Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KoFDI7MKj1OQ8aWEsl_UwPJjStM.roa
File: KoFDI7MKj1OQ8aWEsl_UwPJjStM.roa (raw, json)
Hash identifier: Js5A/BMynoWDSaJnNv/HLUz9KNFi9IXuIEDpDzkjkU0=
Subject key identifier: 2A:81:43:23:B3:0A:8F:53:90:F1:A5:84:B2:5F:D4:C0:F2:63:4A:D3
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09EECC0A
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KoFDI7MKj1OQ8aWEsl_UwPJjStM.roa
Signing time: Sat 01 Jan 2022 04:56:17 +0000
ROA not before: Sat 01 Jan 2022 04:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213185
IP address blocks: 2a0d:1a40:7553::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166644746 (0x9eecc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a814323b30a8f5390f1a584b25fd4c0f2634ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:e0:60:ad:c3:f9:fd:5a:1f:dd:c2:18:e3:
fe:80:45:9c:48:45:98:fd:5e:8e:76:53:5a:18:57:
a0:2d:23:70:61:16:62:e5:a2:04:62:f5:15:d9:61:
9e:72:50:b0:5c:19:f5:47:99:92:75:e3:b1:af:bf:
80:c4:c6:9e:e7:08:4c:e7:d7:9c:dd:b7:19:9d:e0:
f7:7f:a5:47:4d:00:e1:f2:73:4a:97:76:6e:06:81:
52:a6:58:9b:44:81:00:5e:af:a1:15:5a:b1:c0:3d:
06:fe:8b:35:6b:df:6b:b8:8e:d7:01:f2:79:45:db:
32:ab:06:df:54:69:0c:a5:7d:1a:af:c4:db:28:05:
66:3b:7a:2a:8d:b1:48:fd:29:69:3f:fb:73:b1:b9:
fd:cf:e4:54:41:5f:e3:64:97:f0:33:5d:b3:e4:e4:
fc:25:33:cc:c6:ce:b8:36:c2:7f:df:58:87:d0:48:
e3:03:2d:6d:c4:20:c8:c0:40:4d:71:4c:0a:81:af:
6a:87:ee:58:b6:31:d6:70:b7:f3:91:6e:4f:91:8c:
81:70:8e:75:3d:11:21:41:20:59:b1:71:da:a6:42:
be:b5:2f:38:4a:f0:f3:29:b5:aa:fd:26:a7:f0:ed:
36:86:43:ba:51:7a:ef:5f:a5:17:1a:87:e0:39:a8:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:43:23:B3:0A:8F:53:90:F1:A5:84:B2:5F:D4:C0:F2:63:4A:D3
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KoFDI7MKj1OQ8aWEsl_UwPJjStM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7553::/48
Signature Algorithm: sha256WithRSAEncryption
a4:08:a6:66:c4:9b:58:1f:a2:e7:76:55:c0:67:d4:2c:76:91:
58:34:2c:f8:03:72:f0:08:93:f8:6f:e7:71:4c:2f:4d:76:f3:
e8:6f:80:aa:73:36:bc:dd:c5:8a:97:3d:e7:3e:3f:33:95:3f:
6f:66:b0:b8:11:69:e9:df:a4:33:92:aa:be:98:53:39:f5:00:
08:67:6a:d3:f1:96:ed:19:b1:24:4a:9d:ed:b6:0b:0c:a7:fd:
4b:5b:32:77:4e:68:ed:cc:65:72:06:8a:68:6f:d1:da:64:e8:
79:db:f3:31:49:e0:0c:4f:f2:af:6b:bf:4d:a9:48:cc:09:28:
ab:59:ac:63:b0:44:09:d6:0a:f8:41:b5:71:8c:42:6e:7e:b4:
6a:28:27:8c:8c:81:05:9b:68:25:9b:4d:f6:bf:1d:48:a9:1f:
50:69:8b:f0:01:ef:21:f3:89:7b:f5:d0:fc:16:da:ac:0b:1e:
dc:99:21:22:68:0f:d9:b0:a1:84:db:2c:67:be:66:d7:82:7a:
28:5e:bd:66:ce:db:4a:52:4a:10:ac:12:bc:d7:47:39:7c:5d:
f5:a9:71:00:02:1c:9a:d4:65:3b:a5:81:71:b5:69:00:c5:99:
40:61:0f:df:c0:5f:cb:21:6d:06:e6:c2:a2:3b:f3:ee:ee:54:
fb:5f:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:37 2025 by rpki-client