Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/T2ja2nzLCi_PMfPmiQMYoGz3NA8.roa
File: T2ja2nzLCi_PMfPmiQMYoGz3NA8.roa (raw, json)
Hash identifier: sO8P6DKcJ0oWyvVDkh3lSWJX1Z89OdWbzqExARFvkb0=
Subject key identifier: 4F:68:DA:DA:7C:CB:0A:2F:CF:31:F3:E6:89:03:18:A0:6C:F7:34:0F
Certificate issuer: /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial: 018CC3488E1DC911134FAD444C7F566CCB9F
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/T2ja2nzLCi_PMfPmiQMYoGz3NA8.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8e:1d:c9:11:13:4f:ad:44:4c:7f:56:6c:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f68dada7ccb0a2fcf31f3e6890318a06cf7340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:18:8f:50:7c:d0:ce:ec:22:51:96:64:17:
a7:58:0e:1e:dc:36:f7:77:03:4a:51:38:42:d4:56:
f7:74:86:66:12:72:6f:84:89:99:28:d9:af:b1:d8:
b5:52:8e:d4:39:e1:dd:c0:88:c8:c1:68:13:f1:f8:
d1:2b:76:fa:ee:5b:10:80:ce:06:94:9c:59:a9:99:
5e:02:6e:59:61:87:76:80:d1:90:c7:fb:06:87:3f:
d3:91:63:e3:12:b3:85:9e:00:3c:de:d1:b3:f8:82:
11:21:4d:08:02:55:55:b1:f4:a5:93:49:a6:57:10:
a3:40:57:40:b4:b4:af:3b:82:7a:f7:86:aa:28:ed:
4c:53:63:fe:3f:1d:ad:fd:35:6f:3a:b0:99:e0:48:
a7:0e:de:0b:e4:53:b0:2e:dd:87:3e:03:c5:e7:5d:
3b:a4:53:1b:2b:c5:cc:e5:62:2b:5d:d6:08:01:fb:
f9:69:df:46:ea:30:da:a5:c0:4f:1f:0b:3f:f4:5d:
ad:71:bb:94:f4:35:a8:e0:a1:4f:a4:6d:ae:f9:4b:
8f:7f:cd:14:ad:7b:27:53:f9:e2:8f:bb:e8:49:aa:
6c:4f:a2:b0:e0:91:fb:2f:32:2b:f9:ab:d7:da:aa:
56:d4:64:5a:99:9b:29:9b:f8:f6:27:42:cd:c2:7e:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:DA:DA:7C:CB:0A:2F:CF:31:F3:E6:89:03:18:A0:6C:F7:34:0F
X509v3 Authority Key Identifier:
keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/T2ja2nzLCi_PMfPmiQMYoGz3NA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e980::/29
Signature Algorithm: sha256WithRSAEncryption
7c:64:1b:30:6d:28:a4:95:25:a7:a7:46:8d:17:2f:ec:4e:75:
22:9b:57:4d:8c:7f:88:fd:13:9e:d4:76:46:35:a0:8f:72:0d:
87:e6:b1:30:01:c1:49:58:90:55:55:ad:a6:b2:33:4d:26:07:
a0:61:64:a6:e1:75:da:de:3a:2b:0a:08:2d:0e:fa:08:0a:de:
02:09:6b:73:93:6e:fb:c8:69:dd:bd:bb:33:36:06:54:2f:dd:
6f:96:bb:a5:42:bf:52:96:8d:fe:d3:db:b5:cb:14:88:60:62:
ff:76:27:a7:43:65:22:99:e8:52:3c:22:13:5e:a4:be:1c:55:
31:77:5a:da:1a:e1:ab:32:b2:f0:20:58:d3:ad:90:dd:6d:35:
9a:d5:83:aa:89:5a:e4:5b:c5:74:bb:cb:05:bf:42:56:69:3a:
12:0c:8e:41:a9:6d:be:2d:04:2c:90:40:d2:d5:7c:fa:19:ae:
25:d8:91:cb:59:8f:11:b7:1c:1f:49:68:b9:a0:f8:fa:7b:da:
75:42:8f:6b:4a:7c:d0:74:33:c6:c7:2c:70:07:ba:11:4b:7b:
01:c1:db:b3:b8:ca:c6:52:f7:dd:8e:4e:05:f2:12:52:08:11:
70:62:85:f2:bd:2b:9a:17:02:1c:13:ce:7b:80:13:fd:61:57:
fc:77:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:44 2025 by rpki-client