Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/_g5tZPhIhludqwXpdzpjXWL4ixc.roa
File: _g5tZPhIhludqwXpdzpjXWL4ixc.roa (raw, json)
Hash identifier: rAfkW/sefzjYJ88w53HOdhpm3jtfsTR/8yHMUJmWP70=
Subject key identifier: FE:0E:6D:64:F8:48:86:5B:9D:AB:05:E9:77:3A:63:5D:62:F8:8B:17
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018CC424853CB04A589793CA97408BC347D5
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/_g5tZPhIhludqwXpdzpjXWL4ixc.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59819
IP address blocks: 2a03:6947:b00::/40 maxlen: 40
2a03:6947:1400::/40 maxlen: 40
2a03:6947:1500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:85:3c:b0:4a:58:97:93:ca:97:40:8b:c3:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe0e6d64f848865b9dab05e9773a635d62f88b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9b:41:83:ac:b8:2a:80:28:0e:1c:bd:88:30:
f6:bd:14:ad:5a:b6:a2:0d:eb:e2:c5:71:ee:4e:fd:
88:ed:87:e0:6a:ea:55:e1:12:cc:c4:60:b4:2c:3a:
b8:f0:e5:21:20:0a:8c:4d:13:cf:b7:77:99:71:2b:
e1:19:41:40:dc:9a:fe:41:eb:16:12:50:4d:ec:e0:
ef:05:f6:13:43:48:00:51:02:3d:ab:81:97:2c:e9:
10:43:64:e0:b6:ca:07:95:70:80:bc:39:63:53:b3:
6d:01:f9:66:62:e9:d5:e6:e8:a3:66:6c:d0:15:85:
cd:0f:4e:4a:a2:53:72:28:05:5a:27:e9:6d:51:4f:
82:7c:94:28:6d:83:d9:68:da:cd:32:50:b1:2b:6b:
b1:17:2d:1b:fe:8f:59:e3:9e:6b:d5:e4:9d:ec:d5:
45:8a:85:9f:9b:26:63:fa:b3:4b:60:11:82:f1:9d:
9f:20:5c:6c:ac:b4:fe:88:b9:0e:24:de:38:0a:ff:
6a:cf:b2:e2:17:75:af:d1:8a:b6:33:6b:d9:7e:a9:
b9:06:b5:91:ff:f4:13:da:87:f1:c1:d3:a8:68:14:
8e:93:f3:86:f8:b2:8e:f2:7d:35:be:ba:0e:05:19:
ab:ab:d4:61:fb:a0:c3:87:6a:de:52:d0:6f:44:9c:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:6D:64:F8:48:86:5B:9D:AB:05:E9:77:3A:63:5D:62:F8:8B:17
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/_g5tZPhIhludqwXpdzpjXWL4ixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:b00::/40
2a03:6947:1400::/39
Signature Algorithm: sha256WithRSAEncryption
19:9a:f1:19:87:d7:fc:fd:c0:ba:97:bf:b7:e4:37:5d:b4:d3:
80:28:ec:ed:5d:42:06:71:ca:2f:15:e1:f7:93:67:7e:eb:3c:
38:0f:45:3a:c7:31:fc:ff:53:ce:77:68:19:2a:e2:66:1a:27:
46:5e:89:9e:6b:e7:cd:61:e4:95:0b:23:3c:7f:64:0d:7c:2e:
da:37:e1:e5:bc:3d:6b:09:b2:9e:c4:ad:71:eb:68:34:bb:e0:
34:6d:5e:21:3f:18:6e:aa:92:9d:29:db:39:99:3f:95:82:df:
af:8b:b5:04:a7:79:03:3b:cb:41:2b:11:49:b7:98:ae:a9:c4:
cf:a1:66:5d:b1:23:ac:19:3c:a3:ca:96:ab:60:03:fb:40:7d:
a9:71:27:e4:13:a6:ed:b9:51:bb:21:ac:b0:07:b7:20:dd:c6:
d2:92:02:75:a5:f6:35:8b:16:a2:5c:24:cb:69:b5:04:48:6b:
c9:e6:51:17:61:b4:93:b2:a7:52:65:ab:ee:7d:8d:2b:18:d0:
91:0e:b0:1e:93:17:b7:7c:69:1c:8a:36:94:fd:23:55:8d:3c:
4d:bb:ff:7d:58:84:d6:64:8e:84:37:ca:58:29:9d:a1:60:e3:
98:fa:fc:b7:e8:17:fb:74:b5:97:a3:71:10:10:bb:35:f3:ae:
89:fb:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:10 2025 by rpki-client