Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4ObHePRhlfO_NRbHvzZMX4mf71g.roa
File: 4ObHePRhlfO_NRbHvzZMX4mf71g.roa (raw, json)
Hash identifier: e7uvqlna0aibtMCd1LgEfWe1LOI6oR39+9ZWxsAHMqs=
Subject key identifier: E0:E6:C7:78:F4:61:95:F3:BF:35:16:C7:BF:36:4C:5F:89:9F:EF:58
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 0A7332EB
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4ObHePRhlfO_NRbHvzZMX4mf71g.roa
Signing time: Mon 28 Feb 2022 22:42:21 +0000
ROA not before: Mon 28 Feb 2022 22:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211718
IP address blocks: 2a0d:1a40:7b00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175321835 (0xa7332eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Feb 28 22:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e6c778f46195f3bf3516c7bf364c5f899fef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:12:48:d5:41:46:9c:6f:bb:6d:36:62:61:
7a:30:6e:70:38:82:8d:7e:14:40:10:28:10:4c:bf:
46:f1:bc:4c:bf:e9:b8:aa:7d:60:a1:98:dc:ca:a1:
30:19:f6:fd:1b:2c:b5:61:bd:cd:39:96:f1:80:9b:
10:5c:61:02:98:a0:46:44:c6:c2:f6:0b:08:b7:78:
bf:89:2a:ec:c6:a7:90:9d:6b:c4:39:58:30:91:91:
a6:42:35:b3:7c:4d:53:d2:71:64:8b:b7:65:3f:e8:
99:d9:8a:37:7d:d5:dc:04:74:9b:55:3e:0c:fc:32:
8e:10:fb:bf:ad:34:7f:8c:e8:06:b3:63:68:28:71:
99:e4:93:a8:1b:94:0c:89:56:5c:f7:a7:2d:70:05:
cc:2e:4b:9a:da:eb:bb:d3:d3:d7:f7:f6:fa:f2:16:
3f:12:a7:84:77:d9:8c:09:31:1e:0a:d7:70:09:66:
4e:5f:eb:a0:c9:60:43:79:28:7d:74:1e:43:7a:63:
64:e7:c9:59:2c:66:ed:4d:2d:49:ef:9d:90:03:2e:
23:2d:4d:87:13:94:a0:49:cb:42:b0:00:aa:d4:01:
d2:26:a3:64:44:e4:f3:0a:61:49:1b:8b:eb:00:24:
08:70:76:1b:ee:0b:a0:b6:ea:19:bd:5b:b8:26:28:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:C7:78:F4:61:95:F3:BF:35:16:C7:BF:36:4C:5F:89:9F:EF:58
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4ObHePRhlfO_NRbHvzZMX4mf71g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
28:c9:18:88:fb:f1:98:ad:31:72:ab:dd:d1:ec:3b:53:c0:99:
60:04:cd:44:83:a2:8b:2b:93:a3:91:df:52:23:ad:62:c9:46:
89:14:65:31:3b:b2:64:aa:ac:74:fa:a1:69:ba:a7:73:e2:e0:
96:27:71:1c:7b:0f:a8:33:bf:cb:13:ac:df:c7:77:dd:3e:5a:
0a:e4:5d:6a:07:7e:0d:25:ae:79:42:fe:82:7c:ae:f2:c0:68:
a6:86:dc:62:1b:9a:8c:aa:8d:67:b2:c2:51:05:86:ee:f3:64:
1e:b0:f5:2d:e4:4f:45:7e:68:e0:04:b9:14:76:52:7e:7c:f7:
a3:2a:22:99:46:44:9e:55:9f:b9:3a:f8:4c:1e:dc:68:58:0c:
e1:a1:2b:57:a3:22:e6:35:fe:bc:fb:de:12:60:23:c6:cb:72:
58:78:55:ff:47:dd:fc:11:c5:04:11:f9:8f:2d:21:86:fd:ab:
bd:2d:35:24:ec:14:23:61:4b:fa:85:dc:8d:74:5f:41:c6:05:
c7:09:df:ca:49:77:2d:72:a2:47:5d:d5:b9:f7:0d:32:f5:3a:
7e:02:54:84:28:f9:9a:01:7e:99:0d:96:a0:05:c8:22:c1:e1:
b7:e1:f3:8f:49:26:70:b6:aa:3d:3a:bd:09:39:d1:26:74:fb:
3c:98:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:09 2025 by rpki-client