Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/M007g_Hy6zjxGiKQLgyVV15cWVc.roa
File: M007g_Hy6zjxGiKQLgyVV15cWVc.roa (raw, json)
Hash identifier: JXeJxS1H0YmfgBkfOLUayiRB8iAJlaDfbJQd67F9/0E=
Subject key identifier: 33:4D:3B:83:F1:F2:EB:38:F1:1A:22:90:2E:0C:95:57:5E:5C:59:57
Certificate issuer: /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial: 018570FBC8BEDEA10F64FB549A54F8E5144D
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/M007g_Hy6zjxGiKQLgyVV15cWVc.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c8:be:de:a1:0f:64:fb:54:9a:54:f8:e5:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=334d3b83f1f2eb38f11a22902e0c95575e5c5957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:60:51:df:65:58:a4:1c:24:b1:4e:2d:00:
d1:b5:a7:15:05:14:15:60:b0:d9:40:0c:ea:c7:f9:
20:64:cd:34:c7:d7:83:b3:af:a5:8f:cc:21:df:49:
39:88:ca:0a:f7:4a:a0:aa:de:60:8f:87:de:10:ec:
72:36:92:f5:1c:23:78:05:bb:f0:24:65:ec:0f:c0:
81:bb:ec:d9:4e:d3:53:67:f5:ec:5e:0c:3e:5b:c7:
f8:6e:97:c5:af:37:c0:cd:1a:0e:3d:92:3e:30:62:
a4:5b:70:b1:70:1d:a3:8a:f1:2b:1b:18:36:fb:9d:
b3:b0:e4:fb:ee:c3:00:05:68:4a:99:f4:0c:18:38:
36:de:78:77:c9:1c:95:11:22:b0:85:03:eb:a3:79:
4b:2b:48:af:fe:90:02:29:6a:e8:03:4f:6b:fc:53:
0b:5a:84:72:a5:d3:16:cd:8f:1b:30:6a:d5:32:26:
b6:ab:bb:d7:a3:5e:ad:b3:90:7a:a0:4a:fc:f6:e2:
15:29:94:c6:b6:ac:74:9f:e4:3e:12:b2:a0:4e:99:
d2:18:81:dd:52:07:f5:e8:68:b9:7c:28:b2:e6:70:
9f:a9:87:6b:f4:f3:29:b0:e9:72:17:59:57:ab:19:
65:26:34:3a:67:66:6f:ba:df:14:63:35:71:4a:96:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4D:3B:83:F1:F2:EB:38:F1:1A:22:90:2E:0C:95:57:5E:5C:59:57
X509v3 Authority Key Identifier:
keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/M007g_Hy6zjxGiKQLgyVV15cWVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e980::/29
Signature Algorithm: sha256WithRSAEncryption
b3:66:65:9f:8c:c7:0a:47:ec:33:90:89:c8:5c:5e:19:15:08:
ec:5d:1d:c8:f7:20:8a:3d:44:23:22:de:73:99:7f:8a:2f:ae:
45:8e:95:6c:93:cf:24:02:cc:d3:02:84:28:a7:2d:61:86:49:
72:77:44:05:84:86:d9:2b:c4:a9:df:88:f9:43:e7:e3:71:04:
9d:71:81:10:95:b9:7b:e9:aa:63:50:42:7d:bd:28:31:0a:ce:
38:f9:39:30:a3:f1:d9:61:61:f8:38:7c:74:0d:e8:30:29:01:
37:8e:14:ea:dc:86:1c:db:8f:85:02:86:f1:db:b1:5b:8f:64:
15:de:6d:04:f5:b9:5e:42:71:36:30:79:3c:25:bf:8a:6f:fa:
44:17:5e:3f:1b:87:df:26:8c:b1:7e:71:fa:a7:73:9e:85:c6:
4b:65:c1:82:d9:66:06:00:e1:ec:7d:a8:ea:5a:c8:c4:1f:f8:
ca:6a:52:80:5e:24:d9:86:1f:f2:66:fc:22:aa:5b:6b:52:cf:
94:32:f3:0d:7a:d3:11:ae:f7:54:1c:df:16:a5:87:6e:3b:50:
0c:ef:4e:4b:38:7f:5a:b3:c2:39:92:5c:db:3e:19:b9:8e:5f:
33:1f:66:ee:ca:85:39:7f:d1:d9:ce:48:f4:1b:d2:20:ed:95:
7d:59:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:02:04 2025 by rpki-client