Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/B25bBr-QBcZ59hJ_lyoIEs7K0GE.roa
File: B25bBr-QBcZ59hJ_lyoIEs7K0GE.roa (raw, json)
Hash identifier: Ld52J7L6jBWtJf9bI1UjJZu51jld3cATTPi00p80Vss=
Subject key identifier: 07:6E:5B:06:BF:90:05:C6:79:F6:12:7F:97:2A:08:12:CE:CA:D0:61
Certificate issuer: /CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Certificate serial: 0184AB465792F819A6D7285C899170CDD58B
Authority key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/B25bBr-QBcZ59hJ_lyoIEs7K0GE.roa
Signing time: Thu 24 Nov 2022 20:13:44 +0000
ROA not before: Thu 24 Nov 2022 20:13:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210562
IP address blocks: 2001:67c:8cc::/48 maxlen: 48
2001:67c:b10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:46:57:92:f8:19:a6:d7:28:5c:89:91:70:cd:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Validity
Not Before: Nov 24 20:13:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076e5b06bf9005c679f6127f972a0812cecad061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:aa:30:02:95:82:97:33:8f:53:ea:54:d6:
a1:91:e9:fc:7a:fb:5e:d0:d5:dd:eb:da:ca:1b:24:
79:55:36:69:c2:05:8f:d5:3a:b5:24:68:07:46:29:
e0:ca:70:83:74:7c:b1:a2:93:37:10:d7:e6:b8:09:
00:b1:0b:60:c4:c9:99:80:29:ab:f3:4c:94:c0:1c:
10:54:c2:16:8a:dd:ac:61:bd:5a:fe:0c:bb:33:71:
d8:21:b3:42:2a:7d:d6:d8:c1:56:1e:02:5f:bc:da:
55:13:a1:05:a7:e4:28:88:b4:cb:0a:c3:6b:ef:80:
5d:2e:13:4e:7d:a3:52:1f:5c:2d:71:58:ae:98:b3:
e4:0a:fa:c6:8c:e9:df:d4:1e:eb:43:9e:0f:e8:8a:
97:e0:bd:1d:d5:8a:32:a0:69:8c:58:8a:28:f9:6c:
2a:69:d1:9e:30:b4:04:bb:63:3b:42:9f:f5:85:e9:
47:e7:a0:8c:d1:82:a1:83:b3:30:20:6a:d5:6b:71:
49:63:b1:93:b7:49:3b:d0:b1:1c:eb:df:3e:98:ba:
01:18:96:5b:24:a7:c6:fe:0a:c6:80:36:a4:20:5a:
d4:91:bd:a8:44:0d:54:4d:7c:e7:62:89:13:22:59:
7f:92:b3:7f:71:84:ee:52:13:c3:4d:ed:87:ee:23:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:5B:06:BF:90:05:C6:79:F6:12:7F:97:2A:08:12:CE:CA:D0:61
X509v3 Authority Key Identifier:
keyid:CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/B25bBr-QBcZ59hJ_lyoIEs7K0GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8cc::/48
2001:67c:b10::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ff:1f:36:14:ba:7c:6e:cf:b9:b2:95:c6:ed:0b:40:9b:4e:
fe:b0:e3:49:0f:17:a0:17:e5:62:00:e2:14:3e:82:e7:ae:23:
21:2a:d9:2b:3e:8b:7a:b9:6a:9e:b1:3c:11:c2:82:93:e5:d6:
45:63:77:fe:00:aa:5e:a2:a8:9f:81:b3:47:c3:c7:1e:54:c2:
3d:25:ef:51:c7:17:19:41:79:e9:73:e1:9a:71:7a:b2:1f:dc:
18:23:37:85:e0:ed:92:67:cb:db:ba:7b:9b:17:bc:3d:79:07:
ab:45:1c:82:ca:4e:0e:16:ed:72:93:4a:0a:68:96:3e:36:90:
8c:86:1d:f8:34:88:2a:d5:04:83:13:16:eb:f9:eb:f3:e3:75:
ff:31:5f:96:47:d5:85:af:e9:27:89:77:bc:f0:8b:8f:5d:e7:
20:53:ae:60:07:9c:c6:4d:fd:a2:56:d9:db:0f:08:5d:d6:83:
67:40:00:af:30:44:36:9d:4b:3b:13:5a:a7:8b:d2:49:03:b9:
0c:2d:33:37:02:2f:c2:87:18:cf:c7:e7:d5:f8:be:79:d1:5d:
76:79:c8:11:b5:75:82:20:31:8d:4a:9d:a9:d7:7e:53:cc:71:
53:bf:a2:d4:20:f7:87:d1:cd:60:60:1a:68:0d:8f:46:13:e7:
6d:2d:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:07 2025 by rpki-client