Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xRYoBIHJzczpcVY9DCAA-yVtz58.roa
File: xRYoBIHJzczpcVY9DCAA-yVtz58.roa (raw, json)
Hash identifier: 1NBa2wRKpq2t15zloCtf1rG3jzyN4b1jbeGrSen3rBo=
Subject key identifier: C5:16:28:04:81:C9:CD:CC:E9:71:56:3D:0C:20:00:FB:25:6D:CF:9F
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA902E8753A0A061F8167D7DCB0C7
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xRYoBIHJzczpcVY9DCAA-yVtz58.roa
Signing time: Sun 01 Jan 2023 06:54:55 +0000
ROA not before: Sun 01 Jan 2023 06:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202888
IP address blocks: 2a12:3fc2::/32 maxlen: 48
2a12:3fc2:bb00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a9:02:e8:75:3a:0a:06:1f:81:67:d7:dc:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c516280481c9cdcce971563d0c2000fb256dcf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:ae:75:09:5b:d9:76:e0:7d:0d:96:c6:2d:
2a:9f:c5:1d:9d:05:90:5b:e8:32:4a:04:65:a7:0c:
29:f2:3d:3e:60:09:06:81:7f:e5:30:0c:b1:71:3e:
22:54:3c:d7:74:57:96:fc:21:53:d4:2b:a1:bb:78:
f9:fc:bf:ca:0a:18:ea:5b:91:ae:f8:3b:7d:c3:50:
8d:ea:c2:cb:8b:19:10:0a:b2:94:f2:87:cc:0a:40:
00:cd:7b:9c:34:61:ad:4b:30:0c:ca:ed:5a:77:f5:
da:17:07:24:12:21:c0:4b:30:dc:c7:6e:31:8d:e8:
50:40:f0:32:e3:70:5f:8b:87:a9:6e:05:9f:6e:15:
2e:e6:f2:57:68:a2:cb:42:6a:c3:31:4a:43:a1:3d:
de:d2:dc:a6:0f:75:8d:8a:3d:5a:75:12:3a:9d:69:
cb:81:c3:c3:a4:28:da:38:7f:41:0c:68:64:28:7e:
45:0c:4f:37:c5:94:90:8e:97:a6:ed:de:34:87:db:
8c:7c:c4:cf:bb:c7:bd:37:bc:cf:be:6d:df:af:65:
6e:ec:1a:17:56:26:05:cb:f1:67:35:ea:71:8c:ba:
ca:47:87:03:f0:0a:42:b3:8c:e5:83:9b:80:a3:0a:
e8:17:9a:ec:a2:db:67:b8:c8:d8:16:58:6a:ad:55:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:28:04:81:C9:CD:CC:E9:71:56:3D:0C:20:00:FB:25:6D:CF:9F
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xRYoBIHJzczpcVY9DCAA-yVtz58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
92:60:e5:f9:e3:3f:48:e6:df:2c:4f:59:6a:25:d5:b1:cf:73:
d0:6c:88:25:39:4b:7b:75:9e:17:54:4b:30:4b:4f:96:2a:95:
11:55:de:19:20:06:e2:ba:3d:f0:74:05:59:e3:56:dc:50:81:
7e:b5:c2:fc:79:de:09:58:9b:c9:79:52:5c:8e:ec:b4:d2:e7:
26:f4:1f:7e:85:8c:6b:3e:86:10:a0:84:d4:83:3a:4e:91:28:
2d:ca:44:49:30:c6:9f:f4:94:09:ba:77:a4:95:ed:32:eb:de:
06:d4:e5:8f:e4:04:da:f2:2f:b6:3b:b1:1d:e3:db:5b:f2:c8:
f3:9f:04:3e:82:4d:1d:f0:1b:f8:21:da:1a:45:c7:88:9f:93:
f2:10:a6:41:ee:40:1d:88:c4:ab:1b:b2:b1:38:33:ec:b3:32:
17:78:c7:e5:55:66:4d:c9:97:16:55:20:dc:47:8f:a1:e5:e0:
10:dd:e8:7c:20:c4:9c:ed:f6:02:93:ec:41:d5:4d:b0:7e:6c:
bb:f8:18:fd:cd:29:4e:da:a2:54:43:13:2d:38:3b:1f:b7:7b:
2b:6b:ef:60:68:16:e5:12:95:18:62:a4:54:17:36:7c:65:a7:
84:09:de:ac:e9:93:92:3f:02:27:aa:2e:da:5e:d3:73:6d:5d:
e1:db:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client