Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xIkchoR4Zpt1Pl9_QZarZsNu8bM.roa
File: xIkchoR4Zpt1Pl9_QZarZsNu8bM.roa (raw, json)
Hash identifier: qj1WwAph4zjk0u3e3p6FSeeKMQ92mlJdmpfl7BpHp00=
Subject key identifier: C4:89:1C:86:84:78:66:9B:75:3E:5F:7F:41:96:AB:66:C3:6E:F1:B3
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0184BF0229AEAB97F01699B60C244C2BA37B
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xIkchoR4Zpt1Pl9_QZarZsNu8bM.roa
Signing time: Mon 28 Nov 2022 16:11:40 +0000
ROA not before: Mon 28 Nov 2022 16:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211051
IP address blocks: 2a12:3fc2:ab50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:02:29:ae:ab:97:f0:16:99:b6:0c:24:4c:2b:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Nov 28 16:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4891c868478669b753e5f7f4196ab66c36ef1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:d5:f7:94:0a:3b:4c:f4:50:ef:95:80:d1:
d1:0f:86:74:2c:ad:85:d5:2d:23:89:12:a8:81:a5:
69:58:33:53:a6:86:ea:1d:4e:16:34:80:c5:23:bd:
ec:e2:87:e4:30:f9:20:6a:91:83:05:9c:72:94:2c:
d5:26:9d:b7:07:65:ad:c1:87:c3:70:dd:13:55:0f:
bb:e9:dd:b9:a5:34:41:ed:8d:d9:0b:5f:d4:f0:28:
f4:c2:48:3a:03:9d:c7:41:e9:2f:10:35:e4:f9:90:
dc:8a:f7:a8:d3:06:49:2a:2b:e1:18:35:a3:c0:00:
2a:d9:dd:82:f4:27:6d:f2:2b:c6:f5:ef:87:68:70:
25:0f:6c:2a:f2:7b:30:80:e3:ea:75:67:2c:60:52:
f7:95:3d:5e:65:32:d6:97:2c:0f:32:41:ef:50:5b:
07:f5:a7:f6:b5:d4:21:2b:e2:72:86:32:74:00:42:
57:6e:34:92:c9:e2:cf:58:37:e6:e6:87:1e:c2:10:
5d:fa:f0:06:c1:d5:a7:ec:03:25:51:9f:8b:83:89:
da:1b:15:45:96:7d:09:c5:f8:09:ab:ac:18:b4:0b:
79:13:d4:73:3c:db:9d:68:0d:97:d4:50:ac:8a:96:
46:f1:1f:90:3b:46:c2:66:77:98:1b:a8:70:a2:58:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:1C:86:84:78:66:9B:75:3E:5F:7F:41:96:AB:66:C3:6E:F1:B3
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xIkchoR4Zpt1Pl9_QZarZsNu8bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab50::/44
Signature Algorithm: sha256WithRSAEncryption
5a:9a:df:87:bf:93:64:d3:31:a2:d7:8a:10:8e:a1:3c:91:ad:
76:c5:a7:4d:42:5e:08:1e:47:67:39:37:2a:11:3f:b7:da:ad:
43:cb:c5:12:d7:3b:1c:29:d6:66:95:da:a3:13:8d:44:a6:50:
c4:a5:d0:ac:50:3c:14:41:9f:2f:69:ad:39:2b:f8:28:0b:83:
54:f3:1a:a3:c3:08:e3:4d:46:7f:67:b6:cf:7b:72:e2:9e:a5:
6f:16:be:30:6f:cb:4c:c9:7e:76:45:67:30:e0:e8:60:20:2d:
8c:17:f9:16:4a:75:d9:90:13:ab:77:e8:cd:f8:23:c2:60:ca:
3a:a9:b0:4d:cb:d7:e2:b2:9c:58:6e:8e:a1:e4:a7:c3:95:ee:
02:59:01:59:a7:82:ee:44:a0:86:6a:79:4f:27:ca:d0:67:8a:
63:32:8d:f9:8d:f2:57:e4:f9:ea:af:56:03:77:40:7e:a4:56:
e2:73:b4:50:d6:40:45:7c:e9:ba:d8:54:bc:bf:16:8e:7c:7e:
91:7f:cc:2f:59:42:0a:6c:ec:99:cb:51:2b:b2:d8:05:0c:26:
7a:67:9c:59:48:eb:01:d4:81:3b:bf:70:0a:a3:05:6c:d0:07:
a5:ef:9f:8b:a4:21:e6:74:b2:48:3a:27:21:87:db:fa:8c:77:
13:67:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:35 2025 by rpki-client