Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1Sd8T7XAJJIVigNP8sQHfMkJ1xk.roa
File: 1Sd8T7XAJJIVigNP8sQHfMkJ1xk.roa (raw, json)
Hash identifier: BHycO1Ei8UEHahrqXFW17GTFbRIO1xh5HL4aaJ3NGms=
Subject key identifier: D5:27:7C:4F:B5:C0:24:92:15:8A:03:4F:F2:C4:07:7C:C9:09:D7:19
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019387C0F4C29C1EAEF65D7CDAD9D50E4764
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1Sd8T7XAJJIVigNP8sQHfMkJ1xk.roa
Signing time: Mon 02 Dec 2024 14:23:09 +0000
ROA not before: Mon 02 Dec 2024 14:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213782
IP address blocks: 2a14:67c1:70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:c0:f4:c2:9c:1e:ae:f6:5d:7c:da:d9:d5:0e:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Dec 2 14:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5277c4fb5c02492158a034ff2c4077cc909d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:27:12:2f:83:ea:d4:82:ea:8e:b4:33:cc:
30:03:b6:1d:9c:f8:36:27:3d:eb:80:ed:4d:41:36:
cc:56:3b:27:0a:49:9f:81:b4:28:eb:bd:41:6b:25:
e4:5d:92:a8:bf:86:5b:21:6b:ca:38:89:cd:f7:7d:
d1:b1:6f:3d:42:90:4c:71:66:ec:8e:b5:bc:52:12:
c1:12:fc:a9:5f:52:bc:c7:9b:65:c1:83:a3:b6:97:
d6:72:d1:52:c2:59:e8:be:a8:ae:3f:b5:42:08:3b:
f8:9c:1c:65:ab:c2:1f:df:0b:5f:f7:3b:b5:f9:bb:
e4:c1:64:08:8e:ed:f9:be:87:eb:b1:6c:6a:83:bf:
d9:0d:71:ca:c3:d7:a1:e6:c8:a3:76:00:3b:54:a1:
91:d3:51:68:1e:15:01:f8:b5:5c:c5:83:f8:4a:2c:
8c:dd:86:fc:c9:a4:c2:26:10:7e:fa:bb:5f:b6:fa:
ff:12:14:7b:2d:91:ef:57:b1:20:6b:0d:02:31:0c:
7c:5e:06:d2:dd:34:63:55:9d:e7:fb:3b:62:24:fe:
95:d2:28:03:13:95:d8:b8:56:45:a6:09:bd:b0:8a:
80:de:2b:51:d3:72:50:8f:17:86:9a:0b:97:2f:c6:
b4:a0:c6:1c:40:64:6c:62:66:29:a5:ff:c4:76:ee:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:7C:4F:B5:C0:24:92:15:8A:03:4F:F2:C4:07:7C:C9:09:D7:19
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1Sd8T7XAJJIVigNP8sQHfMkJ1xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
4b:82:e6:af:e5:43:63:13:01:8a:51:c0:8e:63:77:7e:f0:3d:
3c:c8:b7:33:0a:d3:1a:cc:09:36:52:32:7d:22:3c:a2:8b:d6:
ff:45:f2:e0:aa:8d:ae:65:8e:55:2f:ae:3c:b4:e4:87:97:ae:
a7:fb:15:bf:33:da:5d:54:34:87:2f:35:72:d2:61:7c:7b:f0:
2e:92:eb:45:e0:06:ec:f2:3d:c4:8c:58:1d:71:96:51:cd:c4:
a4:de:97:de:77:5d:d4:a9:a3:3a:ec:91:3c:f1:f3:32:38:77:
84:ef:fe:af:13:72:a9:28:f9:a0:48:27:48:a1:cf:34:ef:f9:
65:bc:8c:b3:b8:c2:43:34:cd:79:c8:84:de:db:3e:aa:3e:8a:
b2:f8:72:aa:9c:39:36:ef:2d:9e:74:cd:8f:79:9c:28:cc:2e:
be:d5:59:f9:ef:8b:c8:ce:7d:8b:28:97:ed:0e:db:01:9d:52:
22:b4:a8:29:50:03:53:fe:d4:84:16:e9:d4:b3:bb:a4:f3:2a:
63:76:2f:42:e0:7f:a0:53:0d:29:3b:0a:20:da:1d:01:08:72:
a6:bf:4f:70:55:95:eb:8f:ee:8d:ec:9f:70:fd:19:e3:3e:7f:
a0:a5:77:e8:7c:cd:46:8a:09:ea:e0:d9:7c:3f:d1:4f:bd:a2:
34:55:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:22 2025 by rpki-client