Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9WEjiB3o25NH9O1U4wxt8TZ2_fs.roa
File: 9WEjiB3o25NH9O1U4wxt8TZ2_fs.roa (raw, json)
Hash identifier: rgz9MgwK+p4JMI+W+Z/62sU0cfIJ0P1p7JQmPPsEIvQ=
Subject key identifier: F5:61:23:88:1D:E8:DB:93:47:F4:ED:54:E3:0C:6D:F1:36:76:FD:FB
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0182FCB16D416E7906EA9E330FEFD6F6942B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9WEjiB3o25NH9O1U4wxt8TZ2_fs.roa
Signing time: Fri 02 Sep 2022 05:34:22 +0000
ROA not before: Fri 02 Sep 2022 05:34:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 2a12:a340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fc:b1:6d:41:6e:79:06:ea:9e:33:0f:ef:d6:f6:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 2 05:34:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f56123881de8db9347f4ed54e30c6df13676fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:63:6d:42:6f:0a:79:ad:98:e0:f8:73:cb:
3a:59:53:41:b7:ee:ab:67:04:69:5c:4d:a7:34:de:
1a:af:be:13:07:52:1b:68:e8:c2:e9:72:69:4c:02:
74:60:ca:91:1b:50:68:ba:39:89:b2:1c:00:3c:28:
77:48:52:b6:49:52:3a:4c:26:d2:92:ef:48:53:e3:
50:76:fd:e6:3b:b1:d3:64:84:cf:64:70:2e:7e:2e:
a3:2c:73:3e:89:05:ed:e7:29:fb:d3:a6:a4:eb:62:
f4:50:f3:69:7b:38:74:76:7f:f9:f0:63:43:ed:e2:
11:0e:38:ab:b3:5a:4d:79:5b:ca:9c:ab:84:4f:b4:
41:28:17:07:e4:8a:4b:a1:36:49:dd:f4:f0:5f:af:
14:dc:e0:7a:fa:a2:35:42:30:0e:07:d8:e2:da:8c:
37:16:7d:f8:e9:29:19:bb:1e:2e:64:7a:62:cb:cb:
57:01:bc:6c:1f:78:8b:09:db:f1:4a:22:90:aa:e4:
4a:0d:73:f1:eb:6e:1d:44:51:3d:ce:5f:81:24:92:
0b:f7:f3:78:50:0b:a6:ee:0d:04:67:ef:5f:ad:ef:
cd:e2:df:57:77:a1:54:b5:d5:86:77:c1:ee:88:c5:
27:cf:37:a1:5f:01:0b:5d:14:06:c8:70:19:a0:85:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:23:88:1D:E8:DB:93:47:F4:ED:54:E3:0C:6D:F1:36:76:FD:FB
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9WEjiB3o25NH9O1U4wxt8TZ2_fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a340::/32
Signature Algorithm: sha256WithRSAEncryption
03:b1:b5:1f:4c:fa:15:a5:5e:40:17:20:36:83:b4:55:47:30:
2c:c2:f3:32:8e:a5:2d:ad:17:08:20:c1:99:ae:87:9c:b0:28:
d4:49:ac:c9:8b:6d:55:03:87:95:47:70:dc:a3:9c:b8:58:40:
53:06:71:1e:d2:ed:41:73:07:63:d1:87:89:85:0d:a1:31:2c:
4b:f6:1e:1f:1f:75:fe:1a:70:94:a4:d3:e4:d1:77:ec:39:50:
73:e3:93:ef:2e:6f:56:ae:4b:e4:74:43:26:95:07:79:c5:72:
2d:76:b1:fc:fd:31:06:19:ce:2a:b2:04:fc:7d:6b:bc:64:3a:
e6:02:0a:9e:9a:24:f3:fe:ce:07:b9:34:60:5a:e1:e4:c5:a7:
77:c8:f1:5d:9a:e9:a1:3a:bd:eb:4e:27:71:e8:a2:ad:10:13:
e7:f9:d7:54:65:3a:25:e9:5e:6c:ff:92:ca:da:e2:7c:c2:85:
92:68:02:af:75:2b:d8:af:04:42:9a:a2:ef:27:f1:72:e4:24:
39:35:4b:89:6c:59:b2:38:07:31:3f:ee:47:db:e6:e4:93:dd:
ba:a2:b6:7b:3c:3e:31:30:f5:0a:31:cb:f4:8b:8f:ed:35:f0:
31:6f:6e:27:93:b3:48:8d:0e:7e:9c:18:f0:be:fc:97:20:1b:
44:c4:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:17 2025 by rpki-client