Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-c60PLjk-NCEeRfFUdwjgkicvnU.roa
File: 1-c60PLjk-NCEeRfFUdwjgkicvnU.roa (raw, json)
Hash identifier: YDuZvAe6jP5D1Zb2Cea63r0NQ1CUkdVy2dhfM7loXV4=
Subject key identifier: F9:CE:B4:3C:B8:E4:F8:D0:84:79:17:C5:51:DC:23:82:48:9C:BE:75
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0187514340940AC8E8DA83980F2DFE2187F8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-c60PLjk-NCEeRfFUdwjgkicvnU.roa
Signing time: Wed 05 Apr 2023 11:52:54 +0000
ROA not before: Wed 05 Apr 2023 11:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 2a13:2980::/30 maxlen: 30
2a12:a341::/32 maxlen: 32
2a13:2984::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:43:40:94:0a:c8:e8:da:83:98:0f:2d:fe:21:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 5 11:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ceb43cb8e4f8d0847917c551dc2382489cbe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:9e:37:59:b6:0c:0b:ad:59:c8:10:0f:31:
7d:06:23:32:bf:bf:b3:a1:7b:8f:c0:87:23:c0:10:
b1:a4:39:2c:ef:f8:19:6b:6c:36:aa:3e:7b:2b:a9:
05:55:aa:9e:c8:dc:3c:00:d8:ef:44:5d:d9:7e:3d:
fa:df:2c:e9:aa:5e:04:28:b9:a8:72:7c:eb:79:d4:
57:83:bf:33:d2:27:0a:37:a1:ff:4e:99:f5:3d:6f:
77:76:47:6a:20:4d:a5:c3:b0:3b:3e:27:3b:87:64:
9c:98:33:e5:0e:0c:c7:15:81:be:f9:73:03:08:00:
de:a5:35:31:5f:47:36:bb:ad:e1:22:a9:fc:14:32:
5c:ed:fd:f7:0e:63:5a:bd:75:8e:cd:6b:d2:82:ab:
48:b1:a4:8c:98:42:8f:95:56:c1:c6:26:48:6d:c9:
92:68:cd:f5:b8:9f:8d:30:e6:f3:b1:b9:ea:ea:e9:
4b:a6:33:ea:ea:07:ee:68:43:40:2c:05:36:72:10:
57:77:df:ab:25:e2:14:7b:ec:76:bb:16:74:ad:f3:
2d:e3:76:16:8f:ec:18:b6:f1:a1:1d:c6:4a:15:73:
64:f8:4d:18:51:09:bc:6a:d3:98:43:b0:36:9b:9d:
00:a1:61:51:54:52:3d:6d:1d:45:d0:36:f6:be:e8:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:B4:3C:B8:E4:F8:D0:84:79:17:C5:51:DC:23:82:48:9C:BE:75
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-c60PLjk-NCEeRfFUdwjgkicvnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a341::/32
2a13:2980::/29
Signature Algorithm: sha256WithRSAEncryption
31:81:b3:66:1f:d4:0c:be:7b:09:85:5d:18:e7:36:b3:33:1d:
f4:d6:f6:fb:28:7a:36:53:cf:ac:9c:54:20:6b:39:0e:19:38:
41:f2:f7:ba:33:57:b3:3f:9f:2c:29:50:f2:40:db:bc:3e:3a:
19:c0:b6:2f:1d:87:74:49:e6:fb:f3:d9:72:d3:0f:8c:95:2b:
34:bc:1f:60:4b:18:1b:ea:a2:6d:05:32:43:0c:37:c7:ce:fb:
ed:97:64:8b:5b:57:fc:7b:47:1c:a0:75:55:52:6a:ad:c3:e2:
25:da:91:67:ba:17:81:fe:ad:76:67:b4:5b:5f:aa:8b:d9:20:
31:9c:2a:de:9a:0d:24:3f:63:a8:d7:47:45:98:9d:1d:81:8b:
5f:da:33:29:e6:b4:df:3d:91:be:1a:7e:a7:e4:f2:80:34:33:
60:3d:25:7f:a3:9e:8a:4a:96:5d:fd:b3:cd:a3:e6:ac:e3:f6:
b1:74:72:a1:05:e3:61:90:b9:a2:86:d5:a3:2f:b3:cc:b8:07:
7f:23:09:52:f4:30:d5:a8:48:41:91:db:ae:98:1b:bd:d2:34:
c7:ca:12:d3:3e:ee:a7:26:4d:01:a0:e9:e0:d0:e9:10:fb:66:
ee:58:7c:a2:59:d4:66:ae:49:a7:c4:d1:77:b2:22:19:cf:f3:
6b:dc:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:03 2025 by rpki-client