Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tRMBGkOObLm_aos8314oo4uU9mE.roa
File: tRMBGkOObLm_aos8314oo4uU9mE.roa (raw, json)
Hash identifier: 2xic0rkJRO/y1/AaYmN3wi9Mvm5/kr08WpofC5v6Vwo=
Subject key identifier: B5:13:01:1A:43:8E:6C:B9:BF:6A:8B:3C:DF:5E:28:A3:8B:94:F6:61
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 03317E92
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tRMBGkOObLm_aos8314oo4uU9mE.roa
Signing time: Mon 24 Jan 2022 08:06:43 +0000
ROA not before: Mon 24 Jan 2022 08:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:110::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53575314 (0x3317e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 24 08:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b513011a438e6cb9bf6a8b3cdf5e28a38b94f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:e4:b3:28:23:f3:26:50:ab:3c:a6:a9:d7:
f5:0b:18:51:8a:76:b9:86:7e:5d:4b:1b:96:35:bf:
f7:15:34:09:5c:5a:30:74:e7:37:b8:43:64:92:dd:
df:31:82:8d:01:55:63:e8:43:02:2c:df:29:18:d5:
be:a5:44:a5:ad:29:2b:c8:13:90:02:77:eb:9e:c8:
0b:1f:c5:d3:7b:23:38:17:a6:8f:23:ff:94:c6:11:
56:a4:25:c3:b8:39:64:18:8f:ca:c8:24:8e:15:b5:
0d:a3:e3:82:0d:0a:25:93:b5:f3:1b:57:17:cd:35:
be:55:08:31:72:cb:22:2d:f2:43:8f:f1:e0:d2:17:
b3:1b:dd:57:9f:99:9b:49:01:7c:19:3a:67:ed:00:
14:07:6c:2f:c2:93:e9:ab:57:f1:7a:0b:86:48:46:
5d:a8:32:aa:c1:7d:53:cd:f5:cf:2f:43:a5:ae:ac:
a0:f8:7f:42:04:71:0c:25:63:89:6b:10:9f:c9:04:
60:48:88:45:23:f2:f9:34:96:7e:3e:64:48:f1:2e:
0f:2c:4e:a7:a5:c0:31:6d:15:bd:c3:0e:9d:18:44:
fd:18:9e:19:2d:e8:08:6f:d6:27:65:14:c3:0a:f7:
2c:16:55:61:e5:96:61:07:2b:96:38:6d:96:c5:15:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:01:1A:43:8E:6C:B9:BF:6A:8B:3C:DF:5E:28:A3:8B:94:F6:61
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/tRMBGkOObLm_aos8314oo4uU9mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:110::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
8c:8e:00:cf:e5:f0:3c:db:e6:ad:59:22:08:8b:2a:97:6a:9e:
19:24:2e:5c:8a:90:6d:b2:d2:69:c7:21:40:92:c7:11:7b:dc:
9c:ad:9d:66:c6:b5:3f:90:76:2f:23:2f:69:79:4c:12:24:6d:
e1:fe:2d:31:fc:c1:c5:43:99:f2:0f:90:00:d1:a9:07:d9:ff:
67:70:38:12:df:07:cf:b5:22:ca:e3:99:53:b3:49:47:31:4a:
cb:ad:5f:96:83:e9:3c:f2:bf:14:a5:c2:c5:4d:38:75:9d:8f:
33:3d:fe:a0:b8:16:37:e4:34:a1:b4:cf:e8:9e:97:7d:ff:47:
4f:53:1c:91:04:cb:d9:a3:94:51:1b:d9:5f:c0:f5:4b:75:14:
c3:f1:88:93:1e:22:43:5e:b9:a3:2f:99:47:dc:b2:29:cd:cb:
89:ea:0b:69:35:90:2a:d2:84:9d:99:8d:b7:00:4f:f0:95:4d:
f1:52:1c:71:83:ff:73:1f:e4:1c:32:25:cd:d0:b6:5a:3f:d5:
70:f2:db:12:ff:6f:e8:39:42:c4:83:f7:26:09:b2:c0:b4:17:
05:18:f3:69:b9:d6:d0:e9:69:bd:56:34:be:9b:25:1c:81:48:
4b:cb:7c:d5:40:88:00:38:ad:0a:66:97:e0:88:52:ae:5e:7f:
4e:d4:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:43 2025 by rpki-client