Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/oufx7yqLadq_09rmoJYEpRp-Qpw.roa
File: oufx7yqLadq_09rmoJYEpRp-Qpw.roa (raw, json)
Hash identifier: FSZGa0du2RskpEqVlfvi3XZv37YBgcQM5AFZp+W0ATE=
Subject key identifier: A2:E7:F1:EF:2A:8B:69:DA:BF:D3:DA:E6:A0:96:04:A5:1A:7E:42:9C
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0182ECB20CFE8A8AD56877DD48E86F70FD3C
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/oufx7yqLadq_09rmoJYEpRp-Qpw.roa
Signing time: Tue 30 Aug 2022 03:01:07 +0000
ROA not before: Tue 30 Aug 2022 03:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210320
IP address blocks: 2a12:3fc2:ee01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ec:b2:0c:fe:8a:8a:d5:68:77:dd:48:e8:6f:70:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Aug 30 03:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2e7f1ef2a8b69dabfd3dae6a09604a51a7e429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:6c:47:4f:12:00:8d:6c:30:9a:de:52:ea:
f0:cd:6f:b8:5c:ad:d2:1a:e7:01:c8:4b:ea:f3:43:
9b:4b:87:10:ad:b5:0a:bd:35:85:26:0b:06:b2:48:
14:76:74:52:91:57:3a:db:db:46:82:ec:17:d8:96:
eb:99:33:64:be:5b:d3:74:44:03:4a:5d:c2:b8:b0:
71:b4:b4:ce:32:ad:b4:13:ea:77:93:86:5f:6f:6c:
aa:fd:aa:dc:fc:1d:04:ef:33:98:66:62:a4:cd:01:
67:d3:e1:4c:d5:25:18:95:15:9e:e7:db:81:f5:59:
84:dc:a8:d8:e6:e4:f8:65:db:27:32:7e:d2:17:43:
98:e4:2c:c0:fc:3f:bd:41:a7:0e:f2:d2:02:f7:17:
77:fa:e8:f2:f0:f8:63:1a:98:e9:fd:34:04:a5:ba:
db:60:89:16:32:61:39:70:36:32:83:45:ea:5f:8e:
e1:88:84:03:68:65:31:c1:5a:39:00:b0:4c:49:93:
b5:87:50:14:e7:b0:11:d9:eb:10:c0:b3:92:95:2b:
79:0c:ca:74:f1:13:e2:e7:43:e5:21:ab:f5:51:d6:
45:47:c7:8e:5c:78:0b:97:4c:51:32:f9:55:ab:ae:
4c:eb:27:96:40:0a:ca:05:98:0e:2b:e1:2b:68:c6:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:F1:EF:2A:8B:69:DA:BF:D3:DA:E6:A0:96:04:A5:1A:7E:42:9C
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/oufx7yqLadq_09rmoJYEpRp-Qpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ee01::/48
Signature Algorithm: sha256WithRSAEncryption
56:0e:3e:c9:32:cc:cb:1a:9d:47:26:39:80:01:78:33:3f:11:
1a:a2:52:da:91:74:7e:ad:5a:a7:c9:81:73:d6:dc:d8:7d:f0:
57:ef:11:84:fc:31:c0:a0:ea:8b:80:7a:a6:e5:8a:d0:a1:0a:
a3:18:d9:0f:51:33:23:3c:1f:a5:ab:de:f5:37:cc:19:5a:17:
ea:86:9e:89:ae:2a:dc:72:b6:06:02:d3:35:33:29:ef:df:48:
88:4e:c7:63:78:59:f6:44:fb:a2:86:1b:c2:34:73:4f:e6:bb:
e0:7e:c1:e8:78:6f:bb:f3:09:e8:7b:1b:3e:20:ef:6d:b1:8b:
76:4b:a3:80:0f:36:5f:c1:9f:4f:1b:94:2a:1c:de:a2:26:cd:
b9:b4:1b:1d:a6:21:c7:e4:79:e9:0e:bf:bc:a2:dc:61:75:41:
07:c3:e4:cb:84:9d:05:93:9a:b4:17:62:51:f3:ad:53:79:4d:
4c:af:7b:40:8f:59:bc:9c:4e:44:fd:f7:82:c1:6b:a1:1f:2c:
cc:f3:4e:c1:a9:74:8b:d7:03:39:3c:c5:30:d5:b9:61:43:6c:
25:0e:7f:bb:44:a8:b4:08:15:3c:40:83:46:d8:8e:16:8e:5d:
10:ef:63:ba:d7:39:51:48:8b:a5:d1:4d:4e:e9:59:4d:8b:c4:
ae:a5:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:06 2025 by rpki-client