Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa
File: o8G0eWZ7qn33CT1KHg42m9v4ovY.roa (raw, json)
Hash identifier: 5KkPBQeIngWVZGRAdFEwHQDIQQMFAZ6luehlEbRHvjw=
Subject key identifier: A3:C1:B4:79:66:7B:AA:7D:F7:09:3D:4A:1E:0E:36:9B:DB:F8:A2:F6
Certificate issuer: /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial: 056B2A2E
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa
Signing time: Sat 01 Jan 2022 03:54:54 +0000
ROA not before: Sat 01 Jan 2022 03:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 999999
IP address blocks: 2001:678:d44:2::/64 maxlen: 64
2001:678:d44:100::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90909230 (0x56b2a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Validity
Not Before: Jan 1 03:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3c1b479667baa7df7093d4a1e0e369bdbf8a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:81:9a:2f:be:b6:22:96:5d:1e:b2:6b:a8:
78:8f:b3:63:86:41:2a:b3:e5:14:7b:a1:c5:79:1a:
8c:c9:2a:5f:46:f9:70:34:c6:70:35:35:14:1b:91:
05:5c:da:74:eb:77:7f:58:eb:03:73:61:e3:97:cc:
96:dd:c7:4f:59:24:73:f3:79:d9:7d:e4:2d:e4:98:
55:b3:b3:20:93:e1:c9:c7:90:f3:8f:40:96:42:34:
28:2e:b9:5a:b2:96:92:e8:fc:04:35:7b:fd:0c:93:
d6:f6:55:f6:24:d4:19:d3:ce:20:15:1c:0e:1a:7d:
3e:cc:67:42:55:8a:6e:93:d5:a9:0b:55:d7:b8:a0:
d4:80:78:18:a8:ba:05:7c:49:2c:55:b6:b2:3e:f1:
e6:6f:af:62:b2:a6:01:42:45:a1:e2:d6:72:64:0e:
1c:6b:a5:15:49:8f:60:22:a5:1c:a6:3d:e6:dd:28:
b9:76:e4:ee:c9:92:2a:6a:ba:8e:84:37:d2:88:9a:
af:31:a2:0e:97:ce:62:de:7a:e6:41:e5:cf:ad:36:
9f:80:11:ae:a4:92:5f:f2:66:f9:36:ef:81:9c:65:
9a:a2:19:15:53:a8:22:ae:0e:24:c0:f8:30:99:02:
95:39:d7:83:58:19:85:0c:91:0e:8e:90:c5:d2:47:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:B4:79:66:7B:AA:7D:F7:09:3D:4A:1E:0E:36:9B:DB:F8:A2:F6
X509v3 Authority Key Identifier:
keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/o8G0eWZ7qn33CT1KHg42m9v4ovY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44:2::/64
2001:678:d44:100::/64
Signature Algorithm: sha256WithRSAEncryption
ab:08:8b:54:d9:0c:2b:ac:46:41:59:f4:3c:ed:d8:1f:c0:cc:
2e:a1:f4:c0:23:13:4c:a9:30:7a:c5:fe:f9:84:99:5e:31:0b:
5a:2b:3a:1e:76:27:8f:00:9e:70:2e:89:76:11:b3:74:87:c4:
9a:44:5c:6a:ea:ca:95:f1:e3:f9:40:6e:08:37:26:41:13:0a:
a1:e2:04:60:48:6f:f9:57:97:d1:30:50:a0:9e:bd:af:d1:4a:
22:2c:87:90:f8:41:11:36:11:5b:6d:11:72:e1:e8:a8:38:26:
22:cf:0e:68:9d:80:6e:99:27:eb:aa:76:f0:e4:c2:fa:a6:1b:
98:3a:90:6d:6b:46:e9:00:9d:13:fc:08:4a:2f:2e:fb:b8:95:
80:5d:6f:9b:7f:75:82:1b:89:c2:66:44:00:a5:4e:7b:88:74:
14:d3:32:5c:49:00:bc:0a:2e:5b:41:e1:ff:c5:69:81:ab:68:
ae:27:c6:5e:e7:f2:b7:d4:19:b9:30:ab:e5:b5:2b:a0:9b:16:
26:48:a6:ea:36:85:70:5a:5e:2c:77:74:63:7b:98:82:1a:a3:
2d:2c:15:69:8e:0e:41:36:c3:26:50:11:58:4f:cc:8a:e3:74:
28:a1:16:00:50:99:3c:d7:31:02:7d:31:17:75:81:97:dc:6a:
ef:13:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:20 2025 by rpki-client