Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sKdU_8YfhNlqKa2ZBYBP1zdzsuw.roa
File: sKdU_8YfhNlqKa2ZBYBP1zdzsuw.roa (raw, json)
Hash identifier: bC58+ZZPGqTZTM0FH+ST4ssEYPBJPE60LKZnMP9FBQI=
Subject key identifier: B0:A7:54:FF:C6:1F:84:D9:6A:29:AD:99:05:80:4F:D7:37:73:B2:EC
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067EC4CF53496888695C0F2C30834A0
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sKdU_8YfhNlqKa2ZBYBP1zdzsuw.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202888
IP address blocks: 2a12:3fc2::/32 maxlen: 48
2a12:3fc2:bb00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:4c:f5:34:96:88:86:95:c0:f2:c3:08:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a754ffc61f84d96a29ad9905804fd73773b2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:43:7a:2e:6e:ce:b7:e8:fa:43:2f:52:16:
b4:9f:02:db:bf:cb:98:cd:af:b0:cf:5f:06:db:e7:
2f:e7:fb:70:50:9d:f9:f7:ca:14:9c:ec:20:9d:be:
eb:dd:ab:50:af:f1:7f:b0:35:86:f0:8b:1a:a3:cd:
5e:69:58:2b:3e:67:93:53:0c:56:99:7d:08:73:a9:
c0:66:b2:93:05:85:48:bc:b7:6c:0a:78:29:bb:e9:
56:dc:3b:d3:07:9d:fd:63:cd:65:92:b5:25:9f:04:
49:e8:cb:3c:02:2c:bb:b6:a0:a8:c4:bc:d7:d6:df:
c6:51:af:b6:92:52:cb:22:a4:0a:99:0d:7b:18:8e:
79:0b:e8:c6:60:11:f1:5c:f2:37:74:7b:d8:39:1e:
ee:09:a8:f5:cc:fe:f0:3a:22:92:01:02:e7:3c:e3:
9b:77:50:cc:b2:d8:7d:4d:28:98:e0:85:07:71:10:
33:a2:cb:1c:67:a2:89:bd:36:e8:33:9a:ae:8f:2b:
22:57:b7:16:de:06:ae:8f:22:5b:14:fc:0d:19:de:
22:09:49:74:9f:02:a3:c9:b3:0d:38:a5:74:b5:14:
63:ee:63:11:a9:3c:f4:58:73:98:53:ba:0d:d7:91:
93:a8:c4:64:66:10:d2:36:f7:bf:26:4d:7a:c9:c0:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:54:FF:C6:1F:84:D9:6A:29:AD:99:05:80:4F:D7:37:73:B2:EC
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sKdU_8YfhNlqKa2ZBYBP1zdzsuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
3d:1d:64:eb:80:1f:33:59:26:77:0f:ae:e8:4d:ce:51:6e:9d:
49:d3:30:df:fb:57:5a:a4:54:d0:8e:65:65:cb:a0:ce:3f:97:
ad:44:a8:c4:a4:38:e6:09:10:dc:6a:c6:18:1d:36:88:e7:25:
e4:ac:94:b9:b9:0f:0c:48:f3:3b:0d:d6:aa:84:27:e7:75:80:
00:cf:10:13:76:53:28:48:13:6f:f6:42:97:77:64:c7:5d:c0:
40:96:38:2f:74:8f:18:db:f2:04:fb:74:91:e5:97:96:50:33:
d5:26:29:5f:f2:af:b5:09:35:38:cd:09:45:a2:33:d7:18:60:
3a:ab:7b:ce:11:90:10:99:6a:da:2a:5c:2c:b7:91:f3:98:29:
48:90:e1:96:b5:19:7f:66:74:70:d0:1d:13:d9:3b:89:47:62:
ff:aa:99:5b:5f:bd:c0:73:81:0f:ca:3c:0e:a9:17:c9:c6:40:
f0:2e:25:92:70:92:91:fb:19:af:ac:e3:4e:07:45:ac:57:ac:
c2:e4:a8:e7:5d:ec:4e:0e:44:ca:33:f3:f9:8f:76:04:54:e8:
c9:69:e4:d2:d8:e1:23:39:14:86:0e:bc:31:cd:18:7e:f6:40:
e9:45:7a:28:a9:8f:aa:66:7b:49:1b:9b:60:f2:69:52:c3:92:
c1:9c:ec:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:09 2025 by rpki-client