Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/9oZtLajk2Xw7XVNJsHuf5AzqTe0.roa
File: 9oZtLajk2Xw7XVNJsHuf5AzqTe0.roa (raw, json)
Hash identifier: 4DcXUrwdeDb5I8c+i5Y4t+1fcM0V8sHLl9wFnacnR70=
Subject key identifier: F6:86:6D:2D:A8:E4:D9:7C:3B:5D:53:49:B0:7B:9F:E4:0C:EA:4D:ED
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F6044A
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/9oZtLajk2Xw7XVNJsHuf5AzqTe0.roa
Signing time: Sat 01 Jan 2022 13:00:30 +0000
ROA not before: Sat 01 Jan 2022 13:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212775
IP address blocks: 2a00:7180:8010::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670434378 (0x27f6044a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6866d2da8e4d97c3b5d5349b07b9fe40cea4ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:7f:0b:12:5e:64:8e:4a:14:02:5b:33:45:
fe:e4:0c:d5:eb:4c:8e:d8:6c:2c:7c:09:cd:b4:90:
83:b7:34:e9:30:84:74:24:f2:7c:d6:9d:9f:37:3e:
83:3e:ef:09:95:35:c1:55:e1:82:54:d5:29:c7:0f:
5d:bc:70:61:54:92:b5:90:e1:da:d9:36:fb:98:9f:
72:11:ae:cb:b9:34:c0:9b:69:e0:62:90:cd:c6:da:
d2:fb:f1:a9:b2:39:d9:27:ab:8a:f6:8f:04:63:ed:
ac:a2:51:de:32:48:27:c0:aa:44:01:90:d0:1e:c0:
ec:6c:94:c9:cf:d9:5c:08:c0:d7:fb:a7:0d:0a:82:
d3:d9:a1:9d:03:d3:63:5b:8c:c2:7b:2c:ee:80:6f:
6c:e4:3b:ba:3f:a1:01:b6:66:7b:7d:23:17:64:47:
c0:79:09:f0:30:c3:5e:26:a0:7f:8a:5b:ae:a3:49:
58:01:7f:3e:62:2d:c7:21:f1:7e:8e:4a:71:e5:6c:
8e:d0:56:fa:d1:c1:3c:ed:43:46:aa:c5:f4:fe:11:
81:23:e1:fa:57:f1:13:69:c9:d7:60:40:dc:82:d0:
c3:f5:4d:f4:e6:80:56:39:4e:cb:96:fb:d7:de:20:
4e:4d:19:7e:5b:23:7f:d7:eb:e3:1b:df:93:ec:7a:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:6D:2D:A8:E4:D9:7C:3B:5D:53:49:B0:7B:9F:E4:0C:EA:4D:ED
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/9oZtLajk2Xw7XVNJsHuf5AzqTe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8010::/46
Signature Algorithm: sha256WithRSAEncryption
83:99:0e:e8:c1:de:b0:00:a4:fb:f5:4b:47:73:6e:18:e4:f3:
37:14:4c:16:a1:22:7a:f6:c7:4d:39:2f:98:21:d4:25:6d:7f:
12:4a:b1:34:5d:29:8b:d0:05:70:ff:98:a9:59:3d:d5:49:de:
fc:d3:67:b4:05:77:a0:fe:2c:18:01:dc:d3:6c:8d:66:ec:58:
2d:ea:53:63:d1:75:13:a6:a7:f9:82:da:9b:b6:1d:66:aa:5e:
aa:6e:d6:85:4e:95:62:97:f5:0c:c0:60:0e:fe:52:7d:63:d6:
29:14:8f:a2:cf:7e:3c:79:cd:a9:80:b5:07:ef:40:24:fe:d6:
bc:14:62:18:6f:5d:72:ca:0c:0e:a1:5e:4c:8a:d5:ea:63:af:
d5:59:46:08:d0:c0:09:44:73:50:91:c4:f4:96:14:e8:1c:56:
98:13:f4:72:f2:2f:16:31:c9:c3:e8:27:9d:bc:fc:de:b1:40:
0d:70:d5:d5:8f:44:0a:68:8d:ea:eb:2a:6d:00:67:79:65:56:
e3:d6:43:b7:96:fd:5e:53:8e:b6:92:fa:4a:f6:31:4a:db:d6:
0a:2f:e7:9b:5b:03:45:77:49:45:f7:dd:bb:86:70:bb:cb:1e:
0d:cd:60:cb:9b:a9:ca:8e:0f:d2:7e:62:4c:c6:75:7c:b4:ba:
cb:bb:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:36 2025 by rpki-client