Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/tkdzPWoO-epQYoEl9-akjGPF7O4.roa
File: tkdzPWoO-epQYoEl9-akjGPF7O4.roa (raw, json)
Hash identifier: y+cFo23Arz11/6wl3kA8e4rbbU4udPxbl+iW3kGzjcM=
Subject key identifier: B6:47:73:3D:6A:0E:F9:EA:50:62:81:25:F7:E6:A4:8C:63:C5:EC:EE
Certificate issuer: /CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Certificate serial: 018DDC69A8A7A780BED10881DEC2ED4C5A5C
Authority key identifier: 82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/tkdzPWoO-epQYoEl9-akjGPF7O4.roa
Signing time: Sat 24 Feb 2024 18:38:48 +0000
ROA not before: Sat 24 Feb 2024 18:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211270
IP address blocks: 2a12:fac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:69:a8:a7:a7:80:be:d1:08:81:de:c2:ed:4c:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Validity
Not Before: Feb 24 18:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b647733d6a0ef9ea50628125f7e6a48c63c5ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:58:af:71:44:bf:63:27:b4:db:43:a1:d2:
3c:c2:06:78:78:0e:93:98:09:81:bc:b0:00:61:61:
fb:14:b1:ce:e7:f8:04:e7:21:8b:be:1d:8f:d3:2a:
aa:11:0f:e7:22:ae:e9:cd:fe:2e:86:a9:09:a3:cf:
d1:dc:c0:0c:50:4d:46:ff:c1:ec:4f:a4:3f:7b:10:
53:69:65:fa:99:13:a4:96:b3:8d:91:67:92:3d:f8:
20:8d:6f:8c:2e:b4:c4:7a:cc:50:f5:d4:9a:2d:6e:
40:62:dd:e2:4e:23:e0:dc:12:3b:1f:94:eb:e5:33:
b8:66:02:ef:44:3c:14:15:95:6c:79:86:5f:1b:c3:
9d:89:4f:34:e5:0b:2b:50:09:28:80:19:e2:f4:6c:
93:76:8a:f0:03:45:80:14:05:20:8b:01:f7:69:c7:
82:ed:43:9f:44:eb:24:0a:26:da:7e:dc:ad:4a:9d:
29:eb:f0:3d:1c:5b:79:9a:87:fd:03:fa:bd:76:2d:
27:50:39:af:b7:a3:35:f3:b0:6e:87:16:fd:4c:38:
bc:b8:19:f7:3c:d3:92:03:12:99:87:fa:0c:9d:5e:
d5:05:00:4b:a6:f5:5d:47:76:3e:8d:b2:e2:28:2a:
78:1a:f3:35:ad:7b:40:f4:29:f1:50:d2:8c:77:21:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:47:73:3D:6A:0E:F9:EA:50:62:81:25:F7:E6:A4:8C:63:C5:EC:EE
X509v3 Authority Key Identifier:
keyid:82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/tkdzPWoO-epQYoEl9-akjGPF7O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:09:e6:20:96:c4:3e:8c:83:9b:87:09:37:a8:27:35:9a:f1:
89:f4:98:df:6b:5c:98:3a:d7:b6:da:0d:9b:59:2b:0e:00:ee:
b0:91:95:68:d0:12:b1:09:74:72:2c:bc:3b:6a:32:45:b0:d9:
8e:47:12:30:1e:12:54:3d:1a:70:93:cd:02:a6:2f:b0:aa:d1:
f1:6e:ba:9b:b2:06:4d:71:4d:61:06:d6:3a:3c:86:ca:33:64:
13:a7:62:82:c5:25:4b:1d:74:20:24:b1:cd:ad:a6:07:9b:07:
66:68:35:bb:6c:83:53:3f:1b:9d:b2:76:f7:f9:c9:4c:dc:2a:
cc:7a:8c:cb:c5:92:b8:67:a7:d9:6f:5f:f5:71:04:46:26:91:
19:c2:17:28:e7:a6:68:d2:78:d9:2d:66:04:9d:fc:ff:2d:99:
4a:86:57:ce:3e:29:81:f2:db:2f:e4:ff:11:b1:83:5f:1a:8d:
c1:9e:33:b4:e2:6a:55:0a:2d:3b:67:f4:a1:0a:cc:1d:a3:06:
7a:34:db:ba:95:5e:a9:04:b1:f4:66:9f:3a:0d:c1:8e:b5:34:
83:e7:ea:cb:2f:03:5e:8b:c8:18:b0:fe:15:5a:c3:df:98:15:
9a:a2:88:99:23:70:15:99:f7:30:de:8e:c1:97:a5:f0:61:a0:
49:91:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:15 2025 by rpki-client