Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/8d73XHcFqzmklqYGedb1zL_twPc.roa
File: 8d73XHcFqzmklqYGedb1zL_twPc.roa (raw, json)
Hash identifier: d1pA84iwgnr0AZiaCE3qcWTWUiWJMkGtn5T2pZ7CQhI=
Subject key identifier: F1:DE:F7:5C:77:05:AB:39:A4:96:A6:06:79:D6:F5:CC:BF:ED:C0:F7
Certificate issuer: /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial: 0181DAD07DC4B9DB3C797EEF4ABBA04D7D76
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/8d73XHcFqzmklqYGedb1zL_twPc.roa
Signing time: Thu 07 Jul 2022 22:38:25 +0000
ROA not before: Thu 07 Jul 2022 22:38:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 2a12:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:d0:7d:c4:b9:db:3c:79:7e:ef:4a:bb:a0:4d:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Validity
Not Before: Jul 7 22:38:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1def75c7705ab39a496a60679d6f5ccbfedc0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:85:b6:93:b5:fd:1b:23:bb:09:66:84:2a:
f8:4b:f6:27:7a:e8:45:88:08:da:6c:23:85:f7:a2:
bf:90:46:aa:fb:ec:14:a6:8d:db:e5:90:6c:42:81:
0c:0d:65:46:0a:5c:16:31:16:80:32:95:f9:bc:3c:
c8:b0:f7:b6:4a:e2:4b:ec:ff:29:f8:00:e3:4b:9a:
84:99:f5:43:57:8b:68:f6:57:a4:33:66:eb:a6:a4:
88:cc:97:16:5d:31:7b:cb:64:87:27:7d:b9:f8:23:
be:cc:05:94:32:65:1b:3f:a0:2b:e7:4b:ad:72:59:
51:03:48:d3:66:43:5d:75:f0:a4:25:35:5f:35:0d:
08:6e:88:4e:8c:6e:0b:d0:49:31:18:a1:12:2b:ab:
7e:6e:0d:87:77:16:16:cc:05:bf:33:42:70:51:ee:
44:40:aa:a9:09:73:55:17:24:4c:48:07:20:55:cc:
d6:c1:5a:69:b5:59:46:45:fa:58:8d:17:ea:68:8d:
30:37:98:d5:bb:4d:4a:0b:3b:c0:94:c0:fd:60:48:
20:f8:27:18:38:29:ba:01:aa:9a:c4:95:cf:92:95:
d9:df:ab:fe:bb:09:13:3c:32:d8:ad:c7:39:1c:c6:
7d:0d:30:96:d2:79:bf:c5:2a:1c:ee:06:11:d9:3f:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:F7:5C:77:05:AB:39:A4:96:A6:06:79:D6:F5:CC:BF:ED:C0:F7
X509v3 Authority Key Identifier:
keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/8d73XHcFqzmklqYGedb1zL_twPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e980::/29
Signature Algorithm: sha256WithRSAEncryption
95:d3:a6:57:c8:92:d6:c3:3a:c9:1b:4d:c1:fd:3d:b7:d9:73:
d9:cb:ad:22:2f:7f:e3:33:bc:33:a6:4d:16:22:46:95:0e:4a:
9e:36:44:54:2c:50:e1:41:ba:f4:7c:80:01:3b:fb:fb:44:cc:
7b:43:ac:5e:42:26:8c:c2:93:f9:fa:c5:c7:f8:fe:cd:86:ba:
61:66:ca:92:52:6b:f0:49:75:78:3f:21:06:bc:c9:fe:82:5e:
92:a1:36:7e:11:34:e6:14:be:d3:b4:c6:21:b3:79:39:4e:7b:
cf:12:3a:be:22:df:89:03:0c:53:00:80:cb:70:f4:ea:1f:73:
19:8b:75:f1:a7:0a:2b:c8:75:a9:ed:3d:33:58:b7:6f:18:c1:
b0:62:1a:3c:43:2a:63:87:45:22:0e:60:35:4c:d7:4d:ef:a6:
26:9c:3e:fb:8b:df:71:16:f7:c5:2d:b0:5a:75:50:f6:c1:7c:
d2:7b:c4:92:74:ec:1e:b3:83:bc:e6:43:d4:81:d8:cf:29:32:
f7:b6:96:1a:fb:9a:75:b1:85:bc:6b:52:94:6d:a8:af:eb:91:
86:4e:47:9a:b8:49:5b:6d:4c:b4:cb:fe:1d:3f:e5:46:2e:f0:
9e:2b:60:53:00:65:85:83:9c:ec:24:5a:55:f6:b4:45:26:d9:
d3:9e:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:29 2025 by rpki-client