Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oZQ2wyludbs3G-Amy43ch-gjehE.roa
File: oZQ2wyludbs3G-Amy43ch-gjehE.roa (raw, json)
Hash identifier: WhMjq6ic5TtCtTk7jEk1+ZuS2l4TjBkc8jaHOBsAA/I=
Subject key identifier: A1:94:36:C3:29:6E:75:BB:37:1B:E0:26:CB:8D:DC:87:E8:23:7A:11
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018322FB6A486C6E83FD2EE9AF2A9BFCB847
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oZQ2wyludbs3G-Amy43ch-gjehE.roa
Signing time: Fri 09 Sep 2022 16:00:45 +0000
ROA not before: Fri 09 Sep 2022 16:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0d:df40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:fb:6a:48:6c:6e:83:fd:2e:e9:af:2a:9b:fc:b8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Sep 9 16:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a19436c3296e75bb371be026cb8ddc87e8237a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:22:b3:e0:d1:57:f1:fa:37:1e:7d:70:e4:
cf:aa:6f:93:37:81:df:02:b8:bd:3f:bb:a1:86:3c:
5e:f6:b4:a7:c7:8e:b9:47:32:74:94:3c:19:a1:06:
16:89:f1:c2:4b:c1:42:46:8d:27:b7:ac:79:5f:88:
48:36:20:a0:9e:fc:2c:25:5c:9a:5d:d6:f1:b8:71:
c8:0b:7a:ee:b2:9f:c4:e1:0b:ea:5e:e6:da:b5:f1:
8c:f1:19:cb:20:9f:4b:16:f9:00:d7:38:99:e7:8b:
10:9b:4b:37:a0:b7:74:c4:ad:32:6e:9a:f7:70:b7:
5b:b4:91:96:34:9e:9d:41:a4:ff:4b:88:66:53:2e:
46:4d:c6:16:bf:70:6b:e8:90:be:0c:0c:75:2f:11:
fc:df:ff:25:dd:6b:80:f6:b3:6e:d1:db:66:98:68:
3a:a8:c9:d5:3b:86:33:e6:bf:72:0b:05:97:53:12:
b8:f0:a9:62:74:b3:47:d2:88:18:8c:0b:ec:f2:91:
fd:89:2e:ab:17:81:1a:13:42:27:87:75:cf:a6:fe:
90:09:8d:bb:70:1f:12:b3:8b:38:b3:85:e8:78:11:
62:a2:47:75:94:7b:a4:3e:08:25:86:9f:3c:7c:45:
2e:61:ab:51:76:a9:19:a4:d2:4b:3e:49:56:b1:33:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:36:C3:29:6E:75:BB:37:1B:E0:26:CB:8D:DC:87:E8:23:7A:11
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oZQ2wyludbs3G-Amy43ch-gjehE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:df40::/29
Signature Algorithm: sha256WithRSAEncryption
08:38:d1:1c:e3:e2:ee:e6:d9:1e:92:59:ca:42:f2:e9:1f:e2:
2b:09:cf:08:2f:95:1e:ba:37:01:2f:5e:98:5e:4a:ed:01:dd:
7e:c9:7a:a1:19:a1:8a:34:1b:e5:a2:19:62:fe:4a:0e:b0:0d:
2c:b8:b7:af:eb:8d:0b:3a:2b:60:b2:60:48:92:f5:5d:02:0d:
dc:8f:ca:6c:f3:ae:66:5b:6e:fe:b7:3c:34:9f:b5:1e:d6:02:
ad:0e:8b:d7:66:4d:00:45:d2:b1:1a:4c:7c:6c:3c:7c:05:2b:
73:6b:a5:de:39:0f:86:9a:2d:98:75:fc:13:01:af:df:f2:8f:
44:4e:b4:1b:65:c2:be:e9:0f:e7:a6:85:ce:1a:ef:fd:7b:c1:
5b:6b:1c:c8:c5:5d:49:07:27:8e:9a:9e:0e:4b:4e:af:99:1f:
ca:94:72:cd:0f:c8:38:e3:c4:35:53:fe:d9:5e:ed:c6:52:4e:
90:52:96:51:c2:c6:df:b1:38:76:60:1a:29:21:b0:4d:c0:5f:
87:0b:a1:fe:3c:62:74:8d:02:6b:22:f8:80:7a:65:31:78:3f:
66:da:dd:32:35:04:87:d7:a7:a3:fa:63:29:f7:7a:e3:6a:8e:
38:7b:a8:f1:a2:98:27:42:16:cf:75:73:32:ef:ba:47:10:cc:
c1:c5:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:40 2025 by rpki-client