Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/dydb-uMPmOaqN6FejF3BexJR9sY.roa
File: dydb-uMPmOaqN6FejF3BexJR9sY.roa (raw, json)
Hash identifier: wP0f3pv5cjt4ekkpyofnfSa3hDgLVuQX76iGJ1h54PM=
Subject key identifier: 77:27:5B:FA:E3:0F:98:E6:AA:37:A1:5E:8C:5D:C1:7B:12:51:F6:C6
Certificate issuer: /CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Certificate serial: 018573039D4EC70DA9BEC4EA2DCCFF94C24B
Authority key identifier: 16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/dydb-uMPmOaqN6FejF3BexJR9sY.roa
Signing time: Mon 02 Jan 2023 15:04:54 +0000
ROA not before: Mon 02 Jan 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a12:1100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:9d:4e:c7:0d:a9:be:c4:ea:2d:cc:ff:94:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Validity
Not Before: Jan 2 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77275bfae30f98e6aa37a15e8c5dc17b1251f6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:fb:f5:5d:8a:0d:c4:d2:4b:ef:70:31:3a:
53:27:55:c4:aa:41:9e:1e:51:1f:9c:96:a1:f1:cd:
b5:ba:69:45:e7:13:e4:f6:50:c0:f8:e1:19:78:71:
b3:00:d5:c4:d3:ee:ce:f2:14:48:18:3b:e1:50:4e:
da:3d:73:eb:42:36:8e:e0:77:b9:e0:3c:03:2b:84:
41:36:4d:97:d6:51:99:d1:24:84:1e:d0:2b:bb:c5:
c5:2c:56:db:2f:73:75:76:50:06:d6:c6:42:c4:bb:
e9:c6:f2:0d:71:84:da:79:94:93:99:49:95:52:52:
fa:b4:f5:fd:60:4b:c6:e4:87:41:43:d3:18:19:db:
0e:2a:ce:7a:16:60:26:7c:58:79:4a:60:4d:58:da:
de:4e:7a:61:12:c3:9b:f8:fb:70:c0:6c:59:d6:70:
60:fc:df:72:ca:21:26:9b:46:ce:79:82:01:7b:66:
1e:e0:93:ce:2e:cc:53:a8:58:f0:f8:d3:5a:7d:45:
f6:df:d4:ac:af:ae:ac:0f:a9:00:bd:89:44:b2:d8:
be:da:61:b9:f4:5c:e6:72:c8:12:20:79:c9:3b:5c:
04:a6:d3:f7:25:44:57:3e:a2:61:ff:03:9a:56:8e:
fa:36:a7:e4:fc:a5:05:8f:12:0b:a4:6d:0b:41:71:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:27:5B:FA:E3:0F:98:E6:AA:37:A1:5E:8C:5D:C1:7B:12:51:F6:C6
X509v3 Authority Key Identifier:
keyid:16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/dydb-uMPmOaqN6FejF3BexJR9sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1100::/29
Signature Algorithm: sha256WithRSAEncryption
63:65:ef:81:18:f1:64:3b:63:27:fc:93:2a:80:19:10:f4:b6:
d8:43:7f:4c:8a:1e:d7:cd:27:ff:d6:ee:78:4d:1b:4c:d4:87:
c4:85:bf:b8:90:08:9e:59:ba:39:a1:60:d0:7d:00:b6:59:a3:
a8:83:9e:52:aa:9d:f3:eb:49:cd:94:19:4a:01:0d:34:94:2b:
e7:a3:06:b0:40:3b:c5:3c:e8:87:1d:a8:69:58:60:e3:ed:3b:
d4:ce:7e:84:4d:22:97:43:23:bd:8d:e0:0e:21:d4:9b:82:32:
e3:43:30:ed:7f:ff:47:9d:a3:6f:6d:a6:23:85:5e:d5:27:99:
40:c9:08:72:9a:6d:57:dd:4e:2d:a3:c8:df:7e:ce:27:dd:9c:
bd:23:23:3c:b9:c3:37:14:6c:ba:53:db:50:d2:6a:a5:a8:0a:
54:67:3a:f8:93:55:ce:9e:bd:bd:a6:dc:ab:d2:53:64:ff:a0:
1e:95:d5:56:63:77:55:91:4b:80:02:6c:4d:01:2d:97:83:8d:
eb:3d:3a:e2:51:66:db:7c:7b:39:41:d6:a0:13:ca:64:e0:dd:
20:8e:58:41:ab:7f:f1:16:38:2d:a2:1a:a2:f4:c2:60:63:f8:
79:5b:8a:d3:25:f4:f2:ad:7c:9a:d0:df:92:9b:00:14:19:81:
eb:75:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:15 2025 by rpki-client