Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/w7ZksH8sbDEE-AakZPWJ6usp15A.roa
File: w7ZksH8sbDEE-AakZPWJ6usp15A.roa (raw, json)
Hash identifier: CuR670NYuBeD0SPMIIhq+PnlINfkqwGZFcjC/DJMxC4=
Subject key identifier: C3:B6:64:B0:7F:2C:6C:31:04:F8:06:A4:64:F5:89:EA:EB:29:D7:90
Certificate issuer: /CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Certificate serial: 01849FA4AA801657716B1CDC218595039580
Authority key identifier: C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/w7ZksH8sbDEE-AakZPWJ6usp15A.roa
Signing time: Tue 22 Nov 2022 14:01:19 +0000
ROA not before: Tue 22 Nov 2022 14:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44451
IP address blocks: 2a0b:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:a4:aa:80:16:57:71:6b:1c:dc:21:85:95:03:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Validity
Not Before: Nov 22 14:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3b664b07f2c6c3104f806a464f589eaeb29d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:18:d5:26:8c:73:df:6a:78:08:ac:34:09:
d5:56:4b:d9:f6:57:7b:95:6b:c6:b2:61:5d:7f:61:
ed:93:fd:0f:f8:b2:19:1e:56:30:cb:d0:12:5e:6a:
5d:af:79:4c:0f:36:1b:d0:07:bc:44:1b:93:f1:0a:
2b:04:e5:ee:6f:63:9c:87:16:4a:8a:92:8f:a2:bb:
6b:5f:12:77:85:1e:01:1f:0e:4a:d1:2f:16:f1:aa:
4e:02:b1:12:83:82:41:3e:20:ac:94:9e:06:96:78:
21:f9:89:a1:47:d8:e3:6d:31:f2:bf:bc:c7:d8:cd:
84:cb:6e:60:d9:90:9b:bb:05:07:64:63:6f:e7:78:
e0:8f:50:ae:eb:df:46:1f:d8:67:c3:bf:a1:cf:62:
a1:d5:4d:cd:2a:cf:fe:26:9b:18:f0:32:ca:1e:18:
68:d8:5c:a2:54:98:8a:24:03:8c:55:3c:5c:b2:66:
27:4a:ac:a8:3c:e8:3b:0d:18:ce:0c:61:2c:14:0e:
29:7c:8d:0a:9f:22:d4:77:a4:d9:20:ee:3b:c9:9e:
25:05:7c:95:e4:84:3b:b0:6f:22:9c:ce:f4:be:61:
b3:a8:bb:68:f3:01:b2:bd:e7:c3:40:99:9e:42:12:
20:71:cf:62:6b:93:7b:ec:9a:d0:5e:0d:a0:2e:96:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:64:B0:7F:2C:6C:31:04:F8:06:A4:64:F5:89:EA:EB:29:D7:90
X509v3 Authority Key Identifier:
keyid:C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/w7ZksH8sbDEE-AakZPWJ6usp15A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/x3l4GbJFsWvgtHlY9-ar2Og9CZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:90:69:a5:79:75:79:84:4c:ef:f7:4b:88:68:3a:d9:a0:04:
b8:db:a8:a7:5c:48:15:92:59:25:93:92:f5:43:c4:29:a0:bb:
b3:0a:1a:d5:85:a8:ae:23:33:75:bb:8a:88:bb:39:43:5a:04:
d1:16:33:30:18:d6:e6:4f:8d:b8:be:43:cd:a3:7a:c3:fb:df:
82:a8:ce:43:9b:29:e2:05:0f:4e:54:62:81:bd:e4:65:38:ab:
ac:6b:5a:45:1b:71:f6:d5:b2:d6:f6:74:af:66:6f:49:34:74:
af:4b:04:ff:b7:b0:41:6f:87:69:bd:26:32:f8:b1:0f:a1:78:
99:6b:11:bc:bd:7f:5e:db:b9:08:7f:a0:4e:93:e3:10:ff:a6:
47:46:e9:d9:11:8d:c9:2c:3c:b2:b6:b3:fe:db:25:66:d7:cc:
46:bd:f6:5d:e7:d7:fc:08:99:30:c1:ce:79:de:47:1c:5f:f6:
79:38:68:6b:a2:70:00:e9:43:62:ab:49:dd:0e:53:4c:29:81:
b1:7e:98:a9:7a:aa:c8:f8:4d:93:a0:b3:d1:e5:ae:e9:65:57:
09:19:9c:14:2c:d2:20:da:6e:f5:ba:09:95:64:8b:38:52:d1:
4f:d7:4f:25:ce:6a:f4:5d:46:85:2e:65:c8:36:63:53:4e:7d:
13:44:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:55 2025 by rpki-client