Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_6J0-jYMhT9oenhF8Ki_TSsUP84.roa
File: _6J0-jYMhT9oenhF8Ki_TSsUP84.roa (raw, json)
Hash identifier: BvlmUjhORqFo+0Ri03xpMB1yB6lE/pSSq6BB+QI/Pfc=
Subject key identifier: FF:A2:74:FA:36:0C:85:3F:68:7A:78:45:F0:A8:BF:4D:2B:14:3F:CE
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CABAB3B1C7791E74CC3AB7CE4A941
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_6J0-jYMhT9oenhF8Ki_TSsUP84.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203472
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ab:ab:3b:1c:77:91:e7:4c:c3:ab:7c:e4:a9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffa274fa360c853f687a7845f0a8bf4d2b143fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:09:31:35:3f:2f:81:0f:43:6a:92:c5:f6:
c1:2b:db:a5:08:83:56:30:2c:04:43:77:c6:8c:14:
6c:f4:65:d6:9b:d2:b7:1e:cc:b8:32:97:fd:3c:a8:
77:fa:8d:c0:63:51:48:11:81:20:69:67:9a:c4:5c:
34:7b:84:2c:9a:72:cb:8a:84:c6:6e:71:79:e6:50:
ae:15:11:88:8c:a3:f3:4d:2c:a3:b3:03:95:19:a5:
70:e3:22:66:16:b6:e8:25:31:73:81:11:f8:b2:34:
7e:02:9d:62:f2:e9:95:1f:62:34:a7:7d:a0:11:85:
2a:67:04:0d:24:eb:62:0b:69:ef:84:09:08:5d:ac:
47:ff:68:07:64:c7:6f:94:99:94:8a:31:1c:3d:54:
58:33:6a:4e:03:4f:6a:c9:d7:96:f1:a6:8b:1c:df:
ef:f1:7d:de:9a:8b:a8:46:d7:05:43:69:b9:2d:43:
43:fa:c7:ac:6a:3f:e4:4b:ef:5f:d4:3f:c3:fe:31:
b4:64:4d:26:f7:cd:af:81:f7:1d:b2:97:e8:1c:68:
6f:b6:0f:da:4b:eb:08:14:b7:42:0f:c1:56:62:c3:
20:01:55:d3:d1:d0:b1:c4:ce:90:b3:ae:d6:cf:11:
b8:a0:dd:ad:ad:c3:d2:73:f3:a6:23:6c:19:fd:8d:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:74:FA:36:0C:85:3F:68:7A:78:45:F0:A8:BF:4D:2B:14:3F:CE
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_6J0-jYMhT9oenhF8Ki_TSsUP84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
08:12:ff:de:4f:67:27:96:bf:52:39:7a:8d:69:6c:f5:35:f7:
2f:7d:4f:a3:f0:ce:e3:fe:ca:f3:8b:5e:79:45:fb:16:a2:47:
9a:e4:ee:ca:01:aa:df:40:74:ce:1d:db:2a:2d:02:3e:ee:95:
33:4c:d6:81:c6:09:ad:01:e1:c5:0e:99:c5:e1:f0:82:86:0f:
1f:90:55:dc:97:dd:a5:26:4a:7f:dd:af:95:40:9a:ed:f0:6c:
7e:36:dd:b0:29:63:38:af:b7:a7:b9:3a:41:e6:48:03:f5:e8:
52:d0:94:d2:3e:7a:b6:77:af:e0:d6:dd:dc:e2:af:88:84:97:
61:e2:1e:48:d9:fc:e0:8d:b0:0e:87:e7:12:61:4c:30:d0:76:
90:aa:30:3d:86:1c:37:ce:67:91:2f:9e:d7:72:77:99:66:a4:
8a:8b:e8:ab:09:a4:f8:cd:9b:c7:ce:2f:25:ce:3d:8b:df:c2:
2f:f7:26:13:7f:f2:01:b4:f9:ec:b1:c6:5c:e0:65:d0:5d:02:
49:dd:81:78:0b:ea:bf:a4:2e:6c:3f:c1:dd:83:b1:5b:95:9b:
97:12:e0:22:8a:e6:7e:d0:55:a2:f7:90:84:3e:93:5b:04:51:
2d:ec:9a:2c:28:f8:9c:44:4e:8b:9e:a2:c1:c7:98:b5:dc:83:
98:77:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:36 2025 by rpki-client