Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/8Q6XyN6lfy3_DQtiLBj6GyEQPRI.roa
File: 8Q6XyN6lfy3_DQtiLBj6GyEQPRI.roa (raw, json)
Hash identifier: hf+P87NmR8siLW77DC0RkaV7K3M3eG8LLx+9CaVlO2g=
Subject key identifier: F1:0E:97:C8:DE:A5:7F:2D:FF:0D:0B:62:2C:18:FA:1B:21:10:3D:12
Certificate issuer: /CN=32998b4f88646f5e185bfc83776bbb05a69e6845
Certificate serial: 04578A
Authority key identifier: 32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/8Q6XyN6lfy3_DQtiLBj6GyEQPRI.roa
Signing time: Sat 05 Feb 2022 08:09:15 +0000
ROA not before: Sat 05 Feb 2022 08:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8485
IP address blocks: 2a12:6741::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284554 (0x4578a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32998b4f88646f5e185bfc83776bbb05a69e6845
Validity
Not Before: Feb 5 08:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10e97c8dea57f2dff0d0b622c18fa1b21103d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:03:2f:7d:da:a1:69:db:93:17:c3:1a:97:
48:81:a1:a8:f2:23:4c:c7:56:09:ba:9f:47:b8:06:
fd:45:f2:d5:9b:84:f9:2f:89:5c:46:5f:80:82:66:
19:4a:78:1e:57:b3:1d:bc:9e:ed:d5:e2:4f:1c:a2:
31:84:d9:e4:10:33:d1:27:f6:66:9e:17:76:d7:10:
a4:80:d3:d9:8a:ba:d4:54:d6:3d:40:26:9e:1e:e6:
4d:6c:ea:8e:2c:10:02:09:6c:85:ac:d5:03:ae:d5:
af:57:60:49:b0:b6:8d:45:f5:04:9c:d8:ec:5f:2a:
13:b4:0b:6f:d0:67:c0:f9:5c:96:36:c0:a8:4a:ee:
66:b0:eb:69:09:c1:e5:2a:d7:bd:7f:a9:bf:d5:a9:
68:da:5c:16:4e:04:fd:d5:8d:1c:c3:6d:8e:6b:09:
c9:10:4c:c0:f7:9f:2e:f0:68:f9:c2:32:64:0b:96:
f4:6e:ec:ab:7a:29:0f:d0:13:c8:1c:1c:9b:94:70:
f0:c0:df:fa:2e:00:d5:ed:ef:f5:39:58:0b:7f:24:
eb:62:b3:93:c8:36:2a:a6:6b:ae:dc:07:c3:e2:20:
71:47:5a:80:17:15:e0:2f:b3:62:57:f6:27:4f:cc:
a7:14:b1:ad:8e:28:11:13:cc:b8:d0:d5:b5:ef:a0:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:97:C8:DE:A5:7F:2D:FF:0D:0B:62:2C:18:FA:1B:21:10:3D:12
X509v3 Authority Key Identifier:
keyid:32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/8Q6XyN6lfy3_DQtiLBj6GyEQPRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6741::/32
Signature Algorithm: sha256WithRSAEncryption
20:59:52:2c:29:85:5f:a1:33:a1:81:13:a8:b0:1f:63:1e:f5:
b4:8d:ff:1b:30:09:28:ee:06:63:2f:84:78:70:23:5c:a1:5b:
6d:11:1c:30:24:cd:bb:db:da:4a:d2:e4:f2:2a:36:10:ad:44:
8b:ee:4f:19:2b:5e:3f:77:8c:4b:20:c8:7f:aa:3f:3b:69:a4:
b3:5b:47:f8:b2:cb:8b:9f:2c:00:1c:ed:0f:6a:c6:8d:11:da:
fa:32:79:6e:46:0e:4f:c1:f0:31:23:6e:5b:13:32:a7:59:8d:
92:4c:6a:35:f2:b1:12:32:87:90:23:d1:42:98:1b:80:5d:c7:
d5:54:a4:05:cc:ab:de:ca:00:dc:97:7d:ec:66:ef:25:99:05:
92:81:eb:5b:ed:94:ed:b3:9a:49:2a:4c:33:38:67:77:8b:e9:
78:8a:7e:e1:19:8a:00:c7:25:90:3e:f5:e4:bd:ff:d8:95:5c:
eb:87:f6:d1:db:d5:34:d1:5e:ff:c3:9e:aa:2e:b0:0e:c6:20:
64:dc:09:47:53:a8:51:4b:99:64:de:2d:b6:b8:a9:43:e4:fd:
54:ec:60:25:93:5b:5e:e3:96:d4:b6:ed:29:5d:96:e2:b4:3d:
59:5f:ee:6b:02:d5:32:36:5d:99:b9:80:e0:e4:a9:8c:1c:59:
c3:5f:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:48 2025 by rpki-client