Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/wEoOXAhHendZ-WtnNsZ3Jpz5Ik0.roa
File: wEoOXAhHendZ-WtnNsZ3Jpz5Ik0.roa (raw, json)
Hash identifier: jR4GkAdcDci16DiC4fhvrMGnPbDSKOh5BvGK31rJPMo=
Subject key identifier: C0:4A:0E:5C:08:47:7A:77:59:F9:6B:67:36:C6:77:26:9C:F9:22:4D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CAEBBCD186567CCAA079859BDAA8A
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/wEoOXAhHendZ-WtnNsZ3Jpz5Ik0.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209988
IP address blocks: 2a12:3fc2:1200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ae:bb:cd:18:65:67:cc:aa:07:98:59:bd:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c04a0e5c08477a7759f96b6736c677269cf9224d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:f8:c3:95:d3:24:82:e0:c4:32:29:4f:0d:
24:c4:1e:0a:44:96:58:a2:e8:3f:6a:a5:7b:de:da:
4f:54:70:44:e3:bb:58:e7:6d:e3:40:06:ef:af:d4:
b7:91:2f:ad:c8:01:05:3d:69:72:37:2a:28:04:79:
2a:96:71:08:58:53:59:00:86:3d:88:63:8d:23:63:
22:b6:68:55:a4:8b:ae:3f:2c:f7:a9:34:74:a2:43:
cc:e3:dc:9e:9b:c0:f4:7c:fc:23:33:bc:36:2b:98:
86:52:3b:c7:7a:1b:b9:59:69:84:34:e1:9c:a0:2c:
67:ac:43:ac:ee:27:7b:be:55:39:ff:2c:1e:da:fa:
c9:2e:e7:04:bd:50:86:20:0c:4e:95:59:80:c9:2a:
b6:98:c3:03:5f:ff:24:29:13:5e:70:ce:d0:65:e3:
ff:2a:2f:39:fa:fc:f3:10:73:dd:1d:63:1a:ed:1b:
5a:0f:3d:c9:18:00:29:4e:99:9e:d4:09:36:4b:02:
2e:33:64:d4:c8:04:0c:bc:d9:7e:5b:e8:13:9a:17:
6a:0e:f2:60:c1:d4:95:fe:59:a8:76:f4:06:e2:f1:
db:c2:bd:27:65:9b:87:9a:de:c7:75:51:0a:a4:6e:
10:66:e4:4a:ea:a4:66:b0:0e:2b:b0:fc:04:49:f5:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:0E:5C:08:47:7A:77:59:F9:6B:67:36:C6:77:26:9C:F9:22:4D
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/wEoOXAhHendZ-WtnNsZ3Jpz5Ik0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:1200::/40
Signature Algorithm: sha256WithRSAEncryption
4b:7e:1d:e3:b9:16:c5:19:22:6f:ab:34:c1:c1:21:30:fc:71:
97:a1:9e:dd:a7:e4:11:ef:46:be:a6:c4:5c:eb:08:e4:ed:34:
6d:6e:f4:f3:47:87:3d:e2:36:7c:0a:a9:f4:46:78:cc:41:a4:
8d:e8:10:f1:fd:05:e3:2c:95:09:e4:23:ec:0b:ee:ee:0a:5b:
3c:a8:0d:e3:e2:4c:56:78:e6:e9:46:a7:59:1b:28:11:56:88:
d0:6f:49:a1:b7:c5:aa:c1:f7:6c:cb:0d:63:2a:31:af:b8:b0:
3a:03:fd:0e:88:04:aa:16:cb:6b:26:a7:45:ba:40:ac:e1:04:
9f:01:6d:08:1d:d2:c2:65:f2:fe:eb:ba:7a:6c:29:c1:85:31:
9e:8c:51:58:b4:e9:ab:3b:89:36:88:f1:fd:a2:23:c7:2a:3d:
05:42:32:11:83:47:ad:41:a4:35:5b:e6:46:59:2e:14:62:54:
66:74:e2:6b:17:11:9f:ff:c8:e0:ad:18:b0:40:d6:8c:1e:07:
ea:40:10:60:f4:35:17:09:ac:13:b8:4c:ff:95:cf:3c:47:d6:
bc:3f:6a:d9:b2:26:5f:70:7a:28:3e:96:df:32:20:ed:6f:75:
5e:0a:fc:04:9c:79:2f:7a:54:49:6f:4e:2d:d3:21:11:f1:76:
76:a0:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:09 2025 by rpki-client