Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/9CVzCgWR1bRZg2YFbIcn92Mc85A.roa
File: 9CVzCgWR1bRZg2YFbIcn92Mc85A.roa (raw, json)
Hash identifier: lqVpK3HQhTNHYzAjHj6+JQCqq9TpWC3NZGCd17sg+Fk=
Subject key identifier: F4:25:73:0A:05:91:D5:B4:59:83:66:05:6C:87:27:F7:63:1C:F3:90
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 7E76EE
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/9CVzCgWR1bRZg2YFbIcn92Mc85A.roa
Signing time: Fri 29 Apr 2022 23:47:25 +0000
ROA not before: Fri 29 Apr 2022 23:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213169
IP address blocks: 2a12:8c00::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8287982 (0x7e76ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Apr 29 23:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f425730a0591d5b4598366056c8727f7631cf390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:6b:ab:ff:d1:e2:c3:d0:42:b3:b2:2f:d2:
9e:e2:7a:a6:b0:91:5d:d3:4e:5b:5c:28:88:c3:b2:
2f:f3:57:dd:79:9e:fd:01:42:a5:79:3c:df:57:9e:
a9:32:9b:12:3b:18:d6:30:45:8d:3b:5b:c1:45:44:
2a:73:d8:60:5b:36:de:7e:07:8c:3a:72:40:11:cf:
5b:19:7e:37:3b:32:37:4a:42:d9:c1:8b:ce:5d:9a:
dc:65:9c:ad:7c:5b:df:86:42:ec:db:89:63:ac:f3:
ad:77:64:b8:96:c4:2b:28:68:a4:2d:f8:41:2b:6f:
96:a7:9c:7c:ae:fc:74:bb:17:18:e9:33:92:1d:89:
83:14:74:22:80:7a:5c:5d:0e:cb:d4:95:38:05:a8:
ed:73:3f:78:5e:21:b5:93:0e:c1:a3:88:93:c0:bd:
ab:13:8e:ca:8b:09:29:9d:06:ea:ff:06:d1:a4:a2:
98:6f:35:20:8c:f1:da:cd:3d:31:41:67:21:05:56:
f0:03:81:b2:a1:5f:d4:2b:c5:85:cd:f6:ed:fa:7c:
5d:75:3e:56:8c:4e:f2:db:50:a7:0c:d1:3d:03:56:
e4:26:3b:09:52:74:c4:a7:45:62:29:67:06:0e:ee:
f5:af:0c:da:44:7f:05:12:6c:82:7b:85:b8:df:36:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:73:0A:05:91:D5:B4:59:83:66:05:6C:87:27:F7:63:1C:F3:90
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/9CVzCgWR1bRZg2YFbIcn92Mc85A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8c00::/36
Signature Algorithm: sha256WithRSAEncryption
a6:60:bf:66:4e:cc:15:0d:4d:39:2b:68:a4:9d:32:70:0b:f6:
20:8b:fc:f4:39:58:b5:55:f0:fa:e7:06:d2:ce:71:b0:48:63:
04:11:a1:41:23:85:a6:cb:85:0b:b3:c3:30:52:fa:e0:13:8d:
9b:79:4a:ac:2b:0a:7a:4b:ec:7c:be:7f:8a:89:ca:f7:05:ed:
1b:36:ef:4d:7f:53:05:c6:d5:cc:65:6b:a1:7a:98:db:42:42:
29:fa:36:90:3c:df:cd:b7:03:1f:d9:49:9f:2c:ac:c0:88:10:
25:ed:94:50:cc:f7:8c:26:f3:89:6b:e7:e4:15:c4:2e:e4:81:
a6:63:1d:e9:6a:c6:a4:f5:53:25:d3:d2:98:eb:78:9e:09:71:
35:20:81:9d:fb:61:30:6d:7a:6e:74:54:09:0b:f5:a2:86:80:
f9:be:b8:f7:a5:4a:16:cd:50:f9:d2:49:ec:57:72:af:6a:c5:
4e:5c:d1:5a:6f:ac:43:22:64:2b:b2:5e:30:19:c1:31:f0:1b:
d6:33:ad:8a:3d:35:8e:3d:0f:76:df:48:7d:a6:de:70:1c:5c:
26:1f:05:8a:eb:4d:d5:bd:f9:b9:67:39:1e:e2:02:90:04:4b:
a5:4f:bd:e3:ff:bf:6d:33:8c:da:39:e4:cd:a3:95:8a:cb:1c:
53:f9:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:22:48 2025 by rpki-client