Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/Iz5Lr49qsQU_t8s1AkMu-txH7X8.roa
File: Iz5Lr49qsQU_t8s1AkMu-txH7X8.roa (raw, json)
Hash identifier: LQPDm5Va91gdvlmrYmuvMyv2IeGm+FludrDQmncBbbA=
Subject key identifier: 23:3E:4B:AF:8F:6A:B1:05:3F:B7:CB:35:02:43:2E:FA:DC:47:ED:7F
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 018CC7940FB2E0F5E7182CFA001AA92261DF
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/Iz5Lr49qsQU_t8s1AkMu-txH7X8.roa
Signing time: Tue 02 Jan 2024 00:30:18 +0000
ROA not before: Tue 02 Jan 2024 00:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0f:b2:e0:f5:e7:18:2c:fa:00:1a:a9:22:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Jan 2 00:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=233e4baf8f6ab1053fb7cb3502432efadc47ed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:37:32:e8:13:2f:c0:03:8f:9d:ac:b2:44:
2a:ea:cf:7b:63:35:65:5a:80:a0:85:49:03:b3:d1:
8b:82:ec:79:d5:48:6b:da:60:32:fa:75:46:11:16:
25:cf:c0:39:2e:03:ab:49:be:c3:71:91:e7:79:74:
d6:f2:15:c4:64:3b:69:90:66:ac:da:48:ab:b4:7e:
7a:3a:d1:73:cd:22:c5:93:50:a5:9e:06:80:70:a8:
b2:e1:1e:7d:49:e5:6b:85:49:9a:1d:70:d8:6f:93:
1e:85:e6:6c:2c:08:ac:34:f4:0e:2c:47:ef:c5:fa:
db:af:84:94:b2:da:b6:d6:47:db:93:11:c6:52:f3:
b8:00:71:63:ae:b7:d7:cb:71:58:97:29:45:9e:6c:
57:89:83:2e:b3:51:81:92:cc:86:94:16:65:f3:01:
d7:a9:cc:06:91:91:97:f4:bc:b8:c3:a9:47:36:d1:
89:b2:3b:4b:24:5d:73:87:95:86:4d:81:22:5a:93:
fe:65:33:8a:85:33:9a:3c:2b:7d:f3:df:a5:a2:fb:
8c:4c:cd:03:06:d2:19:46:5d:e6:51:cf:18:bd:3e:
b2:8d:13:43:a0:11:60:c6:7f:92:ec:91:9d:76:a0:
fd:eb:dc:9c:51:85:5b:34:2f:75:77:7a:21:ed:8d:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:4B:AF:8F:6A:B1:05:3F:B7:CB:35:02:43:2E:FA:DC:47:ED:7F
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/Iz5Lr49qsQU_t8s1AkMu-txH7X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:140::/29
Signature Algorithm: sha256WithRSAEncryption
6b:b9:54:41:26:83:2b:13:e4:19:3a:cc:d5:53:af:1b:60:89:
8b:44:1b:7d:8f:6b:9b:d4:ab:31:8e:bd:4c:04:e0:4b:5b:5f:
c0:5a:5f:66:4b:81:35:91:bd:d7:83:e1:db:05:58:f6:9a:9b:
28:68:7d:03:41:b2:be:73:a4:15:e2:62:88:15:da:6b:76:47:
c5:d2:e0:dc:5f:a3:50:a1:7c:6b:ac:c9:e9:df:ed:3d:e8:e5:
31:25:ff:14:c5:f7:89:1f:9b:d4:e7:24:23:bd:b8:58:0e:92:
84:24:7e:41:d2:f5:3a:df:88:5c:79:c7:20:21:e3:b6:96:97:
2f:21:ab:05:e6:b5:17:5c:c9:5f:f1:73:c0:af:c5:89:45:57:
c4:62:fe:d9:db:61:11:a5:d4:54:34:2d:fd:db:37:6a:77:dc:
b3:8c:68:cb:b5:31:e8:0f:aa:86:12:d5:fd:03:9b:24:f0:28:
f9:2e:45:ce:3f:2e:67:ac:67:81:a4:e1:8e:ae:af:85:f5:2d:
48:89:58:a1:fe:39:25:7b:f8:a2:0a:46:35:80:7c:e7:d6:b5:
b2:84:80:4f:3a:6a:83:00:82:15:db:15:c1:9c:a5:6c:fd:3d:
0f:1c:fa:13:89:d6:54:57:18:9b:58:8f:82:8c:f8:d3:d0:d7:
a9:d7:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:47 2025 by rpki-client