Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iaeBy2pdnMtA9scArQZJtJvaEuY.roa
File: iaeBy2pdnMtA9scArQZJtJvaEuY.roa (raw, json)
Hash identifier: cnOgza7FOMuMEzYhMMs/tiLwVOwk9ZEW1pArSRj1HTg=
Subject key identifier: 89:A7:81:CB:6A:5D:9C:CB:40:F6:C7:00:AD:06:49:B4:9B:DA:12:E6
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0183E42DE4C8D1846BDA8BFAEA6438D69C69
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iaeBy2pdnMtA9scArQZJtJvaEuY.roa
Signing time: Mon 17 Oct 2022 04:22:36 +0000
ROA not before: Mon 17 Oct 2022 04:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a12:3fc2:df00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:2d:e4:c8:d1:84:6b:da:8b:fa:ea:64:38:d6:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 17 04:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a781cb6a5d9ccb40f6c700ad0649b49bda12e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:72:43:b9:0c:22:cc:89:fb:1e:02:ec:41:
b5:f5:d2:46:ff:65:16:a2:06:f1:a1:30:bc:33:c6:
51:bc:48:7f:2f:a3:ef:6b:ce:3e:e5:9e:9f:8a:a0:
64:58:32:75:cb:72:ac:1c:3e:1e:9c:79:9b:9a:c6:
cb:07:8c:96:a1:6a:59:9f:68:51:95:8c:2f:7d:8e:
03:20:7a:4d:03:67:84:26:42:84:f1:63:50:cc:ca:
d4:e7:2e:7d:aa:b5:47:0f:86:59:b0:b6:22:a9:b4:
9a:e6:a6:b6:b4:33:74:97:12:30:81:94:63:6f:36:
7d:25:08:b4:0b:b2:dd:00:39:1a:b8:f5:bb:1e:29:
bc:8c:82:a6:e0:38:d2:66:28:24:ef:33:6e:84:0e:
74:32:70:11:2b:75:cd:23:08:34:15:23:89:eb:ca:
01:9b:70:87:62:35:63:67:5f:21:78:ad:31:64:e1:
3b:8d:f9:16:41:2b:b6:46:9f:9d:9a:18:8c:3f:45:
48:7d:3a:ab:9e:e3:48:8d:d3:41:c1:d4:45:39:04:
ad:f4:4e:cf:e1:89:f1:ee:11:64:ef:68:7e:8d:d0:
cf:26:ba:87:08:1a:13:6a:f3:12:66:3a:c6:30:23:
c0:98:46:b2:ce:d6:c4:de:3d:d9:17:21:3b:1a:a7:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:81:CB:6A:5D:9C:CB:40:F6:C7:00:AD:06:49:B4:9B:DA:12:E6
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iaeBy2pdnMtA9scArQZJtJvaEuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:df00::/40
Signature Algorithm: sha256WithRSAEncryption
3a:a0:74:e8:25:61:8b:7a:65:4e:ff:07:0f:42:82:80:91:0c:
f9:4b:f9:5b:56:6e:b2:7f:03:c4:fd:1e:41:f4:b3:a5:9e:f5:
1c:b8:22:7d:df:aa:83:98:81:93:83:59:9e:44:c9:5d:9f:aa:
13:b1:2f:41:76:22:c1:c6:63:e9:82:2c:47:d8:f5:4b:b6:e9:
f3:3d:ca:29:22:bc:48:0c:4c:ff:ec:29:83:0f:1e:d7:17:7f:
27:c5:17:c6:db:7b:60:c5:33:00:f7:3a:8d:57:7c:b4:f3:d9:
01:2d:8d:75:a4:96:b9:f4:2f:7d:26:15:14:5f:38:23:a8:bf:
25:2c:8f:1b:94:c0:c0:96:85:25:e6:dc:78:0d:5d:79:d2:22:
bc:a3:1b:10:a7:e9:19:7f:ce:8f:5c:5f:18:b3:bc:9b:60:d3:
77:a7:c0:24:fa:43:e8:f4:e6:af:3c:87:09:c3:40:61:fe:1b:
5b:67:ff:f2:8b:da:00:21:14:8f:49:7b:39:94:c9:11:56:9d:
0d:df:94:71:9c:c7:c5:75:40:78:97:d6:2a:0c:13:4b:80:85:
c6:c5:9e:0d:0c:f8:28:70:9a:bf:e7:1c:85:8f:03:b5:d7:8a:
49:81:c1:99:9c:5a:33:79:52:ed:0b:7e:37:f6:3f:e6:eb:25:
22:b0:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:27 2025 by rpki-client