Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/_1Iz_pHY2a-Wvb2Btv-EoSXUZqI.roa
File: _1Iz_pHY2a-Wvb2Btv-EoSXUZqI.roa (raw, json)
Hash identifier: /AysTpRy+f4sMfmRtnnPCytSu/Z6GZfkIBsqRMk0zaY=
Subject key identifier: FF:52:33:FE:91:D8:D9:AF:96:BD:BD:81:B6:FF:84:A1:25:D4:66:A2
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 073DA2A1
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/_1Iz_pHY2a-Wvb2Btv-EoSXUZqI.roa
Signing time: Sat 01 Jan 2022 01:53:22 +0000
ROA not before: Sat 01 Jan 2022 01:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208084
IP address blocks: 2a0e:3bc0:3::/48 maxlen: 48
2a0e:3bc0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121479841 (0x73da2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 1 01:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5233fe91d8d9af96bdbd81b6ff84a125d466a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:1c:e8:5a:03:4c:39:0e:8e:6f:98:0a:4c:
90:b4:31:c6:30:a9:e1:d8:4e:3e:43:22:90:c4:f7:
23:eb:9d:d6:44:0f:ab:e6:5e:85:36:a2:de:f7:6b:
26:ed:ae:3c:bb:17:ae:60:70:bb:63:16:22:db:d8:
10:84:07:01:7e:ef:82:77:da:37:7e:64:ca:07:5a:
d2:46:41:1d:6d:29:f7:fe:12:42:88:ea:5b:fe:06:
1c:ed:c8:72:68:e3:fa:e0:85:15:ff:ac:bc:27:21:
09:d2:b9:97:19:47:b9:97:ff:dd:e6:11:a2:0c:ef:
70:44:59:e6:ba:49:b6:e3:3e:6c:11:77:00:10:48:
ef:18:00:41:7b:06:0d:43:c4:96:70:66:ca:a4:3f:
5e:60:56:3d:8d:66:fe:3b:2d:bb:1d:16:a8:dd:94:
f6:db:14:03:a4:c6:ea:7e:27:99:21:e7:0c:f4:a3:
b9:2a:1d:16:60:3d:07:17:12:e5:6a:39:d2:3f:38:
82:c8:4e:3d:59:15:df:81:88:50:d4:11:41:76:b3:
61:e9:33:39:5b:6c:50:d7:07:90:c0:00:6a:51:04:
dc:1c:87:5b:24:dc:f4:3d:40:97:8c:44:97:43:8f:
53:5d:bf:4b:14:9e:f1:c5:7d:20:e1:6d:3b:a2:52:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:33:FE:91:D8:D9:AF:96:BD:BD:81:B6:FF:84:A1:25:D4:66:A2
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/_1Iz_pHY2a-Wvb2Btv-EoSXUZqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:3::-2a0e:3bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:0e:53:c6:f9:0f:cf:d1:65:49:7f:0b:7a:1a:3b:8f:b1:1c:
b4:06:62:b5:d4:ed:97:b1:a7:8f:1c:eb:7a:42:2d:fd:c7:4e:
b8:41:47:d4:05:fe:e4:c2:51:73:10:42:a0:fc:bf:cb:6a:2b:
80:a9:1a:9d:3f:9e:a2:1a:41:4c:a4:3c:2c:c7:67:24:e5:e1:
84:b1:42:4d:db:09:2c:d4:7c:a7:68:24:f0:d3:0b:bc:cb:6b:
74:a7:79:9f:4c:75:a0:0d:a0:b6:af:56:cc:d6:a2:ec:3e:1a:
6e:d8:14:ab:83:bb:dc:3d:c1:34:eb:98:2d:f8:bf:8a:eb:da:
fe:ac:86:38:6c:35:6c:33:59:97:cc:e2:06:16:bb:a0:cd:67:
8d:f5:dd:29:b7:25:30:d9:fc:90:6c:b1:9b:e3:29:c3:2c:8f:
25:88:5f:eb:cb:b3:1c:2a:aa:cd:1b:53:8b:77:85:cd:c4:ed:
03:bc:e5:e6:71:ad:66:26:94:05:f1:48:93:29:77:f0:27:12:
a3:de:fd:ff:7f:24:a8:65:e6:30:60:a1:74:d0:47:c7:37:80:
22:08:75:6f:4e:31:9f:5c:87:4a:55:2d:98:de:c6:01:96:82:
c7:7e:c3:f1:81:78:95:25:e8:93:69:cb:b2:29:44:35:90:90:
60:20:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:22 2025 by rpki-client