Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KyerJZx_8bTREZTh8ZXWtEWe-eE.roa
File: KyerJZx_8bTREZTh8ZXWtEWe-eE.roa (raw, json)
Hash identifier: JnzvEEw4W/efDJfQtOWOyvJThAq9U5G5a4uFzfal968=
Subject key identifier: 2B:27:AB:25:9C:7F:F1:B4:D1:11:94:E1:F1:95:D6:B4:45:9E:F9:E1
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4AE2A07D24E326185809FD795F9E0E
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KyerJZx_8bTREZTh8ZXWtEWe-eE.roa
Signing time: Sun 01 Jan 2023 12:25:02 +0000
ROA not before: Sun 01 Jan 2023 12:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213185
IP address blocks: 2a0d:1a40:7553::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e2:a0:7d:24:e3:26:18:58:09:fd:79:5f:9e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b27ab259c7ff1b4d11194e1f195d6b4459ef9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:4d:c5:51:2a:61:01:53:58:7a:a2:cd:69:
05:76:4a:4f:a9:74:48:c8:7f:f4:c6:9d:16:ab:84:
04:b4:41:a4:71:36:f6:22:e2:5e:09:3e:b6:9c:b9:
de:93:d9:b9:a7:fb:d7:5a:01:3e:1c:57:45:53:74:
ee:58:8a:20:14:8f:c4:ee:f4:d0:c6:07:3e:ad:61:
6e:bf:da:55:10:a1:82:1d:f3:b4:7d:4c:2f:02:58:
8f:fe:9c:d9:f8:15:17:79:22:11:2b:c7:ec:be:14:
01:73:99:03:ea:0d:93:60:a2:93:93:65:fc:b9:13:
4d:f7:c5:44:95:33:31:19:69:3b:e6:99:04:d9:0b:
fa:7e:8f:54:5a:51:8e:ae:42:23:91:d2:e6:78:c3:
60:82:24:a9:0e:98:10:ba:6a:3d:97:ff:cd:ad:34:
e7:90:90:da:85:65:af:ac:5f:1b:1a:88:c7:62:54:
87:36:10:6f:92:d6:87:9b:ac:ca:45:76:86:23:70:
c4:07:da:46:a9:b5:b1:6f:78:8c:0c:06:8d:9a:21:
b1:59:37:7f:a2:8a:d0:db:2c:a2:7e:04:13:d6:f2:
3d:c8:65:81:db:f6:92:cf:af:56:0c:95:4d:7a:e7:
f7:ff:cf:7f:c9:0d:e8:5e:4b:a5:38:ef:eb:05:51:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:AB:25:9C:7F:F1:B4:D1:11:94:E1:F1:95:D6:B4:45:9E:F9:E1
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/KyerJZx_8bTREZTh8ZXWtEWe-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7553::/48
Signature Algorithm: sha256WithRSAEncryption
97:bd:d8:d2:4f:68:55:91:f2:b1:3c:bb:03:c9:d5:0e:e4:dd:
07:09:7a:24:3f:ad:21:02:e9:87:10:78:a1:0a:69:d9:b6:34:
7c:47:ff:15:6f:3a:a6:08:ce:59:af:56:63:c0:8a:b0:df:ca:
05:1f:9d:0e:9a:5d:cf:4d:71:4e:87:b8:69:45:d9:18:a1:69:
7f:8e:87:60:33:44:a4:ac:ba:6c:4a:32:5c:9f:bf:98:e2:03:
62:02:f9:bc:07:0d:2a:3b:5f:39:84:cc:79:11:d3:b5:7f:81:
cf:4f:f3:2f:7c:ee:64:0b:53:3f:fc:8c:f3:bb:37:09:57:c0:
b1:b5:40:ae:a1:4e:2e:47:73:c7:58:b8:ab:97:c5:28:ae:4f:
82:dd:9a:f3:79:0d:ba:7c:08:f7:cd:75:0e:63:15:d7:ca:00:
b8:ec:ca:c6:43:e2:77:16:a9:4a:03:c1:9d:8a:46:ed:1d:2b:
5a:17:ba:71:de:ad:b9:61:bc:65:69:a9:9e:a3:88:5b:28:00:
1c:9e:c7:08:ed:6a:be:fd:48:73:2a:ff:d4:ab:47:4d:98:7a:
81:60:a4:b2:d1:fa:00:de:35:35:d8:d9:75:8e:48:a3:cd:82:
ba:2e:ca:ea:2c:1b:78:30:29:30:61:7b:89:c5:e4:d3:20:81:
1c:83:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:50 2025 by rpki-client