Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/aMnSyxGAkdC7_D64uu2VKZ6wvJo.roa
File: aMnSyxGAkdC7_D64uu2VKZ6wvJo.roa (raw, json)
Hash identifier: Gxho0l3pLJnsydpNO4OVYIPqeQSSZYieGnLJGpusKsw=
Subject key identifier: 68:C9:D2:CB:11:80:91:D0:BB:FC:3E:B8:BA:ED:95:29:9E:B0:BC:9A
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA5B11AFB14C81D1AE06366D29ADE
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/aMnSyxGAkdC7_D64uu2VKZ6wvJo.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200949
IP address blocks: 2a12:3fc2:e500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a5:b1:1a:fb:14:c8:1d:1a:e0:63:66:d2:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c9d2cb118091d0bbfc3eb8baed95299eb0bc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:1c:98:b0:f6:d7:14:91:f3:e7:54:aa:fd:
2b:a0:3e:d5:51:2d:0c:c0:57:0c:83:51:6a:c7:f1:
2a:59:cd:9b:86:dd:51:b9:20:3d:d5:8e:7c:7a:9a:
d6:5b:c2:5d:fe:bd:b0:6c:68:88:52:1c:8d:f5:57:
e3:4e:3c:59:80:92:0a:0d:9e:32:e6:80:4e:87:91:
03:b4:99:ad:f4:b7:24:74:fd:21:0a:fe:3d:da:ed:
28:e2:fc:6f:3a:8e:1c:3e:9e:3f:bd:c5:fd:51:07:
d5:ce:72:f2:50:27:62:91:88:c3:0c:72:60:37:5c:
1f:8f:08:7a:07:3f:44:ef:1e:95:86:20:52:dd:82:
99:39:e1:64:fd:a3:3a:ab:ca:67:51:ed:fb:7f:18:
c8:cf:0f:53:bb:d2:4c:2c:69:1e:57:3e:2e:4c:35:
7d:dd:9d:53:25:81:40:06:46:31:b1:da:dd:78:48:
e8:d2:45:bd:d5:cd:20:4d:96:eb:59:4d:e5:73:8a:
f2:eb:1d:be:b2:d5:93:ad:56:e6:44:ec:50:c7:5c:
be:31:7b:eb:9c:ad:29:99:f6:7e:27:e1:78:c6:46:
72:97:e3:cd:d2:9d:f6:28:61:83:81:b2:95:f9:32:
80:52:fe:a4:06:e7:de:10:4c:b7:a5:5a:9e:20:ad:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:D2:CB:11:80:91:D0:BB:FC:3E:B8:BA:ED:95:29:9E:B0:BC:9A
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/aMnSyxGAkdC7_D64uu2VKZ6wvJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:e500::/40
Signature Algorithm: sha256WithRSAEncryption
7e:79:a2:2a:f9:b9:1c:54:f9:67:9c:ac:5e:58:7c:c3:e8:a7:
cb:3f:dd:fa:85:92:a2:c8:aa:54:50:c5:72:0e:db:48:7c:db:
47:12:ed:0d:45:f8:b6:82:ea:05:df:c5:9e:fe:7b:56:64:ee:
3a:41:39:d5:fd:de:b4:70:71:4d:62:ba:c6:28:6f:f6:92:c6:
b4:0e:79:39:f1:61:09:d0:d8:90:25:d3:dc:ec:8a:33:50:58:
af:4d:57:4f:b4:6d:ae:c8:34:97:d2:93:26:9a:8f:bc:48:2c:
35:d9:3d:c3:58:8d:75:f9:c7:2d:db:42:35:a4:31:de:c6:67:
04:13:64:41:6d:b2:c1:e1:4f:2e:94:91:f4:56:cc:c8:42:bc:
83:d4:85:f3:3b:53:c9:49:03:87:cc:18:07:e0:ce:44:f1:9e:
28:8e:2d:ba:26:33:28:33:25:ce:b5:eb:91:69:3d:9e:8a:c5:
e1:46:7e:15:c6:58:d6:bb:7e:0d:6d:21:b4:67:40:6c:99:b8:
cd:b7:1e:6d:b8:36:2e:26:f5:9a:e4:fb:68:00:e2:48:73:7d:
81:ea:9f:dc:d2:e5:2e:66:ef:42:e2:29:6b:46:ce:20:aa:7a:
cb:61:bd:45:b5:99:62:ae:73:bd:4c:fa:a1:cb:48:90:e5:8f:
a1:cb:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:41 2025 by rpki-client