Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/iV2B-UkXsIpr_yuzBnaBvo1TwKA.roa
File: iV2B-UkXsIpr_yuzBnaBvo1TwKA.roa (raw, json)
Hash identifier: 3XRzp5S6kHbhbZTaiASrPCcSkbbyjAYMNsp4FXHfvRA=
Subject key identifier: 89:5D:81:F9:49:17:B0:8A:6B:FF:2B:B3:06:76:81:BE:8D:53:C0:A0
Certificate issuer: /CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Certificate serial: 018CC94E41F6D23F09B7552B0108721AA9F4
Authority key identifier: 2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/iV2B-UkXsIpr_yuzBnaBvo1TwKA.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:41:f6:d2:3f:09:b7:55:2b:01:08:72:1a:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf3834cdab5abbcdb6bc5cf4e5503d16e84623a
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895d81f94917b08a6bff2bb3067681be8d53c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:bc:5f:1c:89:9b:31:7d:b2:3b:18:79:75:
c3:cb:55:1e:c7:80:d1:24:98:0a:b2:35:23:63:44:
f2:45:fb:c0:13:37:4c:68:25:5f:0a:d4:03:85:c0:
d7:91:15:47:f5:24:74:b5:71:70:4e:8b:c1:41:5e:
15:3e:8a:2a:e0:d7:b6:08:94:ec:cd:8e:42:08:21:
2d:6a:f6:e8:aa:ec:ad:90:c6:d9:fb:5f:6a:5c:ca:
22:3e:72:99:17:71:df:94:3b:ef:f9:62:7c:55:04:
69:59:40:30:69:5a:7f:f2:59:bd:76:10:e5:cb:53:
a4:94:cd:28:c0:b2:a8:cf:9e:6f:10:aa:8c:60:82:
45:b9:48:f9:d0:81:94:0c:b8:27:39:d9:9b:2a:9f:
4b:01:20:f3:c5:b6:5d:33:2c:02:73:1f:77:0b:b7:
95:21:d1:aa:5d:f3:e7:f9:54:e3:23:23:8a:21:15:
0c:14:57:db:0e:7e:c3:37:6a:81:a2:af:20:0b:c2:
34:37:9c:04:61:2a:24:4d:47:0a:41:49:d9:da:53:
b4:b0:d4:a6:7b:d0:2f:15:18:30:43:6d:42:da:db:
a6:93:74:45:13:35:ce:78:88:be:67:42:5b:49:c7:
bd:59:e8:5a:dc:a9:bb:c1:93:b6:db:98:85:2c:aa:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:81:F9:49:17:B0:8A:6B:FF:2B:B3:06:76:81:BE:8D:53:C0:A0
X509v3 Authority Key Identifier:
keyid:2C:F3:83:4C:DA:B5:AB:BC:DB:6B:C5:CF:4E:55:03:D1:6E:84:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPODTNq1q7zba8XPTlUD0W6EYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/iV2B-UkXsIpr_yuzBnaBvo1TwKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7e5552-0b7d-400c-95fd-856f43f69aa3/1/LPODTNq1q7zba8XPTlUD0W6EYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:02:70:6c:1e:00:a8:39:84:9c:03:fb:2d:e5:68:cd:cc:99:
1d:a5:c5:ba:5e:30:21:8a:cf:6b:01:85:84:6f:2a:c4:61:64:
98:c6:4b:c3:21:87:aa:ed:b5:3a:ca:84:47:3e:09:b8:16:21:
60:75:1d:30:56:ae:a7:63:aa:0a:bd:85:fa:61:1b:c7:af:b8:
4c:95:cb:87:8f:26:19:23:29:18:ea:d3:39:73:0b:2b:3b:f8:
a2:13:4a:4a:1e:08:b6:4b:68:96:76:67:05:3d:ad:e0:be:8d:
2c:2a:0b:fb:cd:b2:39:28:8b:7b:02:1d:89:9e:1a:6d:f2:c0:
a0:3c:41:07:0b:e1:dc:97:0e:9a:02:73:e4:f2:c1:12:6f:fe:
00:70:11:81:17:a3:5a:8f:be:81:25:35:3c:fc:50:5f:49:f1:
f8:76:a6:e3:76:c3:b8:2c:95:68:52:47:e2:ff:e4:5b:43:6b:
e6:55:e4:bc:1b:05:25:dd:27:aa:68:9b:23:ba:ad:27:8a:54:
92:d8:bb:ca:1f:58:ea:9e:29:ee:af:37:2c:4f:6a:bf:e3:55:
b4:f7:82:b5:fe:0e:de:1e:15:05:7e:7e:32:f6:e9:68:de:95:
c0:04:83:b5:54:83:10:65:c3:34:30:b8:d4:3a:83:a0:a3:d1:
cf:43:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:35 2025 by rpki-client