Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/jauesy_fLYr6i8kvqP_tqNf2rNI.roa
File: jauesy_fLYr6i8kvqP_tqNf2rNI.roa (raw, json)
Hash identifier: QtmrG5j3aLwy6xeqSPMmwYWNFLkD9BV96eovQzBVGbk=
Subject key identifier: 8D:AB:9E:B3:2F:DF:2D:8A:FA:8B:C9:2F:A8:FF:ED:A8:D7:F6:AC:D2
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: 01856F66D88FF571BF110266B1F16F6647F1
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/jauesy_fLYr6i8kvqP_tqNf2rNI.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d8:8f:f5:71:bf:11:02:66:b1:f1:6f:66:47:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dab9eb32fdf2d8afa8bc92fa8ffeda8d7f6acd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:c9:60:0d:23:70:98:3f:8c:d5:b4:32:fa:
7a:60:6b:ea:24:5b:49:29:bb:af:29:de:fe:ff:9c:
e0:eb:f5:63:10:61:ae:c9:ed:0b:2e:fb:d3:25:2b:
bc:76:1b:1f:7f:c8:3d:30:8e:1d:24:90:2e:2b:b8:
4f:50:d1:8c:0e:bc:bc:18:46:ad:77:29:1b:3c:d1:
1f:e0:7e:7b:6f:7b:b2:5f:6d:7c:b0:2a:d1:39:57:
77:b5:66:b1:37:c4:8f:76:cf:b6:a3:d4:c2:b8:8b:
ea:ee:4e:2c:e7:dd:23:d2:56:c8:64:6c:e2:ee:7f:
3f:0f:bd:5e:b7:3f:0f:01:70:e0:52:9f:f9:41:5d:
83:cb:53:67:d8:16:55:22:61:ac:d2:dd:68:90:e9:
4f:22:b5:e7:1e:a2:b5:5c:98:f7:fc:b8:68:87:fe:
14:86:e3:5e:a8:c1:c8:b2:91:f2:ba:b8:03:25:30:
14:09:bb:f1:90:d4:ea:8e:69:da:24:f9:a2:51:c2:
2f:46:66:fd:6f:d3:45:f7:49:fd:3f:12:8d:21:31:
61:3b:27:4a:46:26:2a:ff:8b:d4:e8:14:b3:a9:66:
e7:b1:f2:05:75:f7:43:02:21:98:c7:81:69:e3:00:
d7:c2:ca:43:7e:55:c7:c7:47:79:09:dd:c9:4d:15:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:9E:B3:2F:DF:2D:8A:FA:8B:C9:2F:A8:FF:ED:A8:D7:F6:AC:D2
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/jauesy_fLYr6i8kvqP_tqNf2rNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7580::/29
Signature Algorithm: sha256WithRSAEncryption
43:2a:c5:6a:34:fa:7e:e6:16:ff:dc:26:5d:95:f9:0a:1b:66:
d7:4f:c0:27:08:c8:2f:28:8b:c2:c8:7f:e3:1c:4f:c9:40:c3:
53:23:26:fe:d4:54:78:25:55:10:f8:d1:64:c0:69:65:68:f9:
af:46:83:66:80:93:8c:99:ef:f8:f6:f8:52:ef:08:d3:d1:dd:
49:32:9e:69:bf:90:1a:3b:30:f6:bb:5c:cf:5f:9f:45:81:5e:
05:0f:c2:88:bb:fb:e8:c9:5c:b4:b6:08:46:cf:53:d9:2c:9b:
39:43:c5:1a:0e:2f:24:8a:47:62:6e:a6:70:0b:dd:cb:c0:af:
59:37:ef:b8:5d:75:20:6e:7a:1a:1d:63:d5:e6:01:1a:73:e5:
49:c1:7e:ab:00:8a:0e:b4:8a:a0:77:45:43:1d:21:99:b6:a4:
a9:45:15:1f:10:89:47:0d:aa:be:65:d5:0f:df:1d:88:fc:35:
66:eb:3f:f7:0a:9a:ba:b4:ef:f7:b2:0c:91:a8:6b:a2:fe:51:
a6:5d:c2:da:cb:1f:8b:68:25:3b:7b:35:62:c4:eb:41:79:ef:
5f:eb:ef:08:d0:95:f4:95:00:61:2a:53:5e:fb:ed:46:a7:fe:
85:ab:f0:6a:b2:42:1a:55:a0:78:d1:2b:9a:bb:eb:6a:8c:60:
f9:76:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:12 2025 by rpki-client