Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xsj8VtWybnWUpQaETaizGdoZcuU.roa
File: xsj8VtWybnWUpQaETaizGdoZcuU.roa (raw, json)
Hash identifier: Kfw7ud81wq28Rp7Go+MI+nJSASrftDmWVRPmmyXRODQ=
Subject key identifier: C6:C8:FC:56:D5:B2:6E:75:94:A5:06:84:4D:A8:B3:19:DA:19:72:E5
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CB01B7472262264B208625A1B28D4
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xsj8VtWybnWUpQaETaizGdoZcuU.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211759
IP address blocks: 2a12:3fc2:ab40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b0:1b:74:72:26:22:64:b2:08:62:5a:1b:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c8fc56d5b26e7594a506844da8b319da1972e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:7b:05:7e:9e:6e:8a:43:c0:e8:b4:e8:c7:
98:f5:50:96:85:6e:a4:74:ce:43:d6:3b:73:e0:06:
e3:d6:15:7a:12:a9:ab:37:89:67:d0:31:7c:67:dd:
1d:a3:48:9d:4f:de:ee:2c:6c:f9:1f:82:ea:c7:2a:
e4:af:74:78:c1:43:88:b8:a8:9e:e2:39:65:49:17:
0e:1d:4f:d1:51:af:2d:73:90:ea:a8:96:1c:55:61:
5e:5f:1a:29:a1:b1:19:58:92:ac:1c:50:e5:64:0b:
82:db:2e:b2:27:b7:6b:ee:39:73:87:97:14:39:a6:
92:86:b5:99:96:25:97:0c:09:0f:ce:34:f5:ea:44:
85:e3:96:55:01:1d:5f:59:4b:b4:e2:3a:39:81:21:
16:e2:fa:f5:6c:d5:e2:f2:80:24:1e:c4:e6:2f:8a:
85:4b:8e:c5:95:e9:30:de:da:6b:db:29:e7:6f:a3:
9f:29:ff:77:6e:8c:6b:7e:16:38:1f:d8:64:36:3d:
7d:ac:fb:cd:65:98:d3:0b:30:a1:74:30:f6:7f:8f:
91:47:b8:de:8b:66:b0:79:6d:92:f6:93:88:b1:88:
3b:f7:14:f7:7a:71:8b:86:4a:8b:a6:70:ee:e2:3d:
16:dc:f7:eb:d5:c8:97:06:24:f9:f1:f1:1f:df:12:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:FC:56:D5:B2:6E:75:94:A5:06:84:4D:A8:B3:19:DA:19:72:E5
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xsj8VtWybnWUpQaETaizGdoZcuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab40::/44
Signature Algorithm: sha256WithRSAEncryption
4a:c7:08:fc:96:98:8c:61:0a:bd:00:7e:0f:92:c5:48:5e:88:
8d:c3:a1:1e:67:44:3a:4a:88:33:46:0a:7b:72:67:2e:d9:9e:
6d:44:78:c8:f6:d6:d7:c0:f1:1f:f4:f6:04:4f:90:0a:3a:05:
f7:35:ee:3b:72:fa:82:c8:f9:16:ae:2b:89:0d:f7:1b:a9:c5:
e9:a8:70:9a:18:7c:e9:c7:99:fa:3d:ac:5d:b5:76:0c:a0:b9:
8d:e6:4a:e1:36:f9:7b:08:84:62:19:57:72:95:d5:61:79:1d:
eb:6a:03:34:24:d9:67:d5:5b:3b:df:76:33:12:0d:0a:7c:5e:
27:08:62:75:cf:7a:3c:a6:72:30:7a:41:1a:f6:f3:bc:4e:44:
0a:83:62:bc:57:b3:83:1b:27:a5:82:95:6f:c9:f4:fc:46:c9:
54:06:50:a2:1a:18:8f:ba:84:40:ce:57:16:63:10:e7:df:04:
e5:3f:04:aa:e3:f2:ea:ae:a0:ce:49:9c:77:57:15:fc:47:ab:
c9:d2:16:c5:82:4b:c4:a9:6a:9f:15:5c:31:8d:a1:34:b7:62:
31:fd:eb:fe:6e:27:8b:a9:02:31:d2:c1:2d:d9:9a:3e:ce:6b:
b6:17:12:84:37:45:6e:dd:c2:90:58:8f:7f:f9:69:08:94:ce:
ec:1d:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:41 2025 by rpki-client