Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/pXyL8-0klCw_FZgxRzK8C7Z3TmE.roa
File: pXyL8-0klCw_FZgxRzK8C7Z3TmE.roa (raw, json)
Hash identifier: lpw8fUqP6tQajULqFDgcKxLiRBRWEWDfAfIC7Vu/Bxw=
Subject key identifier: A5:7C:8B:F3:ED:24:94:2C:3F:15:98:31:47:32:BC:0B:B6:77:4E:61
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 07404D2D
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/pXyL8-0klCw_FZgxRzK8C7Z3TmE.roa
Signing time: Sat 01 Jan 2022 01:53:23 +0000
ROA not before: Sat 01 Jan 2022 01:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208646
IP address blocks: 2a0e:3bc0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121654573 (0x7404d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 1 01:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a57c8bf3ed24942c3f1598314732bc0bb6774e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:e3:b0:5d:b1:10:f4:c2:ae:93:18:03:59:
94:43:08:54:bc:48:b8:39:bd:51:be:c2:4c:fb:3f:
50:3f:81:ff:fd:ab:e8:43:1a:47:60:b0:8c:b1:76:
43:1f:11:cc:4d:d3:07:ce:ac:7e:ce:5f:31:e2:c2:
c2:15:7c:f3:bb:07:41:bc:56:d8:5e:7e:57:16:55:
64:19:91:72:14:22:51:67:2f:de:47:78:74:27:f3:
56:3f:e8:d5:c2:45:de:eb:70:3c:b1:b4:95:c0:cd:
4d:dd:0f:23:3b:12:67:1f:46:73:d7:ed:74:ad:a6:
4a:7d:d1:5c:2a:6e:55:33:1a:6c:a3:50:5d:4a:f9:
eb:c1:63:2a:67:ef:93:35:42:70:6e:17:93:72:23:
82:9e:e4:79:e5:22:81:83:d0:b4:7f:ae:f4:0c:fc:
34:08:d9:30:7f:d9:ec:a3:d0:31:13:54:ca:0e:95:
7f:0b:01:ef:37:5e:f8:5c:77:87:cd:00:a1:e4:25:
78:1c:3e:a2:ca:de:13:cd:3d:f2:22:73:84:30:1f:
d6:0f:fb:87:73:b7:2a:53:f8:67:5f:3c:50:94:95:
da:6d:05:bd:ed:74:e5:77:7b:79:46:41:a8:f4:0f:
c9:40:fa:2c:db:c1:67:c1:41:0e:61:6d:62:e6:53:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:8B:F3:ED:24:94:2C:3F:15:98:31:47:32:BC:0B:B6:77:4E:61
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/pXyL8-0klCw_FZgxRzK8C7Z3TmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
64:16:45:fb:76:53:98:79:ce:60:db:e8:dd:99:91:a7:52:76:
69:71:6b:6a:59:42:8b:69:3d:3c:f4:1c:52:bc:a4:97:6e:b7:
3e:13:31:17:08:c7:63:73:2d:24:83:9a:a7:0f:88:bd:68:26:
a2:aa:4a:90:62:74:13:44:04:ee:eb:89:71:f1:8e:61:9c:41:
86:19:d9:ff:bd:55:73:7c:aa:06:56:f2:83:1f:01:93:d5:a7:
92:9d:53:e4:f8:da:a2:97:e8:b6:cc:fa:e7:87:7b:7e:ab:af:
6f:57:42:2e:a0:a7:9e:41:4e:28:2f:ec:21:d2:f8:eb:d6:60:
55:70:30:20:76:f3:94:d7:86:20:e6:00:ad:aa:17:98:09:65:
b2:39:0f:98:13:48:7a:72:a3:d1:f4:f0:cb:30:f6:88:14:3a:
87:a4:ba:00:ef:fb:31:0a:5c:af:22:7c:c3:e1:c4:52:73:08:
8c:e4:bd:f0:61:bb:15:4e:c3:9c:4a:b6:c2:99:2f:d3:32:98:
0f:3d:b7:ab:83:e5:77:cf:7b:7c:bf:af:0a:bf:c7:ca:c9:95:
37:eb:78:12:e6:fa:b8:ef:18:35:54:0d:0e:75:04:2a:6f:81:
91:00:00:48:2f:70:ea:a5:63:83:e5:37:d1:e5:c2:38:ca:25:
5c:37:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:42 2025 by rpki-client