Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/K7v_erre4xqrVjEHRvxy-76X3oY.roa
File: K7v_erre4xqrVjEHRvxy-76X3oY.roa (raw, json)
Hash identifier: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=
Subject key identifier: 2B:BB:FF:7A:BA:DE:E3:1A:AB:56:31:07:46:FC:72:FB:BE:97:DE:86
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0194214447DD12B50F795D749DCFE4CF15DF
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/K7v_erre4xqrVjEHRvxy-76X3oY.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62131
IP address blocks: 2001:67c:d34::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:47:dd:12:b5:0f:79:5d:74:9d:cf:e4:cf:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbbff7abadee31aab56310746fc72fbbe97de86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:23:91:f7:2e:a7:9d:e2:bd:a9:6b:f6:b3:
ce:a1:27:ad:35:58:51:54:34:09:d7:d5:a9:7a:2a:
87:e0:71:1b:f2:a7:d7:49:a5:48:f8:2e:6c:32:ba:
1b:66:49:d5:23:7a:4f:3f:e0:31:16:6a:bc:d7:71:
43:dd:bf:f5:c1:33:be:76:1b:61:da:42:be:a3:df:
2f:18:35:0e:47:23:90:15:08:64:12:de:d9:f5:d6:
ac:2f:8a:3a:1a:85:d6:0b:1a:18:5a:6b:d8:a6:5f:
b2:6b:da:0d:a1:19:21:b3:4f:2e:6b:2f:3b:e9:83:
00:59:61:76:6e:fe:ed:ca:00:41:5d:04:fc:3a:68:
26:cb:94:c7:6d:55:cd:9e:05:04:6a:47:e2:73:a5:
f7:4f:6f:a4:47:69:80:c6:e8:e9:a8:08:7a:02:9a:
f4:97:9c:5b:19:ec:0f:6b:2f:5e:c4:84:9c:56:52:
f4:04:96:17:c0:05:2d:1b:96:9c:f8:7c:3f:07:7b:
89:e6:bb:f6:bf:01:30:4c:8a:7b:df:a2:24:fe:05:
70:55:a5:70:ae:f0:e5:71:e1:29:43:92:20:a2:5c:
22:e8:36:32:58:45:29:1d:9c:af:c4:9a:c4:3d:7c:
90:9f:61:d2:fd:95:95:eb:12:2b:86:e4:5a:5b:4a:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:FF:7A:BA:DE:E3:1A:AB:56:31:07:46:FC:72:FB:BE:97:DE:86
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/K7v_erre4xqrVjEHRvxy-76X3oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d34::/48
Signature Algorithm: sha256WithRSAEncryption
42:ab:3a:c9:c7:d1:1a:0b:da:a6:2c:7f:1a:ec:a0:1d:08:f0:
04:a5:9d:79:d8:a5:ca:6c:2e:a1:bd:df:e5:b6:df:02:aa:ea:
f3:67:a7:19:b0:d3:d2:69:96:f6:55:85:04:fa:65:d5:68:78:
84:47:50:c2:1d:41:ce:82:98:24:96:21:51:3f:a7:27:9e:b4:
c8:4a:c0:20:ea:4d:4b:29:9e:35:87:7e:32:fc:5f:5d:3d:be:
b7:71:80:0f:b2:21:6c:86:37:cf:ec:11:7a:ef:54:08:52:9f:
64:dc:cd:10:26:66:86:6c:97:dc:83:6d:e1:92:e1:40:f4:15:
75:00:28:b2:49:f7:b0:78:47:9f:99:4b:3a:1f:8b:be:c1:80:
97:27:2a:e8:c0:b5:e8:ec:65:c4:b6:3c:4b:c5:a4:6a:07:5b:
84:32:5c:41:e8:b5:d3:6b:89:0c:52:91:74:b2:ab:ae:91:e4:
f6:b1:08:34:16:a7:4d:15:01:d5:60:14:03:3f:93:1c:15:95:
14:1a:28:e0:d8:0e:36:8b:2d:a8:a6:f3:5e:a1:b4:ba:7c:1c:
3f:e3:62:02:22:a6:e4:1c:91:d8:97:7b:2c:13:3c:75:2f:9c:
8c:92:61:e0:25:b8:f6:89:d0:17:8c:cc:ab:e5:c1:8d:7a:9f:
ca:f0:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:49:32 2025 by rpki-client