Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/BcdGko0r03EyM3V22SJp6LUI_jg.roa
File: BcdGko0r03EyM3V22SJp6LUI_jg.roa (raw, json)
Hash identifier: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=
Subject key identifier: 05:C7:46:92:8D:2B:D3:71:32:33:75:76:D9:22:69:E8:B5:08:FE:38
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0194266C1A480AF42665B12E19CC1CFFBABE
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/BcdGko0r03EyM3V22SJp6LUI_jg.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56841
IP address blocks: 2001:67c:ac8::/48 maxlen: 48
2001:67c:acc::/48 maxlen: 48
2001:67c:ad0::/48 maxlen: 48
2001:67c:2788::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:48:0a:f4:26:65:b1:2e:19:cc:1c:ff:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c746928d2bd37132337576d92269e8b508fe38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:c2:3e:81:36:1f:7e:33:b5:00:83:b2:1e:
99:69:33:39:8c:1f:25:63:03:1a:20:69:e1:ff:db:
48:e9:6d:6f:51:4c:47:0e:ce:b7:05:1b:a3:b9:4e:
3f:32:67:00:13:5c:a7:bf:16:68:89:c1:1a:7b:04:
1f:bb:7f:37:d6:ce:e4:d8:d8:c3:fa:2f:6b:7d:10:
4e:82:49:30:8d:ea:f2:21:f8:4a:b8:dc:d4:34:04:
36:d0:2b:8f:3e:0c:6e:7c:c0:fb:5c:12:08:b4:b3:
fc:ba:53:3c:73:ba:39:2f:dc:94:fb:66:59:94:4f:
46:95:18:28:25:df:af:3e:79:e8:50:c6:dc:aa:49:
04:79:03:64:8a:10:55:80:8e:a9:47:7c:c1:16:99:
28:cd:b2:a0:c1:67:4a:df:a5:e9:43:c3:9d:42:a1:
ed:9b:39:13:fe:12:4a:79:4e:c7:86:b3:bb:39:64:
d9:4a:63:4d:ff:b0:ed:ed:c9:dc:02:4f:89:b1:3b:
b9:71:ed:79:3a:9a:d4:4e:07:c0:17:13:9b:80:e2:
5c:0d:da:d0:3f:37:57:25:da:fd:fe:35:fd:1e:74:
85:39:93:f9:8a:de:51:89:18:34:53:64:f4:ce:db:
4e:c4:c2:16:ef:22:e2:57:e9:1a:5f:31:93:5f:38:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:46:92:8D:2B:D3:71:32:33:75:76:D9:22:69:E8:B5:08:FE:38
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/BcdGko0r03EyM3V22SJp6LUI_jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ac8::/48
2001:67c:acc::/48
2001:67c:ad0::/48
2001:67c:2788::/48
Signature Algorithm: sha256WithRSAEncryption
27:2b:ca:6c:97:f4:59:9e:e2:1a:09:d4:ff:e2:1d:08:4f:5c:
5d:71:1e:4b:c8:d4:a5:32:af:92:58:7e:4b:b1:09:b5:94:5e:
8a:d3:4e:70:3d:ae:37:9a:d2:13:71:59:a1:7f:3a:21:15:74:
be:61:1d:d0:cf:55:e2:74:cc:27:1d:86:4f:51:90:c7:62:2f:
56:9c:0f:75:01:be:02:51:21:16:f2:b2:60:2e:f1:b1:4f:d9:
d5:96:be:d6:18:cd:ea:7b:30:20:be:7e:28:80:52:af:64:d1:
59:5d:50:06:4f:b7:17:22:0c:9b:57:c8:1f:28:a4:a9:3f:67:
f7:d8:c6:2f:b1:c1:76:73:5e:08:5a:46:10:16:c1:ee:19:77:
5f:1a:63:d8:aa:f3:08:df:a6:1d:66:c4:62:b2:88:df:f6:4f:
b0:12:9f:18:52:9d:0e:48:ac:f8:30:09:4f:be:9f:89:92:7c:
8f:6e:d2:ac:d6:bd:43:4d:7f:68:16:94:49:ac:25:8e:da:94:
58:44:ef:07:b3:65:40:2e:8d:1b:32:ed:8c:4b:e9:c8:cf:e3:
37:bc:e4:5d:f8:a3:68:24:75:41:13:79:83:d9:53:13:fa:0e:
a7:61:c1:af:78:ff:ca:34:1e:c1:35:d5:92:35:b6:1f:dd:75:
e3:61:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:54 2025 by rpki-client