Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tPOThJKCcm5uxoDRAKhDWOnvQXs.roa
File: tPOThJKCcm5uxoDRAKhDWOnvQXs.roa (raw, json)
Hash identifier: J/VyOh+Yqb/0XWEI4M8eZnUL36mN4jr/Ib3PpO9bITs=
Subject key identifier: B4:F3:93:84:92:82:72:6E:6E:C6:80:D1:00:A8:43:58:E9:EF:41:7B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B38FD69F5B356DF49FA4F1037B573
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tPOThJKCcm5uxoDRAKhDWOnvQXs.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201217
IP address blocks: 2a12:3fc2:ab70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:38:fd:69:f5:b3:56:df:49:fa:4f:10:37:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f393849282726e6ec680d100a84358e9ef417b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:97:24:ce:d8:ae:43:2e:e2:ff:5e:55:ee:
62:90:f5:47:cc:6b:bb:35:d6:dd:9f:7b:89:96:e6:
5b:7e:a6:a0:f1:25:f7:ad:41:3a:18:2c:93:fa:e9:
2d:85:62:95:b2:96:16:5d:6f:c9:96:82:21:f2:e5:
30:7a:5e:15:86:84:da:93:b5:05:e3:a0:b0:13:a5:
0c:b8:70:07:5e:39:e6:e0:f9:2f:4b:51:45:18:4b:
80:2b:fd:1d:19:6b:6d:10:52:47:1d:96:9d:1b:e1:
ca:f4:a5:48:63:59:a6:62:50:f5:3f:9d:a6:5e:36:
7b:87:94:2c:5c:50:e9:5c:63:ce:03:ca:b7:09:0e:
3d:7c:ca:27:4d:97:cb:20:ed:c6:c5:1d:07:41:3b:
8d:89:5b:66:3f:30:a2:cc:eb:b3:af:33:e6:b7:c7:
aa:94:37:47:7e:77:4f:72:96:55:c8:22:ae:71:fb:
df:33:10:7a:ec:22:75:67:0c:5f:5b:46:92:34:b5:
2a:8b:6a:36:32:a4:3f:76:43:92:8c:a2:32:70:c5:
e0:43:ec:5b:1d:3a:85:36:a3:e0:20:60:da:ca:c8:
52:2f:2b:d2:33:b2:52:80:71:32:bf:ca:d7:43:dc:
8b:05:11:db:45:cd:98:e9:84:95:0a:91:60:a4:6e:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:93:84:92:82:72:6E:6E:C6:80:D1:00:A8:43:58:E9:EF:41:7B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/tPOThJKCcm5uxoDRAKhDWOnvQXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab70::/44
Signature Algorithm: sha256WithRSAEncryption
43:5a:41:74:4a:47:a1:71:7c:e7:6c:90:3e:50:b4:ae:d5:95:
3f:dd:26:0a:36:2a:c0:5f:fa:fa:30:7b:7e:21:47:90:49:a6:
f6:44:03:ac:4f:90:eb:5c:61:d3:79:48:b9:bd:ea:24:6c:97:
37:3b:86:bb:06:11:79:2f:e7:64:7f:80:e8:c0:e9:77:18:af:
4e:07:24:35:c4:5f:23:95:12:b0:48:19:a7:15:72:17:59:da:
f2:98:53:43:dd:69:b2:96:3b:97:93:f4:a7:f3:20:14:b7:5f:
66:74:2b:d7:31:41:86:b9:38:7c:d1:a5:f5:da:c1:a0:dc:bb:
c0:63:a1:15:b8:2c:b6:62:db:bb:2a:66:1d:cf:9b:36:de:65:
7e:db:0d:5b:f0:2e:33:c9:6b:7b:87:0f:3a:3c:cc:19:d0:ae:
39:f9:c6:6c:46:8e:76:d0:35:a5:3a:00:f4:d8:20:64:07:15:
bd:7f:62:c1:c2:b3:2c:a5:2f:d1:b0:1d:8f:4b:67:73:b4:f0:
50:84:af:aa:8f:ab:f4:b0:2b:0f:59:75:83:5d:6d:9a:75:1d:
43:27:a3:18:31:0b:fd:3c:40:e2:04:f2:c6:09:4c:83:27:37:
d0:44:39:74:f0:fe:9a:1a:e6:37:83:39:11:d7:03:f6:49:b1:
28:f8:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:54 2025 by rpki-client