Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9ZhXjBYatlC4ylL6XZYCw9k6oSw.roa
File: 9ZhXjBYatlC4ylL6XZYCw9k6oSw.roa (raw, json)
Hash identifier: YIKG17nL0BcWV5jXfLK5PwCpq9sC5AOvFuxLfmmMZiE=
Subject key identifier: F5:98:57:8C:16:1A:B6:50:B8:CA:52:FA:5D:96:02:C3:D9:3A:A1:2C
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E6B5E77B24B8EA22B9A0912243BB
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9ZhXjBYatlC4ylL6XZYCw9k6oSw.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138517
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e6:b5:e7:7b:24:b8:ea:22:b9:a0:91:22:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f598578c161ab650b8ca52fa5d9602c3d93aa12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:cc:9e:47:5a:e4:f8:ba:9c:6b:3e:99:83:
57:ad:af:91:07:b3:ec:73:db:47:9b:75:5b:d3:f7:
f4:4c:c6:a1:a1:7c:7b:08:8e:ab:97:63:da:2b:ae:
83:c0:f3:c0:6c:37:e6:ad:f7:6e:c6:7e:e3:b4:44:
a9:73:a1:38:11:a8:00:5a:87:2f:61:04:6c:3a:7b:
a6:c6:c7:5c:f0:db:35:94:47:c1:95:6a:08:90:d8:
f0:01:ab:55:5e:ef:05:0d:7c:98:2e:5a:d3:66:91:
cd:e2:40:f0:d9:1d:0c:0c:37:11:14:3c:a3:69:15:
fb:ca:26:05:c4:8a:6c:8e:38:98:fe:93:31:9b:78:
e7:96:dd:9e:5d:03:4e:ec:df:78:7b:72:64:f7:9d:
c9:f7:47:7e:ec:94:49:af:9d:27:d9:e7:33:79:f1:
ba:6b:80:25:31:c1:28:20:18:a0:c5:77:a8:eb:f9:
49:7f:c9:e7:c7:9a:98:25:f2:bd:0d:35:02:92:19:
bc:9d:23:c4:14:25:a6:ec:f7:87:4a:e3:62:a0:84:
b8:a4:56:ee:06:44:d2:c8:5d:c3:9e:12:ab:ca:05:
eb:09:2f:50:2b:5f:6b:59:e6:dc:c7:0f:ae:22:46:
95:dc:06:ba:cd:be:05:f0:47:0e:e0:3e:d7:5a:13:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:57:8C:16:1A:B6:50:B8:CA:52:FA:5D:96:02:C3:D9:3A:A1:2C
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9ZhXjBYatlC4ylL6XZYCw9k6oSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
5c:3c:53:17:b0:21:59:7b:6d:a2:f7:8c:da:32:9b:f4:79:df:
18:79:cd:c8:fd:22:ec:d2:da:5e:67:af:db:ae:ad:81:a3:12:
a9:8f:83:ab:a3:ff:24:b9:31:7b:54:dc:21:81:c0:5a:b7:0e:
8f:d6:55:00:2d:0f:57:a4:fe:4b:88:4d:d7:5e:b8:7f:d6:53:
80:ee:38:05:34:df:18:10:c4:ba:59:39:71:51:d2:4c:ba:7d:
f4:41:b4:c6:33:61:01:e7:5e:73:40:21:e3:90:fa:e3:be:9e:
cf:3e:a9:9e:e4:f5:3e:c8:13:ce:ca:06:4d:c1:88:3f:88:31:
33:a2:79:7c:ef:01:9e:db:8c:5b:a5:02:41:52:e5:4b:d4:05:
72:0c:31:30:f2:c8:94:a2:fd:ae:fe:70:bd:5c:46:2d:0c:3f:
9f:71:93:1b:eb:b2:46:98:5e:24:dc:df:6e:b4:31:c5:ad:95:
d4:7f:59:cf:da:e9:73:38:84:70:7c:02:ce:aa:7e:11:ce:b2:
40:9e:b5:2e:15:1f:ee:89:e6:36:36:c8:85:6c:92:b0:27:a0:
2b:2a:d3:ab:2d:22:67:b4:38:1c:03:f3:64:4a:65:b3:33:62:
a6:23:4b:0c:a6:9a:1e:3c:d8:56:b7:2f:fc:15:32:6b:5f:e4:
54:27:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:46 2025 by rpki-client