Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/JvcQ7e3xJk3j2Zf2_B6CD-OhyOM.roa
File: JvcQ7e3xJk3j2Zf2_B6CD-OhyOM.roa (raw, json)
Hash identifier: WTJEQveTVLx4UDzGJuosxSz0riEM5BpjrJ8IPj5dLHE=
Subject key identifier: 26:F7:10:ED:ED:F1:26:4D:E3:D9:97:F6:FC:1E:82:0F:E3:A1:C8:E3
Certificate issuer: /CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Certificate serial: 018237124FBB937633023BC0492F8ECF8D58
Authority key identifier: 6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/JvcQ7e3xJk3j2Zf2_B6CD-OhyOM.roa
Signing time: Mon 25 Jul 2022 20:35:23 +0000
ROA not before: Mon 25 Jul 2022 20:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:12:4f:bb:93:76:33:02:3b:c0:49:2f:8e:cf:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Validity
Not Before: Jul 25 20:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26f710ededf1264de3d997f6fc1e820fe3a1c8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:6f:d9:cf:48:f8:42:53:7b:7a:ab:95:af:
41:3d:ec:3c:f1:19:f7:c9:d3:7f:ad:ac:e4:db:cd:
03:cf:67:51:fd:33:23:40:79:17:c0:ce:37:76:a5:
a7:99:05:b5:98:98:46:77:39:51:8e:81:8f:f7:c3:
9d:ae:a8:18:fa:19:aa:bc:6d:5c:f5:8a:c8:6f:fc:
47:f1:80:a1:d2:a6:68:dd:37:9e:cd:0e:5b:94:9d:
fb:39:14:b8:f3:4a:79:eb:fe:8a:03:f8:9f:b1:8a:
30:1b:d8:87:be:3e:b3:e4:a5:46:a7:8f:a2:60:e3:
bc:27:25:7d:9f:4a:b3:e2:17:28:f4:4c:68:dd:e2:
11:e8:08:ff:95:1f:50:5e:71:fa:0d:16:3f:41:84:
4c:a4:6d:2a:bc:f5:0e:68:e9:93:bb:6e:f4:8d:c3:
8a:d9:a4:4e:32:fd:49:3b:9e:08:49:34:53:84:bd:
70:1d:be:e6:2d:f9:0e:fc:01:53:e3:cb:0f:cb:6d:
40:fd:79:97:20:ef:1c:76:48:a9:d4:24:09:e9:a7:
cb:91:60:65:cd:04:c9:d5:2c:23:e7:e2:e3:fb:5d:
73:4d:3a:d9:e2:65:df:f9:bc:d1:a9:b4:bd:6b:c4:
42:42:37:17:31:c1:1b:0b:85:95:d3:b3:73:ab:6b:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F7:10:ED:ED:F1:26:4D:E3:D9:97:F6:FC:1E:82:0F:E3:A1:C8:E3
X509v3 Authority Key Identifier:
keyid:6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/JvcQ7e3xJk3j2Zf2_B6CD-OhyOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8340::/29
Signature Algorithm: sha256WithRSAEncryption
4f:18:ed:57:96:c3:d8:73:cb:be:27:68:5a:c2:24:dc:64:b7:
94:65:f0:2f:20:0b:cc:61:98:dc:c4:e2:da:cd:05:22:1a:fe:
1e:f0:9b:92:8e:8c:3c:55:43:79:89:cd:7f:3e:4d:6c:d3:0a:
0b:3c:96:73:8c:cd:c4:bd:af:46:8a:b6:2d:28:42:ec:c4:30:
63:31:94:01:8e:cf:a2:e7:ef:2b:c2:9c:ff:36:6d:c1:9d:15:
c4:44:b8:43:ea:5d:50:62:c1:4d:b9:91:e4:b8:7f:1c:2c:9b:
17:cb:26:ed:6e:42:d7:3b:25:d0:01:3b:19:b3:db:a1:63:9d:
ef:0d:0c:4b:62:fa:6a:63:95:66:e2:e5:cd:f2:eb:c5:e4:1f:
ed:70:29:9e:4b:42:60:9d:21:1c:5c:35:15:7e:d6:49:cc:1a:
b9:47:39:79:6f:09:b2:bb:6c:03:ad:0e:28:77:55:f1:b9:64:
91:d6:b6:01:59:90:64:3f:64:2f:55:a9:87:14:f6:67:87:fb:
22:00:25:0c:ad:ad:42:b5:c6:42:2d:39:7d:1b:5c:cf:49:d4:
95:f2:5f:c5:dc:ea:8e:cb:a6:ae:58:f9:5a:ca:e7:ca:96:10:
9f:fd:dd:30:80:71:0c:d6:ce:71:59:50:e3:20:8b:15:09:34:
a1:55:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:34 2025 by rpki-client