Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/XfllVlC-Na8BJo8V1vPu9A_KVeA.roa
File: XfllVlC-Na8BJo8V1vPu9A_KVeA.roa (raw, json)
Hash identifier: NxpcBrq0IYjF9CPJ4Xozyf70mLAaBaumpwA6KWuo5Q0=
Subject key identifier: 5D:F9:65:56:50:BE:35:AF:01:26:8F:15:D6:F3:EE:F4:0F:CA:55:E0
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01884A4B
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/XfllVlC-Na8BJo8V1vPu9A_KVeA.roa
Signing time: Sat 01 Jan 2022 05:52:54 +0000
ROA not before: Sat 01 Jan 2022 05:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44685
IP address blocks: 2a12:2600::/48 maxlen: 48
2a12:2600::/30 maxlen: 30
2a12:2600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25709131 (0x1884a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5df9655650be35af01268f15d6f3eef40fca55e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:15:a8:bc:19:48:54:b5:8c:4b:60:db:9b:2d:
84:e7:8e:90:34:d1:64:cf:72:0a:73:b9:e8:0e:d2:
83:3d:8d:d0:2a:99:94:e2:35:65:f0:16:76:27:f7:
5b:bd:49:ba:a6:36:59:17:b9:13:dc:2c:48:71:4e:
78:31:bc:75:2d:87:f1:c2:ea:b4:cc:4b:2e:46:13:
56:b1:9d:08:fa:44:a9:8b:fc:70:42:3f:42:6b:f1:
a7:94:be:b2:b5:d3:80:48:34:5f:b9:0a:46:4a:15:
d7:0b:f2:04:43:9e:52:74:27:1f:b5:7e:8a:af:4c:
e2:08:7e:7b:64:77:10:ee:14:d0:81:f5:30:11:e9:
24:0f:45:06:f3:91:53:cf:f9:85:87:4e:a9:a3:37:
e1:cf:fa:00:87:af:35:c7:76:14:ea:a9:a4:51:df:
fc:51:a9:ac:21:9e:85:ab:f0:b9:5c:fa:78:a5:bc:
2f:1c:c1:72:b6:d1:45:4c:2d:b3:46:cd:6b:62:a9:
95:39:8c:3f:af:c6:3f:a2:67:dd:13:a4:67:37:ea:
a3:7a:12:77:14:66:a8:4d:b4:b1:2b:0c:67:12:f4:
9c:40:f0:24:6c:6a:77:28:e9:34:ad:0a:bb:2f:7a:
9e:ce:ef:51:11:df:16:8c:a0:26:9e:55:34:ac:23:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:65:56:50:BE:35:AF:01:26:8F:15:D6:F3:EE:F4:0F:CA:55:E0
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/XfllVlC-Na8BJo8V1vPu9A_KVeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2600::/29
Signature Algorithm: sha256WithRSAEncryption
97:45:8e:1f:6f:ed:a9:12:55:08:2c:00:21:00:35:ff:01:03:
6e:91:b4:12:76:ca:e4:a6:61:31:4d:93:c4:17:2a:92:48:9f:
37:8b:f2:ea:22:e3:23:e7:e1:d9:01:4e:a2:86:7c:46:89:25:
8f:53:9d:77:7b:43:00:94:36:00:c8:94:b9:5d:25:a7:a8:49:
da:c0:0b:60:98:64:1a:de:b4:21:e4:21:ba:ed:a9:81:c2:e6:
87:ef:92:76:ff:1b:06:f0:3a:c5:35:ab:3c:d9:cd:31:81:d1:
64:ee:e0:ec:a5:08:66:c0:e7:3c:02:2e:66:f1:88:39:1d:b3:
85:02:14:85:f8:5e:22:ae:c0:16:14:8a:0d:7a:05:66:7b:bb:
87:16:49:f0:73:53:0c:d1:28:d5:93:0f:08:81:17:03:22:3d:
13:da:17:6f:3c:fd:61:0f:74:8e:91:8c:73:01:82:77:20:c3:
49:79:0a:86:bf:36:39:8b:87:69:b4:7c:95:db:60:50:8c:1f:
7d:2e:fb:8f:f9:78:f0:d2:69:ef:57:93:37:56:24:e2:26:8e:
c1:7f:44:e1:35:d6:f9:31:f9:d3:9a:5f:5f:33:89:82:98:f4:
f9:56:e1:13:15:76:ec:5c:2b:55:e7:4a:0a:0e:4f:a8:c2:22:
71:51:29:c0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAYhKSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODdiNTk0ZTVlNjcxM2E1YjgwYTU0ODFhNWNlNzFlNjUyZDg0NTczMB4XDTIyMDEw
MTA1NTI1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRmOTY1NTY1MGJl
MzVhZjAxMjY4ZjE1ZDZmM2VlZjQwZmNhNTVlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPUVqLwZSFS1jEtg25sthOeOkDTRZM9yCnO56A7Sgz2N0CqZ
lOI1ZfAWdif3W71JuqY2WRe5E9wsSHFOeDG8dS2H8cLqtMxLLkYTVrGdCPpEqYv8
cEI/Qmvxp5S+srXTgEg0X7kKRkoV1wvyBEOeUnQnH7V+iq9M4gh+e2R3EO4U0IH1
MBHpJA9FBvORU8/5hYdOqaM34c/6AIevNcd2FOqppFHf/FGprCGehavwuVz6eKW8
LxzBcrbRRUwts0bNa2KplTmMP6/GP6Jn3ROkZzfqo3oSdxRmqE20sSsMZxL0nEDw
JGxqdyjpNK0Kuy96ns7vURHfFoygJp5VNKwjbnECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBRd+WVWUL41rwEmjxXW8+70D8pV4DAfBgNVHSMEGDAWgBTIe1lOXmcTpbgK
VIGlznHmUthFczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lIdFpUbDVuRTZXNENsU0JwYzV4NWxMWVJYTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8x
L1hmbGxWbEMtTmE4QkpvOFYxdlB1OUFfS1ZlQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
ODI0Zjc4LWRlZTItNDdiYy1hZjJmLTM4Y2I2ZTQxNmYzYS8xL3lIdFpUbDVuRTZX
NENsU0JwYzV4NWxMWVJYTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoSJgAwDQYJKoZIhvcNAQELBQAD
ggEBAJdFjh9v7akSVQgsACEANf8BA26RtBJ2yuSmYTFNk8QXKpJInzeL8uoi4yPn
4dkBTqKGfEaJJY9TnXd7QwCUNgDIlLldJaeoSdrAC2CYZBretCHkIbrtqYHC5ofv
knb/GwbwOsU1qzzZzTGB0WTu4OylCGbA5zwCLmbxiDkds4UCFIX4XiKuwBYUig16
BWZ7u4cWSfBzUwzRKNWTDwiBFwMiPRPaF288/WEPdI6RjHMBgncgw0l5Coa/NjmL
h2m0fJXbYFCMH30u+4/5ePDSae9XkzdWJOImjsF/ROE11vkx+dOaX18ziYKY9PlW
4RMVduxcK1XnSgoOT6jCInFRKcA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:58 2023 by rpki-client on console.sobornost.net