Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/TN49R3ZZAseMdUaXG_YWWOoRI2g.roa
File: TN49R3ZZAseMdUaXG_YWWOoRI2g.roa (raw, json)
Hash identifier: 7Qw7k3LuCJTjvbOqdvAVvFOJWBD4tAS1YJM0hxUFZQQ=
Subject key identifier: 4C:DE:3D:47:76:59:02:C7:8C:75:46:97:1B:F6:16:58:EA:11:23:68
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01836D40373019BA376CE9B3BD506EC71A6B
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/TN49R3ZZAseMdUaXG_YWWOoRI2g.roa
Signing time: Sat 24 Sep 2022 02:07:48 +0000
ROA not before: Sat 24 Sep 2022 02:07:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202888
IP address blocks: 2a12:3fc2:bb00::/40 maxlen: 48
2a12:3fc2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6d:40:37:30:19:ba:37:6c:e9:b3:bd:50:6e:c7:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Sep 24 02:07:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cde3d47765902c78c7546971bf61658ea112368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:2d:b2:6c:09:c4:51:6f:18:c7:69:4b:40:
a6:6f:34:25:df:d9:6b:12:65:a8:c8:d0:93:20:5d:
3c:04:0b:06:c7:76:ec:17:89:70:73:67:44:c5:38:
5c:cd:32:e7:13:5b:4b:36:cc:9f:c0:ec:dd:c6:d6:
fe:61:b2:c4:1b:ae:c3:70:e4:76:4d:9e:28:e9:42:
52:23:c8:10:3f:5f:98:74:f9:51:f6:76:f5:56:1c:
21:76:df:e8:65:66:62:82:c2:fe:df:b0:ff:95:48:
4a:16:d2:85:95:8c:e0:97:c5:2d:91:a4:3e:4e:7a:
31:36:83:fd:cd:e1:59:41:26:00:32:d5:36:bf:91:
34:eb:75:5f:6a:1e:2f:b2:73:27:20:66:32:7d:a8:
1d:62:da:93:cd:de:14:df:05:31:da:d7:3d:c5:f5:
46:72:c1:9b:0d:9e:00:eb:15:f7:0d:72:3e:fe:48:
60:fe:49:da:1d:63:f4:18:bd:7f:26:5e:35:5e:1a:
32:e4:71:b5:4b:f3:fc:7e:55:88:6f:ba:fa:75:02:
32:38:ed:3f:a4:e6:bd:a4:d1:d4:8f:01:92:2f:51:
9a:7c:1f:e1:4b:b7:f6:1d:95:3f:ba:45:24:0f:06:
04:2c:3f:92:bd:da:df:ce:e0:dc:08:66:38:65:6d:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:3D:47:76:59:02:C7:8C:75:46:97:1B:F6:16:58:EA:11:23:68
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/TN49R3ZZAseMdUaXG_YWWOoRI2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
08:a0:98:56:2d:03:9b:6f:06:d8:9f:2e:e1:09:7d:01:33:b9:
3b:80:80:41:cf:55:7a:80:f2:4a:57:32:0a:bf:49:74:d1:20:
95:1a:fb:cc:0a:e8:6a:cf:56:f0:f0:2a:1b:20:c7:5e:df:da:
ba:99:fb:00:54:b5:06:89:e5:d8:1b:11:13:45:ff:ab:f8:5e:
b0:c5:3e:7a:2e:ef:74:83:82:c3:4d:75:f9:30:af:ff:e0:dc:
7b:a6:a6:e4:37:cd:86:dd:e8:63:99:b2:df:fa:e8:61:11:c0:
e1:f3:a2:d6:78:0a:19:22:33:e1:c2:37:06:6b:83:f0:02:47:
cf:c7:c2:29:5f:64:0c:96:d4:06:b1:3c:6c:c3:04:cb:63:a0:
d2:60:28:f8:49:74:92:5d:d6:41:26:e8:e5:b2:91:d1:39:53:
53:0b:aa:9f:37:4c:bd:d7:f3:bb:0f:32:82:db:c1:25:00:6e:
7c:1d:44:c4:89:0f:e9:03:db:0e:5c:9e:84:c7:cd:e3:45:9c:
cc:c7:d9:db:5c:a0:8b:41:85:14:bd:13:00:ba:61:54:f7:0c:
2b:fb:04:a3:01:3c:d8:3d:1e:06:3c:40:9d:21:33:98:79:8d:
f8:69:aa:3c:e5:60:d0:f2:e9:32:26:5d:88:83:0e:53:2d:6b:
ec:03:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:12 2025 by rpki-client