Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OJSg2Et4jcfVPiw3v_LTrD99Ibk.roa
File: OJSg2Et4jcfVPiw3v_LTrD99Ibk.roa (raw, json)
Hash identifier: W/NDveiw+q48z/E5O4ihVSlBVuAB0lzZJRS6YssRrsw=
Subject key identifier: 38:94:A0:D8:4B:78:8D:C7:D5:3E:2C:37:BF:F2:D3:AC:3F:7D:21:B9
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0183CF2ED578512FC0B30A3562170E559AAC
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OJSg2Et4jcfVPiw3v_LTrD99Ibk.roa
Signing time: Thu 13 Oct 2022 02:31:36 +0000
ROA not before: Thu 13 Oct 2022 02:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203236
IP address blocks: 2a12:3fc2:aa10::/48 maxlen: 48
2a12:3fc2:aa10::/44 maxlen: 44
2a12:3fc2:aa11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cf:2e:d5:78:51:2f:c0:b3:0a:35:62:17:0e:55:9a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 13 02:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3894a0d84b788dc7d53e2c37bff2d3ac3f7d21b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:ed:b4:0b:e9:c1:70:dc:30:12:15:f6:33:
42:6e:19:f1:a9:55:96:d2:b4:8d:0f:08:f9:0f:d2:
13:9e:66:cb:ad:34:70:3a:12:1b:94:44:4e:85:39:
34:04:c9:cc:01:5d:01:80:6c:58:2a:d7:d0:9e:91:
96:dd:72:3c:30:aa:d3:a9:4e:9b:d2:93:0c:cd:51:
96:36:07:cb:4a:c9:23:5b:c6:87:bc:a0:9e:b7:65:
b1:57:d5:2f:12:1e:08:05:93:3f:c4:b6:c4:9b:d5:
e7:3f:5f:c4:fc:63:3a:d6:b6:63:49:c8:63:d6:2f:
cf:f2:4a:67:30:08:a2:c8:38:74:32:2d:bc:96:0e:
1b:39:7e:64:e8:df:13:0e:60:d4:5e:ac:a4:e0:42:
0f:00:ac:64:09:f5:bd:b0:6d:f2:60:a7:70:a9:f5:
57:07:29:05:f8:fe:14:42:cf:c3:28:2b:89:95:ae:
f8:2b:af:26:6c:c0:f1:12:ff:45:76:31:14:b7:07:
48:b7:ff:2b:37:ab:66:02:eb:cd:ea:1d:ca:ee:f6:
f6:51:f8:9b:ab:02:0f:df:10:59:a5:86:fc:ca:48:
a3:08:92:cf:26:e7:b5:d5:b5:2a:57:06:ab:f8:eb:
21:73:07:a1:db:4c:cd:c6:ab:58:58:ee:4d:f1:fd:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:A0:D8:4B:78:8D:C7:D5:3E:2C:37:BF:F2:D3:AC:3F:7D:21:B9
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OJSg2Et4jcfVPiw3v_LTrD99Ibk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa10::/44
Signature Algorithm: sha256WithRSAEncryption
7a:71:47:ff:25:c4:90:da:9e:7c:a6:b8:c8:cb:02:80:ad:37:
d2:7a:2d:10:5e:51:87:39:12:39:db:b5:69:fa:0e:90:f6:17:
ea:76:36:94:ab:fc:cb:3c:a2:9c:70:73:72:28:51:ce:71:8c:
b7:7c:37:fa:1b:c7:79:3c:1a:52:fc:f7:31:cd:ae:b4:25:dc:
74:50:04:9a:5c:b8:0f:db:38:4c:07:6a:0d:63:7d:3c:69:dc:
d5:d9:f3:17:56:80:4a:82:86:12:53:55:1f:26:54:a2:bc:de:
53:76:df:70:93:ac:f7:c6:3a:c1:fe:b0:ac:ba:6a:f1:60:9f:
31:22:18:19:3b:8c:f8:46:94:2d:83:93:c4:aa:58:a9:8b:91:
6a:41:3e:3a:bc:59:56:3a:ec:aa:e5:e0:e6:75:29:fa:e9:7a:
20:7f:12:e1:32:c1:fd:19:0b:77:05:76:7d:56:94:4a:60:33:
98:9c:31:4f:03:2f:27:0e:ad:8a:7d:32:9e:d9:4f:68:c7:85:
28:d3:b2:f9:a6:32:40:dd:b4:93:3e:48:00:61:e5:55:01:55:
20:78:8c:5e:b5:47:9e:72:16:c7:25:b2:da:ac:83:b0:87:f9:
de:75:d7:1f:90:96:b0:d9:98:14:fc:c1:bd:94:59:75:c9:b5:
80:24:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:01 2025 by rpki-client