Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/akTc0LtINa-O7mQqp3lsDAEaVpU.roa
File: akTc0LtINa-O7mQqp3lsDAEaVpU.roa (raw, json)
Hash identifier: a/aqiVeRaivHfxPko96NXHiaS0b9G0Phc2qrvIejzxc=
Subject key identifier: 6A:44:DC:D0:BB:48:35:AF:8E:EE:64:2A:A7:79:6C:0C:01:1A:56:95
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 06BC12FE
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/akTc0LtINa-O7mQqp3lsDAEaVpU.roa
Signing time: Sat 01 Jan 2022 15:05:49 +0000
ROA not before: Sat 01 Jan 2022 15:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212149
IP address blocks: 2a0f:8646:b00b::/48 maxlen: 48
2a0f:8644:b00b::/48 maxlen: 48
2a0f:8642:b00b::/48 maxlen: 48
2a0f:8640:b00b::/48 maxlen: 48
2a0f:8643:b00b::/48 maxlen: 48
2a0f:8645:b00b::/48 maxlen: 48
2a0f:8647:b00b::/48 maxlen: 48
2a0f:8641:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112988926 (0x6bc12fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jan 1 15:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a44dcd0bb4835af8eee642aa7796c0c011a5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:f3:74:9d:76:bf:53:d1:fd:d3:35:b2:3e:
19:95:4f:e0:56:ef:b6:77:7c:e3:8d:66:13:0b:89:
41:42:5f:b2:ed:f6:89:0d:34:29:c0:5a:7e:aa:e7:
60:56:e5:d6:d7:7d:a5:bd:af:94:c5:8a:32:17:16:
73:9d:8d:9c:4d:13:75:3e:51:d3:85:a7:54:ec:7a:
91:95:23:31:04:19:15:f3:0b:8b:95:29:35:71:8a:
cb:07:da:c8:42:70:e5:a3:97:15:c2:ed:f2:1a:2c:
ad:f4:fd:ed:10:17:4b:bb:28:0b:1a:4a:91:0e:a2:
85:d7:f7:9d:06:8c:c9:c2:3e:1b:88:00:6a:03:73:
66:b0:b6:f8:b9:da:89:f0:b2:f3:d8:e5:99:9b:ad:
2e:ef:fc:43:18:35:4f:b2:07:9b:7d:29:03:bc:32:
6b:a6:b7:25:5e:10:58:17:55:ea:a4:dc:4d:3a:ac:
bd:e9:ca:cb:5e:66:3c:be:85:f0:5e:cb:08:46:44:
80:f2:f2:6d:03:c9:2b:3c:32:84:a8:ff:f1:aa:7c:
84:ae:2a:34:cf:df:ec:75:e8:53:b1:82:f7:dd:ee:
b6:7c:36:f5:c5:b4:47:d0:56:d1:53:96:6b:b2:f7:
fb:7d:61:ed:94:71:92:bd:0a:9c:a5:56:d1:64:8a:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:DC:D0:BB:48:35:AF:8E:EE:64:2A:A7:79:6C:0C:01:1A:56:95
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/akTc0LtINa-O7mQqp3lsDAEaVpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8640:b00b::/48
2a0f:8641:b00b::/48
2a0f:8642:b00b::/48
2a0f:8643:b00b::/48
2a0f:8644:b00b::/48
2a0f:8645:b00b::/48
2a0f:8646:b00b::/48
2a0f:8647:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
87:64:3a:08:c3:d8:9a:e5:c6:9d:d7:e1:03:9a:21:7a:f8:72:
0d:1e:b5:a1:00:c0:f6:28:e7:b7:fa:82:d8:7a:b2:d1:bf:9e:
fd:dd:ea:1f:9a:03:ec:fe:10:eb:7f:df:ec:3b:d7:cd:f5:a2:
e5:1e:78:ff:9f:46:9a:0a:97:29:2f:f5:20:52:ce:6b:22:d6:
27:f1:65:0e:7a:40:69:5e:35:8b:5e:9c:14:ed:d2:2d:f9:60:
54:d7:d0:95:46:bd:50:00:33:87:6a:8e:81:c1:88:3e:b3:e3:
e2:a4:ae:14:5e:5d:57:41:52:2c:91:ed:20:40:06:a7:6a:d5:
98:61:4d:d8:68:ef:24:23:28:6a:f3:92:74:8b:ce:b5:b7:97:
ab:49:3b:56:bf:15:09:96:1b:d0:e1:ea:a4:54:90:7c:d9:c1:
73:31:f3:bb:b5:fd:73:52:09:b9:c8:dc:68:e7:8f:0a:00:62:
7e:1e:62:62:83:d5:ea:a3:29:4c:a2:49:c0:f0:0d:f0:e0:17:
79:9f:da:35:07:2e:83:43:ce:b7:e3:c2:ae:31:9e:9f:15:c5:
18:bf:18:67:0a:75:b1:d6:b6:41:d5:93:d9:20:61:dc:ea:84:
06:d0:ac:4a:45:90:3a:f6:6d:71:16:9b:9b:8c:d5:63:ae:a3:
e3:78:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:38 2025 by rpki-client