62:0d:08:2f:a1:7f:64:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Dec 10 10:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36742cb5db20bbb7313f7d4fba012d71ab8b80f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:d8:ea:31:96:97:e5:0e:68:d6:13:eb:3a:
c6:38:47:4c:67:1e:17:d5:17:02:17:ff:9f:1a:7f:
7d:ef:94:6d:e7:7c:9d:ca:e5:e6:35:09:be:c8:1e:
04:ed:cf:76:0c:c9:08:74:e2:9d:28:ea:10:86:6b:
38:c2:bd:10:34:b7:d9:6c:97:76:68:b7:90:53:a8:
5a:43:f0:4f:e8:41:49:75:50:ce:5d:a6:46:36:f7:
bc:39:4f:94:49:53:04:d3:a3:5e:ca:a6:58:2f:ba:
59:c4:43:32:bd:07:ad:45:27:86:65:29:89:0f:3e:
88:cb:b2:9e:0f:e5:dc:44:df:b3:d6:ad:13:a8:23:
c7:6e:3d:3a:5c:f4:22:62:a3:4b:78:04:2f:3d:3b:
f1:38:de:08:c2:40:2b:e2:cb:82:62:86:30:d3:9e:
de:4f:15:bf:e9:af:14:69:2e:a3:28:dc:88:2c:48:
78:8d:cb:18:c9:73:5e:c9:4c:4a:e7:2c:ef:50:b5:
7d:b8:5e:af:a7:58:71:f6:7c:98:e2:6a:14:1f:8e:
c7:7a:d1:23:28:05:2f:7c:9f:4a:4d:04:4b:1d:3b:
86:17:49:03:5d:ed:d9:50:e1:7f:ac:9b:70:07:47:
4e:48:a7:93:49:05:e9:ad:3c:2c:1d:64:24:86:96:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:2C:B5:DB:20:BB:B7:31:3F:7D:4F:BA:01:2D:71:AB:8B:80:F7
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/NnQstdsgu7cxP31PugEtcauLgPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:8000::/36
2a12:3fc2:e800::/40
Signature Algorithm: sha256WithRSAEncryption
4f:45:77:67:98:00:3c:3d:01:c1:66:c5:09:01:aa:a3:23:14:
f6:24:ef:49:ed:32:3d:84:5d:03:47:cb:0d:52:b7:58:db:62:
7d:8e:f2:bf:02:68:34:3d:30:99:73:a8:bb:fb:76:2b:b9:cc:
f2:2b:2a:4a:34:e8:f6:b1:7c:5a:a4:bc:cc:16:bb:89:ff:7a:
27:5b:cf:ff:ec:8c:f5:40:fb:d8:40:51:5a:47:5c:41:c1:c2:
13:41:6a:ee:ea:bc:ee:af:28:ff:50:88:cf:09:7b:b2:c2:2e:
df:aa:f8:90:4a:c4:41:65:22:81:56:0a:70:81:da:56:28:b6:
f9:eb:4f:66:2f:51:74:5a:32:66:ab:0d:83:27:f2:b2:fe:a1:
0e:be:d2:00:15:f7:ea:80:17:9c:23:2d:59:89:2e:e6:a5:6c:
e3:55:ea:d6:18:b1:50:db:e8:47:6f:bf:c0:38:3d:58:98:e3:
e4:ae:22:5b:20:d3:e2:8e:70:dd:64:8f:7d:25:9c:8c:4f:b1:
c1:45:fe:04:42:35:f5:b0:0f:ba:d9:d2:15:71:88:0d:d7:4f:
3b:b5:3f:8f:95:9c:64:2c:36:9b:50:12:e2:0c:27:75:99:15:
a8:6e:a9:9c:4f:68:8b:4d:9e:c0:f9:a5:b1:a9:3a:6a:ca:04:
ff:62:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:37 2025 by rpki-client