Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/k8DmfhCYdK2A4MFRYODJyFnrFUc.roa
File: k8DmfhCYdK2A4MFRYODJyFnrFUc.roa (raw, json)
Hash identifier: gpFpp9txG/bymaoWlAkZL7b+sA34dkgYbyuW32mTtfA=
Subject key identifier: 93:C0:E6:7E:10:98:74:AD:80:E0:C1:51:60:E0:C9:C8:59:EB:15:47
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA619D8505D45DE32262208117B66
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/k8DmfhCYdK2A4MFRYODJyFnrFUc.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201217
IP address blocks: 2a12:3fc2:ab70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a6:19:d8:50:5d:45:de:32:26:22:08:11:7b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c0e67e109874ad80e0c15160e0c9c859eb1547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:51:ad:8e:47:30:f2:c8:b3:23:85:d7:aa:
67:d0:66:f7:9d:ac:6f:80:67:46:0c:7e:05:4a:95:
16:b3:52:7e:47:9f:70:90:f2:5b:b9:bd:34:e2:bf:
a0:1e:c3:89:df:9a:6b:99:11:2b:03:e5:60:8f:10:
48:14:d7:42:31:14:0a:0e:e4:e1:ab:ef:60:eb:c3:
70:ea:e7:27:4f:40:e5:28:fb:59:4f:47:c5:6b:b7:
e7:91:05:12:8f:c2:46:29:48:f1:1a:12:79:b2:cd:
48:b8:4f:08:5b:37:8c:85:92:71:e3:d1:50:ac:41:
bc:e8:ef:56:fe:1d:5e:4b:19:0a:e2:e5:6a:62:fa:
1c:83:ce:f4:e2:ad:a1:79:f9:b9:1f:f5:32:6d:86:
f6:e2:cf:c5:0c:3c:fa:2d:d7:96:24:c1:69:49:3d:
fe:6c:90:b3:41:b3:a1:d7:e2:ae:ab:17:30:3c:62:
ca:c0:ce:a9:c2:28:b8:e0:b4:a2:d5:36:03:b3:c8:
62:00:67:a8:ae:b7:09:cf:8b:04:78:d4:9e:49:e7:
1d:f2:d0:0a:48:ce:d7:0b:44:df:e4:6f:56:4e:31:
34:b1:22:b4:df:81:31:36:fd:66:a3:e6:af:af:db:
1e:a1:3e:52:ac:e2:72:71:98:49:c3:a2:95:78:55:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:E6:7E:10:98:74:AD:80:E0:C1:51:60:E0:C9:C8:59:EB:15:47
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/k8DmfhCYdK2A4MFRYODJyFnrFUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab70::/44
Signature Algorithm: sha256WithRSAEncryption
92:26:2e:57:ba:55:e0:e7:63:0b:e4:e8:ae:d9:a7:c1:95:5c:
c4:58:a4:71:dc:c2:d8:84:2c:cf:da:f8:db:3d:1e:c6:93:17:
d0:79:f8:86:dd:7b:b0:a4:62:20:05:81:02:e0:91:b0:6d:e3:
2b:36:26:7b:c7:cb:92:3b:9d:2a:15:4c:ff:ec:1b:97:f7:d6:
df:6a:c3:c6:04:d2:ba:38:09:00:34:43:03:97:24:6e:15:6b:
10:ee:47:f1:15:a0:7f:8c:98:01:60:38:e1:f3:1f:a6:c0:24:
2c:1c:05:cf:d6:ad:04:50:09:98:9b:fd:50:84:c6:34:cf:a8:
46:7f:fa:33:e2:8e:12:a7:ea:c7:f9:c7:10:bf:ff:c4:bf:7c:
ae:fd:d7:28:f2:07:25:84:5d:29:47:fa:4b:18:a3:5b:b6:15:
32:fa:f6:f9:e0:8a:9d:15:cc:70:82:c9:5a:65:eb:f2:96:d1:
9d:cd:87:fc:1f:04:16:98:45:6e:f5:2b:c5:b6:9c:f9:44:12:
f1:d1:c4:8f:14:1c:22:55:23:d1:6d:f4:7b:27:00:65:9a:44:
98:f3:20:a5:b8:5b:7c:45:9f:6d:e1:12:d5:4b:0c:9c:d3:ce:
1d:c1:e6:df:c6:67:89:93:18:59:03:24:7d:8b:22:d5:1e:39:
06:74:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:34 2025 by rpki-client