Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa
File: rkyud-gGrv7cwAtWrrL4RxcIbJM.roa (raw, json)
Hash identifier: dfLzSmwmPPZqICyv/rxJ2QSD7/hqFal89Qu+otcerVo=
Subject key identifier: AE:4C:AE:77:E8:06:AE:FE:DC:C0:0B:56:AE:B2:F8:47:17:08:6C:93
Certificate issuer: /CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Certificate serial: 018308CAA7D9170B59C0D0246AA6255499FD
Authority key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa
Signing time: Sun 04 Sep 2022 13:57:22 +0000
ROA not before: Sun 04 Sep 2022 13:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210562
IP address blocks: 2001:67c:8cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:ca:a7:d9:17:0b:59:c0:d0:24:6a:a6:25:54:99:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Validity
Not Before: Sep 4 13:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae4cae77e806aefedcc00b56aeb2f84717086c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:72:5a:4d:a1:e8:9c:24:da:50:5d:59:33:
60:d9:96:12:74:b9:b4:82:f9:15:87:60:e4:f4:49:
e7:52:cd:8e:d0:ed:db:04:22:87:d2:31:bd:a0:92:
f1:3c:62:90:60:70:96:0c:4f:f3:a4:f3:e8:fa:76:
1b:92:51:b8:be:3f:f5:d2:d8:7c:61:94:85:26:e3:
68:a1:8a:55:d5:e1:2d:a7:e8:00:6f:ee:be:d8:26:
02:f7:bd:a9:e4:86:9c:dd:40:f7:6b:f8:16:d4:6b:
fd:e9:b5:0b:51:68:77:5b:b8:11:8e:5b:b5:ad:d2:
20:6a:09:3a:2a:13:52:71:54:0c:04:19:cb:68:46:
1a:21:5f:d5:41:3e:5f:c9:d1:32:5a:87:08:ee:cf:
b3:85:55:e2:fb:8f:45:b1:45:63:97:09:a4:9c:4b:
12:21:61:89:66:fd:10:92:56:49:3d:0d:a4:a0:bc:
40:19:54:d6:f8:a0:e3:97:6f:27:68:b0:0f:e8:20:
30:0e:97:8d:01:3a:36:f1:9b:1c:9f:83:ba:02:49:
eb:4d:50:87:d8:47:2d:74:70:78:e5:70:b0:db:c2:
2d:c1:ba:6b:ab:ad:16:2f:b9:4b:17:2c:af:7c:f3:
f5:bb:55:4c:f3:94:6f:ee:e3:84:cf:01:11:7d:f0:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4C:AE:77:E8:06:AE:FE:DC:C0:0B:56:AE:B2:F8:47:17:08:6C:93
X509v3 Authority Key Identifier:
keyid:CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/rkyud-gGrv7cwAtWrrL4RxcIbJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8cc::/48
Signature Algorithm: sha256WithRSAEncryption
36:a4:42:9a:22:9f:1a:04:e0:b6:77:6a:1d:cf:19:a0:25:f7:
c6:69:fc:eb:01:87:48:04:17:a6:ff:4e:c4:e8:97:2e:7d:2d:
78:bc:a0:da:00:45:6d:56:97:ac:24:ed:0a:17:71:8d:32:53:
3f:27:66:cc:81:51:eb:a8:bb:64:b0:ad:f2:ed:ac:19:c7:f8:
b0:dc:30:67:5b:22:bb:9a:6c:37:ff:0a:b7:fe:e0:05:a7:fa:
ed:1b:cb:1a:6a:80:ab:eb:5b:29:9f:d8:c1:de:7d:70:7f:44:
d5:ac:c9:fa:8f:15:b4:0c:93:b8:85:a0:1b:23:21:96:0a:86:
54:30:28:87:9b:63:9e:40:d9:97:42:e3:9b:d4:be:94:1e:b0:
e2:a2:c1:fc:b9:bb:b0:10:18:7a:71:e3:35:99:7e:7b:ef:b1:
e9:01:83:7b:bf:83:48:0d:01:16:a5:42:89:2f:65:92:75:93:
ae:d2:ef:6d:9b:ef:ca:c7:07:05:d1:7f:20:aa:5e:a5:ac:3c:
7c:97:a9:d1:c7:a4:a3:fc:4c:a8:07:74:e0:3c:c0:b1:11:db:
bb:41:f3:ca:6e:34:ce:85:8b:f6:d6:76:79:7d:b5:19:0f:a3:
18:a6:4f:a9:c8:3d:b0:7d:c4:c4:d5:18:fe:e0:06:51:f9:ae:
d5:90:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:12 2025 by rpki-client