Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/wLxUt5EUnjRmn5yjz7_skD1Q6Q0.roa
File: wLxUt5EUnjRmn5yjz7_skD1Q6Q0.roa (raw, json)
Hash identifier: bwOhMOYsivt4rIKaKWOOkZZnCwt1KIhtAAVsxggcPEM=
Subject key identifier: C0:BC:54:B7:91:14:9E:34:66:9F:9C:A3:CF:BF:EC:90:3D:50:E9:0D
Certificate issuer: /CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Certificate serial: 01856C1CACEDE1D60D4822C1961E8896CECB
Authority key identifier: 82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/wLxUt5EUnjRmn5yjz7_skD1Q6Q0.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211270
IP address blocks: 2a12:fac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ac:ed:e1:d6:0d:48:22:c1:96:1e:88:96:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fd6ce85e919ab9bfad3f32dd9808f614009dc0
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bc54b791149e34669f9ca3cfbfec903d50e90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:1d:ae:f9:41:65:65:6c:19:f3:1f:36:ca:
64:85:ea:82:8c:48:19:d0:72:21:e0:49:9e:b2:64:
55:1d:99:b1:33:c8:9a:df:2d:7c:20:0c:16:53:60:
70:fd:95:a6:5c:ff:99:0a:b8:5a:86:97:5b:3d:05:
08:fa:00:dd:7c:1d:ff:86:7e:a4:d5:ed:3a:75:a1:
39:8c:90:ee:3f:86:4f:83:83:ff:31:65:41:99:e1:
25:91:4c:b6:7c:83:84:a0:7e:7d:bd:2a:02:40:a0:
e6:4b:6d:80:7f:2b:e9:ce:54:01:38:a8:0a:15:0a:
d8:a0:53:fa:39:98:51:4b:97:21:d7:c2:a1:60:f7:
99:fd:00:ff:9b:d1:a0:13:31:2f:d2:a1:43:ca:6e:
80:f7:19:42:e8:07:bf:50:66:44:9c:cf:83:27:e3:
5f:46:12:d5:b8:25:3a:e3:3c:df:e3:b5:79:79:8c:
f1:c6:a8:2a:89:87:ba:46:a7:93:05:ec:e1:04:7a:
50:e6:aa:27:76:f8:0c:4d:b2:d4:b6:b1:9b:3d:80:
5c:25:2c:57:00:17:1b:c3:5d:2e:9a:da:42:68:26:
a6:07:6f:f7:cc:5a:68:97:67:77:fc:71:95:b0:6c:
6b:47:39:25:33:55:dd:b0:49:df:49:6c:bc:9d:74:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:54:B7:91:14:9E:34:66:9F:9C:A3:CF:BF:EC:90:3D:50:E9:0D
X509v3 Authority Key Identifier:
keyid:82:FD:6C:E8:5E:91:9A:B9:BF:AD:3F:32:DD:98:08:F6:14:00:9D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/wLxUt5EUnjRmn5yjz7_skD1Q6Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/954876-d45c-4669-a1cd-6cbc38d4ea4c/1/gv1s6F6Rmrm_rT8y3ZgI9hQAncA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
15:69:d8:8b:4d:e2:52:97:92:b7:1f:cb:4a:21:86:18:37:8c:
9a:66:55:80:db:8e:84:27:4e:44:7c:b0:b6:de:4d:84:70:e1:
04:38:df:fd:76:23:4d:f0:0a:2d:f7:0e:c5:3e:3e:f7:a8:21:
d5:a8:a0:97:c6:a7:4d:e1:fd:2d:85:4a:3f:c6:e9:29:1c:ce:
76:90:b0:de:7f:60:c8:22:ed:0d:7e:94:c7:ea:65:af:e1:ba:
1d:78:7e:50:dd:1b:be:f6:c0:55:43:09:48:d7:8e:3e:f9:ea:
45:d3:64:09:30:00:07:9b:28:85:18:c4:5e:2b:e4:ff:5a:c7:
7f:c1:7b:d0:11:ac:e6:2f:59:52:76:1e:59:63:c1:c4:b9:60:
51:f8:c3:0e:cb:85:2b:69:9c:b3:b9:db:e6:d4:73:6c:75:c9:
bb:cd:0e:ec:cc:a5:59:2c:b7:3b:73:b0:89:6c:a8:62:4d:20:
1d:2b:2b:e7:0a:97:ca:98:24:31:91:06:bf:9b:1c:f8:f3:65:
29:65:e3:3c:2c:8f:0f:92:f1:f6:bc:c6:12:2d:8a:7f:f5:f4:
2b:c3:c1:ff:70:03:c4:b5:c4:6b:68:f8:86:6d:04:9f:66:09:
99:b3:9a:51:93:c8:ac:80:46:86:bd:3a:d4:2b:c4:83:b7:e1:
2b:46:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:17 2025 by rpki-client