Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SSoWCYG2yxj_zXr2kIUgksrkdYM.roa
File: SSoWCYG2yxj_zXr2kIUgksrkdYM.roa (raw, json)
Hash identifier: YKsKBO0Pa7Mm9EFTrVqXvh20dGXXGVhjgPW9H2byREI=
Subject key identifier: 49:2A:16:09:81:B6:CB:18:FF:CD:7A:F6:90:85:20:92:CA:E4:75:83
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CAFAB12B4489EF9BD61CF940849F4
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SSoWCYG2yxj_zXr2kIUgksrkdYM.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211051
IP address blocks: 2a12:3fc2:ab50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:af:ab:12:b4:48:9e:f9:bd:61:cf:94:08:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492a160981b6cb18ffcd7af690852092cae47583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:35:48:3f:ec:1a:65:ca:63:d9:d0:63:48:
fa:fc:1e:fb:26:e1:d5:5c:a4:ae:7f:6e:e0:56:cb:
ad:b2:fa:dc:6c:67:45:9b:5a:24:13:78:62:78:28:
e4:84:97:3f:c9:7f:17:ec:ea:e5:e4:5a:ae:fc:03:
ce:1b:01:e2:ee:5b:82:15:5b:c2:15:6e:bf:53:4e:
3f:b1:ec:84:2f:1a:1c:67:12:10:bf:c4:37:ad:64:
c6:ff:68:32:51:5e:d0:4d:be:77:c3:3b:80:9b:7d:
08:52:b3:24:31:bf:f2:4e:89:79:2f:85:ca:2c:1b:
2b:b8:76:ad:95:56:1f:8f:0e:4c:f9:e0:70:df:b7:
4e:95:62:33:06:24:cd:91:7b:96:a8:8d:99:a8:ed:
16:f7:2f:ef:bf:07:3a:0d:14:98:a9:d9:95:bb:75:
91:97:e8:8f:f5:e8:c9:66:24:0e:8d:05:9e:b1:7b:
b7:a3:90:3a:77:5b:72:06:f7:8b:6e:74:20:0d:ca:
ea:b7:21:a0:cb:6b:72:5e:b4:f1:59:2b:78:48:69:
19:17:a7:93:81:60:10:18:6e:8b:fa:fc:88:09:1e:
68:82:f2:4b:ce:25:1f:7b:1f:89:4c:54:24:6b:54:
8d:9c:06:1a:89:d7:2d:6a:77:f4:5f:ed:dc:a3:a5:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:16:09:81:B6:CB:18:FF:CD:7A:F6:90:85:20:92:CA:E4:75:83
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SSoWCYG2yxj_zXr2kIUgksrkdYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab50::/44
Signature Algorithm: sha256WithRSAEncryption
97:80:0d:97:06:6b:6b:6e:4b:82:0a:18:84:97:09:2b:29:eb:
d9:9a:c3:3b:cd:4d:ab:9b:a7:c5:09:2a:30:45:f2:3a:cd:ea:
f5:ec:85:3f:8e:26:13:a5:5d:ba:95:4e:6a:36:6e:83:48:92:
50:96:69:59:47:5c:6d:ba:04:3a:36:f6:8a:0e:e8:60:c0:6e:
ec:2e:e1:8f:c6:20:72:6c:7a:f5:15:75:85:5c:26:4a:45:6e:
b1:64:4f:e3:a2:34:04:98:0c:31:86:f2:42:19:d9:01:78:e4:
ba:48:d5:ba:40:83:12:14:23:b9:7c:bb:c5:d5:2a:cd:02:48:
12:ec:7b:91:d8:55:48:3f:4f:17:9a:30:82:bd:be:e4:ee:98:
28:0e:d1:27:a3:26:86:71:72:44:a0:f2:c6:a7:78:c7:d2:0d:
1a:ca:45:db:12:a7:f1:f1:ab:54:3c:94:72:3a:e2:23:d5:27:
83:38:a6:03:7e:ef:44:b7:43:5d:e1:10:ac:48:f5:c0:47:e7:
8c:40:32:05:f5:37:da:b8:a8:9a:1b:0e:a8:29:57:ee:ac:d4:
7b:69:76:1a:60:88:41:d7:04:01:b9:f8:ae:a4:58:76:01:05:
c6:14:d7:0b:e2:b1:b8:b3:77:6b:53:12:8f:a3:61:c6:ae:0d:
fd:8c:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:28 2025 by rpki-client