Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/jQxUZb7WZsbAk0bdh7GVcymfJ9Q.roa
File: jQxUZb7WZsbAk0bdh7GVcymfJ9Q.roa (raw, json)
Hash identifier: g15PEpXoZcoTBRwyQW4oL6Ee4f0OmWK3mnysCIT7mOc=
Subject key identifier: 8D:0C:54:65:BE:D6:66:C6:C0:93:46:DD:87:B1:95:73:29:9F:27:D4
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 09E46359
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/jQxUZb7WZsbAk0bdh7GVcymfJ9Q.roa
Signing time: Sat 01 Jan 2022 11:00:41 +0000
ROA not before: Sat 01 Jan 2022 11:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207267
IP address blocks: 2a09:ca06::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165962585 (0x9e46359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Jan 1 11:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d0c5465bed666c6c09346dd87b19573299f27d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:b7:01:d0:51:7d:87:02:60:11:7c:4a:44:
35:d9:db:f3:2e:34:17:fd:f5:74:a0:7a:b0:e0:79:
28:61:98:01:c8:da:7f:35:e3:4e:ab:cb:6f:7b:c0:
c7:d1:88:68:cc:ec:41:2b:b7:2a:cc:91:37:09:78:
19:16:bf:86:5b:70:ba:0d:40:12:95:1c:0e:c0:4b:
17:db:f7:4d:2b:56:cf:e2:6f:c4:44:80:74:8e:98:
f3:6e:fc:b6:32:67:fd:c9:64:1c:a3:65:b7:d5:ca:
42:22:dc:f3:e7:f6:dc:36:52:1e:3d:83:cd:59:0c:
3b:b4:09:46:30:15:32:25:b8:e5:8d:5d:ab:89:8f:
45:32:25:9e:d0:44:cb:73:60:84:d1:5d:c2:0a:b7:
b1:44:cd:dd:6b:3a:2c:87:f5:d9:bf:b6:9e:27:9a:
6d:22:1c:29:0a:26:e4:8d:42:2d:11:41:2d:12:ba:
2d:b2:b9:d2:57:15:76:70:46:d2:e0:88:e3:00:05:
47:57:88:b5:d2:6e:cf:ca:01:71:78:8c:3a:75:2b:
2e:53:95:57:f7:3b:fb:ff:3c:32:6c:15:d3:af:d5:
cc:27:5b:90:75:5f:36:fe:ca:34:47:ab:56:b6:76:
54:96:dd:b8:12:c6:94:8b:28:80:bc:48:da:03:7d:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:54:65:BE:D6:66:C6:C0:93:46:DD:87:B1:95:73:29:9F:27:D4
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/jQxUZb7WZsbAk0bdh7GVcymfJ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ca06::/44
Signature Algorithm: sha256WithRSAEncryption
86:6e:13:7e:03:54:f9:6c:22:37:97:d1:19:22:3a:52:c5:d1:
b3:8e:6b:ce:bb:22:ad:bb:6b:6f:88:68:2b:d0:27:10:ee:83:
f7:3e:7f:00:eb:26:97:c9:a0:9f:22:06:3c:8f:07:f0:f6:51:
34:ac:d9:39:24:9c:fd:ef:17:4e:bf:64:aa:c9:ef:d2:74:ff:
03:4f:1d:84:e8:ad:e5:31:26:d5:1f:41:a1:1f:a7:5a:a0:c2:
14:f5:1f:da:29:4e:ed:a1:18:df:07:66:b4:d1:a8:b2:f7:28:
6e:e3:1e:e9:02:db:d3:00:ae:35:83:57:2d:21:a1:1c:1f:47:
a1:d9:e7:22:4a:40:13:69:00:56:35:85:5a:c1:26:de:fa:44:
a4:c5:d1:69:49:18:af:0b:81:85:9f:47:e1:8b:3b:a0:01:d8:
ab:6c:4d:5b:22:cc:a7:59:12:79:61:4e:75:7a:d8:69:38:ba:
00:99:b4:d0:e1:d1:47:00:1f:dd:a3:ec:93:4e:d0:63:bf:40:
e0:fd:d0:a4:4a:db:c5:bc:26:27:a7:4c:8b:e9:37:c4:ed:8d:
53:31:05:49:7b:29:df:02:aa:3d:dd:1d:b3:55:28:77:80:be:
35:21:88:16:43:ad:6e:c5:94:53:58:ec:30:b9:7d:00:5e:13:
6c:2f:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:45 2025 by rpki-client