Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/81d621-7bcf-4dc0-90f9-1568a66422c2/1/JH6tRVkXas-OgqyFWsfYsrjhs24.roa
File: JH6tRVkXas-OgqyFWsfYsrjhs24.roa (raw, json)
Hash identifier: SMsP9zB7eLtH1ts5qgwyyM59/my9hN/0KTGXZ31/+GM=
Subject key identifier: 24:7E:AD:45:59:17:6A:CF:8E:82:AC:85:5A:C7:D8:B2:B8:E1:B3:6E
Certificate issuer: /CN=f5adaa11054e9f35d94832bb588a9dd1cacb4613
Certificate serial: 065F6115
Authority key identifier: F5:AD:AA:11:05:4E:9F:35:D9:48:32:BB:58:8A:9D:D1:CA:CB:46:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2qEQVOnzXZSDK7WIqd0crLRhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/81d621-7bcf-4dc0-90f9-1568a66422c2/1/JH6tRVkXas-OgqyFWsfYsrjhs24.roa
Signing time: Sat 01 Jan 2022 10:58:02 +0000
ROA not before: Sat 01 Jan 2022 10:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207671
IP address blocks: 2001:678:bbc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106914069 (0x65f6115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5adaa11054e9f35d94832bb588a9dd1cacb4613
Validity
Not Before: Jan 1 10:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=247ead4559176acf8e82ac855ac7d8b2b8e1b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:75:13:f8:82:2c:56:c0:f0:63:bb:29:ef:
e9:11:08:be:cb:64:ac:2f:da:24:21:b6:c3:38:fa:
2a:4f:ab:e3:2b:0b:d9:70:15:ac:9d:e1:5b:db:c3:
f9:ce:b3:41:bf:37:8b:03:89:32:9f:97:b4:20:46:
0c:a6:0c:23:62:7e:82:93:4b:df:42:b4:94:36:60:
10:7a:e0:2e:85:56:3c:b0:21:96:2d:a8:71:73:d4:
ab:47:18:60:32:01:5d:fa:54:81:1d:7f:15:34:0e:
d7:a3:fd:6a:e1:b6:de:dd:2f:4a:05:75:51:78:76:
f0:59:43:69:55:d3:76:20:d9:4c:86:76:8f:c4:0a:
b0:28:6d:2b:39:2f:8d:bf:ec:f4:b2:45:48:70:7f:
07:9b:88:2e:16:86:13:9b:a4:f4:02:5d:44:4e:91:
67:28:64:bc:ab:ad:49:fd:de:a6:19:52:6f:2d:20:
23:72:77:47:db:c2:06:33:43:61:a4:56:0b:0c:39:
3f:bf:a7:a0:e8:f8:fe:13:0c:3e:7b:23:a0:2d:b7:
e4:ee:7a:cd:b8:71:97:ff:aa:50:86:7b:37:94:28:
48:dc:7c:e2:34:1d:9a:13:17:e0:8b:e3:3c:62:24:
97:1d:89:2a:e2:f9:cb:ad:4d:53:3c:58:5a:77:bb:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:AD:45:59:17:6A:CF:8E:82:AC:85:5A:C7:D8:B2:B8:E1:B3:6E
X509v3 Authority Key Identifier:
keyid:F5:AD:AA:11:05:4E:9F:35:D9:48:32:BB:58:8A:9D:D1:CA:CB:46:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2qEQVOnzXZSDK7WIqd0crLRhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/81d621-7bcf-4dc0-90f9-1568a66422c2/1/JH6tRVkXas-OgqyFWsfYsrjhs24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/81d621-7bcf-4dc0-90f9-1568a66422c2/1/9a2qEQVOnzXZSDK7WIqd0crLRhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:bbc::/48
Signature Algorithm: sha256WithRSAEncryption
5a:55:81:e2:7c:7a:de:42:a2:58:73:b7:b8:a8:c1:b0:16:24:
be:99:30:da:aa:f3:cd:42:93:16:3e:fa:c9:a7:7f:f6:26:ba:
d6:e1:6d:8a:65:a3:7c:05:48:f4:79:00:7a:c7:67:7b:40:96:
1a:0b:f4:17:0c:b8:57:a1:c1:79:ce:d5:0a:9f:d3:18:d2:30:
b8:4e:47:55:aa:85:46:c5:4f:ad:46:ca:dd:06:a5:d7:e7:34:
13:6e:c7:a0:cf:b9:cc:f7:1a:1e:13:c8:1e:ef:57:88:80:c2:
3b:81:55:bb:43:97:e7:00:d6:db:e8:00:42:c6:e5:55:93:89:
6e:ef:e5:03:99:f6:22:69:34:6d:ef:a2:ce:4d:d8:80:fa:7a:
fe:70:0e:ad:40:56:ee:a6:0e:b3:59:e1:1b:2d:7b:a7:32:2c:
6f:bf:0d:65:53:e0:e5:7b:56:88:cd:6a:e4:96:87:8e:37:5b:
27:97:ef:d3:d1:d0:a6:90:39:3e:be:aa:af:59:fe:d2:74:51:
1d:eb:0f:28:c2:c9:20:83:30:4e:00:95:b8:1a:2b:88:7b:d6:
b5:4d:a4:9e:73:6b:f2:d6:a0:e6:40:fb:0d:b7:9f:de:d3:7c:
72:06:cb:6a:b2:d6:14:28:15:b7:67:6c:0f:f9:b6:79:31:0b:
f0:5d:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:56 2025 by rpki-client