Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ick6kOaQau7pr_I0ANY_iiJbt34.roa
File: Ick6kOaQau7pr_I0ANY_iiJbt34.roa (raw, json)
Hash identifier: uypMWE91f69qlTx/ZljQ4L3Fya0WYguy5bz24ffqn1s=
Subject key identifier: 21:C9:3A:90:E6:90:6A:EE:E9:AF:F2:34:00:D6:3F:8A:22:5B:B7:7E
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01852BDC25EFA8852E35E9F40D8140C01735
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ick6kOaQau7pr_I0ANY_iiJbt34.roa
Signing time: Mon 19 Dec 2022 19:28:45 +0000
ROA not before: Mon 19 Dec 2022 19:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397270
IP address blocks: 2a0d:e0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:dc:25:ef:a8:85:2e:35:e9:f4:0d:81:40:c0:17:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Dec 19 19:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c93a90e6906aeee9aff23400d63f8a225bb77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:ae:f0:9e:3a:ea:ac:d6:3b:19:85:8f:36:
72:3d:59:b0:ac:b5:54:1f:c8:fa:35:42:a9:28:23:
ff:a9:8e:56:99:53:5f:5d:e5:20:ab:b6:e2:0a:d8:
81:b8:26:ae:0f:2d:9b:2e:03:eb:73:98:44:f9:84:
7b:12:89:77:56:57:1c:bd:13:2e:01:72:9d:eb:cf:
84:88:0a:59:76:3e:46:b0:65:96:ed:98:06:2b:a9:
9b:15:96:1f:77:26:d3:ca:41:cc:a9:cf:b9:bb:d1:
ba:55:90:93:d9:47:0c:75:21:e9:c3:31:50:8f:ac:
32:94:18:54:69:45:4a:18:5c:f4:be:eb:8a:d8:6e:
39:70:f0:25:c4:f6:47:c3:1d:27:f3:6b:7d:53:18:
99:68:26:07:a6:a1:24:e7:d1:56:cb:0a:81:00:98:
41:71:8d:44:b5:ec:36:c2:d2:4d:d7:f1:57:00:4a:
91:91:c0:32:ff:ae:0f:46:3b:d5:7d:a9:42:7c:2c:
99:0c:95:37:55:5e:1f:42:08:0a:98:7d:94:47:d5:
dd:71:ac:db:8e:57:ea:8b:f4:90:46:ce:43:df:8b:
85:d2:c8:bd:52:5b:21:ca:a2:81:77:38:13:63:95:
24:7b:3b:66:44:a9:f1:0a:77:b1:95:e1:96:24:06:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:3A:90:E6:90:6A:EE:E9:AF:F2:34:00:D6:3F:8A:22:5B:B7:7E
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ick6kOaQau7pr_I0ANY_iiJbt34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:d3:7e:61:12:8d:be:42:d0:e6:1c:a8:f4:27:68:34:cd:e7:
43:9e:45:95:ca:70:d2:d7:2b:3c:c9:de:f8:88:72:95:4a:3c:
5e:80:c2:31:31:39:58:02:07:9e:c0:9c:9c:8a:5d:7e:2b:07:
2b:1c:c4:20:41:6e:25:bf:8f:d2:b6:c4:f9:b9:1d:3e:d7:c8:
12:04:95:3c:23:1d:8d:f4:13:ce:a2:fb:68:70:30:52:98:3b:
38:45:4a:43:ab:ef:80:57:a9:11:ff:8c:c0:d3:1f:f6:55:c6:
ae:7b:a5:b5:20:d6:5f:9f:36:d2:0e:a5:92:fd:2b:aa:88:6e:
8b:8f:3b:a6:e9:2e:f8:4a:65:f0:84:eb:ed:8e:c5:8d:c6:ea:
47:87:f5:c5:22:b6:bf:d4:3d:33:8c:53:df:31:dc:ba:d9:cc:
65:bb:45:5d:99:cb:f4:c9:e3:7c:93:e0:a1:d5:60:1a:f8:36:
cf:93:c1:ef:9b:7d:4d:f9:a1:0e:1f:2e:cf:4b:fc:e4:d2:2f:
ae:07:57:77:01:c7:2e:f4:66:33:98:d4:33:c5:48:c4:86:45:
c7:0f:8a:53:c1:b4:9f:1f:ab:45:88:15:0f:86:04:ab:14:65:
33:c5:9b:14:c4:fe:4f:24:dd:a6:72:5c:fd:0a:e6:c1:9f:da:
91:e0:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client