Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/bH2uNluPFLM7eTQ77qNhu3U2fuk.roa
File: bH2uNluPFLM7eTQ77qNhu3U2fuk.roa (raw, json)
Hash identifier: othyPJHQtz9TMhu9tJy+1vIHIChOdOWVdsnycCAsrQE=
Subject key identifier: 6C:7D:AE:36:5B:8F:14:B3:3B:79:34:3B:EE:A3:61:BB:75:36:7E:E9
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: 018486AB4DED6105BD298A7493BE6D5DB8CD
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/bH2uNluPFLM7eTQ77qNhu3U2fuk.roa
Signing time: Thu 17 Nov 2022 17:38:04 +0000
ROA not before: Thu 17 Nov 2022 17:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ab:4d:ed:61:05:bd:29:8a:74:93:be:6d:5d:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Nov 17 17:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7dae365b8f14b33b79343beea361bb75367ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:f0:5d:2c:31:de:ff:49:67:b5:19:67:a1:
b0:ca:b1:9f:79:1a:12:8f:7f:91:1e:3a:c3:08:9c:
59:3a:7b:a3:fe:5a:6c:2c:15:33:f4:1f:7c:20:ae:
bd:02:25:e0:e2:2f:ab:69:b7:c1:bd:ac:b7:38:da:
47:60:58:3e:a2:82:61:79:80:4f:e6:05:13:e9:f4:
6f:5d:b3:49:5d:78:02:1e:03:02:4a:61:3a:2c:08:
12:e0:bf:b1:64:95:7d:23:79:8d:85:d3:5d:32:95:
d6:39:a0:e6:86:a9:b2:57:6a:e3:6f:f8:c7:7c:d9:
cc:4b:e5:e3:70:ab:f1:3e:13:55:31:c3:1e:e7:bd:
20:b0:34:c4:fe:43:35:85:1a:9b:d6:8c:5d:4e:fc:
7f:89:c0:c2:e1:45:3c:d1:5a:a9:d5:c7:e6:d4:30:
65:f1:41:d9:58:aa:33:1c:8d:b4:02:a4:a0:ce:7f:
53:4e:8f:19:7c:72:d1:c6:18:a6:50:90:22:c9:0d:
76:5d:3b:1c:bd:46:dc:af:5a:72:b1:e1:67:b1:39:
55:18:aa:e3:a3:b3:c0:c1:63:69:e5:1b:c8:c5:22:
73:47:21:51:5d:99:f8:70:aa:b8:80:c9:48:dc:98:
f9:e1:76:d1:21:2a:56:d6:ea:20:d8:93:9d:58:4e:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7D:AE:36:5B:8F:14:B3:3B:79:34:3B:EE:A3:61:BB:75:36:7E:E9
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/bH2uNluPFLM7eTQ77qNhu3U2fuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7580::/29
Signature Algorithm: sha256WithRSAEncryption
22:58:f6:86:d5:77:82:1e:04:e0:f8:a9:5d:7b:f1:37:53:1d:
1f:bc:7a:58:58:9c:5a:c9:32:2c:01:81:8f:a2:a0:49:e4:9a:
e0:21:ee:74:7b:04:60:c8:13:6b:29:d6:7f:d5:85:1c:71:45:
a2:e5:84:15:68:ab:c6:ab:55:ae:d0:e7:fd:50:cb:79:f1:6c:
06:2a:f5:d6:f3:6f:8d:63:32:a9:56:74:08:fe:75:fc:90:d8:
e7:c2:8f:7f:84:34:63:f6:b0:e6:63:b6:bb:ed:55:88:78:c8:
f0:10:c3:0f:ad:9d:03:09:bc:45:0f:a1:0d:91:fa:8d:d9:3a:
f8:27:9d:cb:92:c1:5f:97:28:f5:73:50:3b:1e:27:be:0f:7b:
7c:fe:ad:10:0a:08:86:fe:92:78:cb:4b:74:30:b5:0b:3c:68:
ed:e8:88:6d:24:f2:b8:cb:20:5f:71:20:13:c0:a2:58:25:c1:
56:73:17:71:66:be:35:8b:10:cb:3d:e5:16:63:8a:86:e5:52:
59:08:54:99:8e:90:5c:8f:4e:5a:a3:01:b2:b6:63:89:b2:18:
0c:18:79:0d:85:48:4a:fd:16:c1:7f:40:d6:da:6c:0e:f5:12:
87:39:36:34:38:45:ca:67:bf:f1:e9:5a:21:b1:cc:0e:5d:c3:
52:21:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:37 2025 by rpki-client