Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/TUOZzVZAojhVM3HU4OSKMEFo12E.roa
File: TUOZzVZAojhVM3HU4OSKMEFo12E.roa (raw, json)
Hash identifier: 5qfpEwlrm4qoGv/8Q38ZNRbi2bKF1xdQ95I1DcbrvXM=
Subject key identifier: 4D:43:99:CD:56:40:A2:38:55:33:71:D4:E0:E4:8A:30:41:68:D7:61
Certificate issuer: /CN=91afcc05df02f27470df8381140b95aaec1f35bd
Certificate serial: 01C7274C
Authority key identifier: 91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/TUOZzVZAojhVM3HU4OSKMEFo12E.roa
Signing time: Wed 08 Jun 2022 12:35:02 +0000
ROA not before: Wed 08 Jun 2022 12:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16247
IP address blocks: 2a12:e900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29828940 (0x1c7274c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91afcc05df02f27470df8381140b95aaec1f35bd
Validity
Not Before: Jun 8 12:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d4399cd5640a238553371d4e0e48a304168d761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:06:74:1e:6a:1b:56:e5:85:5d:10:7c:cb:
04:c4:89:dd:85:68:48:ec:fc:56:41:31:df:cb:80:
40:1f:a0:07:41:9d:fb:85:f3:a2:12:fb:0d:d8:0b:
53:16:71:bf:f1:29:38:d0:f2:e3:e5:0e:8d:9a:58:
21:64:b9:7f:21:6b:71:d2:07:ac:31:21:01:b2:83:
e2:eb:ba:5f:ac:a2:37:7a:bc:2a:ca:6f:91:9f:d7:
12:e1:d9:8b:9d:d4:98:23:8e:68:a2:ea:d4:69:88:
56:ef:d8:d5:48:82:f2:e4:f8:d2:04:b0:4f:7d:be:
4e:77:b3:77:65:d3:84:cb:27:6b:af:e9:8c:38:0d:
45:1e:87:fc:0f:89:d1:f1:cb:c1:b0:ca:29:36:b6:
e2:d5:c9:72:84:5c:a6:fe:c9:47:40:90:a6:46:4f:
da:e8:09:d4:c5:22:a1:2e:a5:5f:5e:68:b0:c4:a2:
09:0d:29:99:a6:57:95:c6:63:12:57:1b:42:d4:92:
fb:ff:e3:15:2d:d8:15:80:91:93:9f:01:f9:d6:cf:
c7:d9:cf:8d:87:79:01:7d:26:6d:67:f7:af:31:51:
04:f1:e8:a7:8f:58:83:96:34:41:8d:56:71:e8:3a:
52:9d:75:ce:e6:80:d1:e2:07:8d:d8:ed:0a:c4:5c:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:99:CD:56:40:A2:38:55:33:71:D4:E0:E4:8A:30:41:68:D7:61
X509v3 Authority Key Identifier:
keyid:91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/TUOZzVZAojhVM3HU4OSKMEFo12E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
09:cd:c8:14:79:72:73:ca:26:91:24:cc:9d:6e:9d:01:94:5e:
ed:ec:8b:46:a7:ae:cd:ea:96:18:f7:33:2d:af:b2:1f:60:b9:
11:34:9c:7b:b8:10:95:8c:94:32:05:1e:ba:8b:47:4d:ac:c8:
af:5f:2d:19:22:9c:b9:36:38:f8:2a:c8:4d:c4:6a:45:b0:8e:
a7:83:63:25:3c:2e:84:b2:af:b9:27:65:64:16:24:2b:72:8a:
e0:17:08:31:a6:62:79:ac:09:6e:b8:64:4e:44:8e:4e:67:ba:
c8:22:f0:7b:3f:5f:d1:84:71:01:02:59:fb:36:ca:da:f0:64:
d1:da:ec:d6:87:60:98:d9:d0:1f:e8:7c:72:ee:7f:46:31:0d:
55:9c:07:40:12:12:80:0c:4c:07:f8:ea:45:70:08:63:5d:10:
cd:16:1d:f7:bf:8d:53:a5:fe:d5:a6:20:c3:4f:bb:72:d3:59:
8a:7b:98:64:8d:fc:e5:a3:63:e3:d5:61:13:da:a2:f2:8c:bc:
8c:07:98:f8:99:c6:6b:08:cc:b9:13:3b:9f:02:d5:61:fb:7a:
94:9c:b8:62:9c:8c:bd:1b:60:d1:c1:1d:d6:b8:b4:fa:a1:64:
05:2a:73:ce:59:63:98:52:3d:0d:28:38:61:e6:2c:84:1f:11:
80:ad:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:43 2025 by rpki-client