Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/6repdRHFlGFdBLCWlUs_CDe35HY.roa
File: 6repdRHFlGFdBLCWlUs_CDe35HY.roa (raw, json)
Hash identifier: 1rm/K4yDwHcK38KYM2MmjaiNBUA4z5WNe7u8E+Laezw=
Subject key identifier: EA:B7:A9:75:11:C5:94:61:5D:04:B0:96:95:4B:3F:08:37:B7:E4:76
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018486AB524E695A98E064D407DAB2C6D544
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/6repdRHFlGFdBLCWlUs_CDe35HY.roa
Signing time: Thu 17 Nov 2022 17:38:05 +0000
ROA not before: Thu 17 Nov 2022 17:38:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ab:52:4e:69:5a:98:e0:64:d4:07:da:b2:c6:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Nov 17 17:38:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eab7a97511c594615d04b096954b3f0837b7e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:1a:f2:6f:1f:0f:cb:01:7f:33:79:ed:ab:
90:3b:d2:3d:2e:3d:f8:97:08:97:6d:08:4c:1a:b0:
51:6e:85:92:e0:43:2b:58:98:0d:1f:6f:35:4d:ac:
32:1f:d4:3b:7a:bb:7d:17:7a:c3:88:27:8e:d1:70:
97:bb:81:78:80:de:7b:10:eb:8b:c0:5f:67:93:26:
55:d3:48:39:66:95:c1:8f:3f:5c:1d:ed:9e:bc:5a:
bd:0f:f4:03:37:34:11:85:35:09:09:c0:e5:95:cc:
96:b4:0c:98:77:a0:00:34:f6:0d:2c:cf:37:b2:dc:
66:8f:93:be:86:ba:1c:e0:0c:aa:66:d2:55:79:a5:
79:55:3f:1d:77:0a:ad:a6:45:80:32:90:59:e0:61:
a2:1b:98:a1:d7:29:0b:ea:c0:de:ae:68:69:35:e1:
dc:66:b9:d9:90:f9:06:9a:b4:4f:05:0b:19:01:b8:
b9:23:66:ec:ea:f6:59:46:e5:60:85:ab:5c:41:8c:
5b:92:e5:74:cc:c8:3b:ab:6b:69:72:48:08:ed:cc:
ea:77:00:b5:91:ab:b4:7e:1b:76:ae:a1:4a:6c:a8:
48:35:80:da:fc:c0:2c:14:f1:ae:54:50:eb:95:59:
86:c6:08:89:eb:fc:05:a9:c5:95:5b:a1:26:bc:13:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:A9:75:11:C5:94:61:5D:04:B0:96:95:4B:3F:08:37:B7:E4:76
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/6repdRHFlGFdBLCWlUs_CDe35HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:240::/29
Signature Algorithm: sha256WithRSAEncryption
8d:ad:a8:4b:04:da:87:10:27:2a:35:4d:59:b7:2a:89:1b:76:
97:df:c2:de:a2:5b:cf:84:4f:3d:b2:cd:94:23:fc:d1:65:b5:
c0:d6:ac:26:b4:16:3c:c6:c1:4e:ff:84:a9:a9:92:87:f1:0e:
bc:7d:1c:13:31:44:45:a9:b2:11:cf:9d:24:7e:cc:e3:a4:dc:
2e:a6:2d:a7:7b:03:49:33:9b:89:a3:fa:98:f4:1c:2b:68:4e:
6b:c1:39:e7:8d:5a:2e:9c:d9:30:f8:02:37:0a:e0:fa:c0:74:
a2:a8:19:09:b5:7d:29:f5:e2:ff:09:5d:05:16:af:f5:93:c7:
45:8a:b5:aa:02:62:07:cb:13:6e:da:45:f8:7f:bb:5c:c0:7d:
91:5c:5f:1b:13:89:1e:50:19:f8:e6:ff:54:04:a4:b1:5d:5b:
29:de:50:cd:9d:86:c8:1b:c9:c2:77:a7:39:a0:e2:b7:de:d1:
57:3c:f4:a1:fa:4f:81:37:a4:29:1e:b6:84:11:6d:b8:e0:4b:
a0:60:e7:68:69:2c:6e:c0:f4:c8:6c:f4:de:8b:f3:13:f3:c9:
b7:96:12:9f:f4:a4:7a:61:9f:c3:16:77:28:18:8f:7e:73:de:
bb:75:d5:38:b9:f3:91:8f:41:e3:0d:23:33:d0:b1:87:f0:c0:
40:4d:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:33 2025 by rpki-client