Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/SHFcF4LjY-OOfwGkbSl17AFEL9c.roa
File: SHFcF4LjY-OOfwGkbSl17AFEL9c.roa (raw, json)
Hash identifier: m12gvzn2b6ymqqpJjitKrmca5u4EGMCeX20w4LDSZxE=
Subject key identifier: 48:71:5C:17:82:E3:63:E3:8E:7F:01:A4:6D:29:75:EC:01:44:2F:D7
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 080AB4
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/SHFcF4LjY-OOfwGkbSl17AFEL9c.roa
Signing time: Thu 03 Mar 2022 10:23:25 +0000
ROA not before: Thu 03 Mar 2022 10:23:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a12:9140::/48 maxlen: 48
2a12:9140:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527028 (0x80ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Mar 3 10:23:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48715c1782e363e38e7f01a46d2975ec01442fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:a3:a8:19:da:7a:67:5e:e6:94:0d:38:60:
05:13:b6:6b:1a:0d:dd:02:36:19:d7:99:7f:33:a8:
ce:e9:84:a2:00:8e:c8:77:01:cc:dc:89:9d:dc:33:
1e:5b:b3:40:07:42:71:81:3f:0f:fb:00:fe:0f:f7:
a6:9c:d1:72:7a:a5:89:9f:13:ad:55:a2:d0:a8:c0:
0a:eb:1b:bb:45:d6:15:df:12:29:3b:64:36:aa:1c:
b2:9a:68:37:33:98:ea:49:65:6e:6d:5a:2f:31:69:
9d:6f:d6:fb:0e:e8:e8:16:cf:83:66:38:7f:5f:0e:
a4:06:a1:9b:76:cb:13:75:ad:27:72:2a:94:5d:f5:
67:1f:b7:17:3b:07:9e:62:1a:99:f6:ff:44:29:cc:
37:54:46:c9:ea:ab:b8:08:eb:f8:76:5b:e4:b7:b7:
ae:07:3e:43:bf:07:de:59:61:df:5f:1c:b5:36:02:
a3:b7:95:46:d9:3e:33:99:71:ef:3d:7d:e4:d4:16:
34:03:42:b4:43:b9:b5:8d:50:9f:93:f7:f3:9c:a3:
40:dd:f9:ac:a5:11:98:b0:95:b5:2d:25:54:5a:40:
7a:9f:6a:49:3d:2e:78:de:b9:14:b6:dc:90:9b:df:
1d:8e:fe:a9:8b:06:b8:dc:e9:13:d5:e5:73:b5:4a:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:5C:17:82:E3:63:E3:8E:7F:01:A4:6D:29:75:EC:01:44:2F:D7
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/SHFcF4LjY-OOfwGkbSl17AFEL9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9140::/47
Signature Algorithm: sha256WithRSAEncryption
e2:0c:f7:8a:67:41:34:86:d1:dc:26:30:5a:d6:72:b3:16:c0:
b6:b1:7f:e5:b6:d4:83:22:11:41:7a:7f:29:74:27:87:e7:e8:
36:ab:67:c7:5b:2b:38:00:64:e0:63:f5:0a:cf:10:18:d6:c9:
c9:6e:90:6a:21:bf:e1:d3:32:67:f9:73:68:7b:2b:87:89:6d:
b8:28:92:df:9a:52:8f:ca:0f:08:42:ef:75:8f:b0:80:ab:35:
12:5b:98:90:70:66:f1:f0:c0:7c:19:a5:d9:fe:c0:61:ef:c3:
28:fd:90:3b:c1:8a:08:ee:30:0e:b0:48:1d:5c:4b:03:f1:9c:
be:e4:5c:51:eb:ff:36:bd:43:39:a9:30:38:63:c0:ef:64:6e:
83:33:96:6e:b7:d9:4d:68:a7:21:f3:77:2d:bb:4b:7e:f5:6b:
2c:36:d2:89:8b:e3:a9:5b:f8:d4:90:0a:dc:01:bc:b6:a8:6d:
89:f8:0d:47:14:ad:ff:93:cb:14:5d:23:b8:f0:cf:a5:6e:05:
58:bf:40:13:f7:3c:25:4b:d8:8e:50:74:02:ce:e8:68:d0:f3:
c1:3b:c6:83:8c:5e:58:6a:91:e2:26:3f:b9:20:1b:0e:ef:75:
6f:3d:b0:32:50:ef:24:83:1f:2f:07:4b:67:9d:95:d6:07:1e:
67:f7:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:09 2025 by rpki-client