Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/8cUbfYVG6k9IAn71VzrvLB3BUzk.roa
File: 8cUbfYVG6k9IAn71VzrvLB3BUzk.roa (raw, json)
Hash identifier: Y8pdTvrCKQXfggt/zn68fUUtJBLG6T7xpro9sc/iKq4=
Subject key identifier: F1:C5:1B:7D:85:46:EA:4F:48:02:7E:F5:57:3A:EF:2C:1D:C1:53:39
Certificate issuer: /CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
Certificate serial: 01879A3F22984B6B4A09F89364423734A17B
Authority key identifier: 4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/8cUbfYVG6k9IAn71VzrvLB3BUzk.roa
Signing time: Wed 19 Apr 2023 16:00:41 +0000
ROA not before: Wed 19 Apr 2023 16:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49747
IP address blocks: 2001:67c:c6c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:3f:22:98:4b:6b:4a:09:f8:93:64:42:37:34:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
Validity
Not Before: Apr 19 16:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1c51b7d8546ea4f48027ef5573aef2c1dc15339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:4f:90:cc:52:00:71:5c:1c:05:07:d8:a6:
b5:08:40:13:f6:1a:c6:03:79:06:5b:3a:74:24:47:
63:b7:75:c0:ad:08:19:36:2b:5a:ce:e5:40:91:e9:
47:0c:77:0a:d6:ce:2d:d6:32:0e:12:2b:d1:ab:9f:
f2:50:41:b5:a1:18:fe:38:4f:d9:72:5f:15:1f:05:
46:78:b9:4b:d2:32:0a:5d:5a:95:80:b7:3a:b5:d6:
38:ba:cd:cc:1c:bc:55:6c:4d:e4:1b:6c:a1:30:5d:
38:d3:b3:90:ae:7a:80:28:a8:e1:eb:b7:9f:d1:cc:
ca:a8:8b:c5:68:72:86:9e:09:c3:2f:79:0c:25:0d:
b4:4d:d8:f1:77:50:2f:24:e4:c0:fa:c4:51:67:81:
9e:3c:6d:57:b0:0e:46:8a:f0:54:7e:d0:74:8f:82:
1f:40:7d:29:14:bc:b7:1c:8f:d1:6c:f6:f3:0f:0d:
be:61:de:d1:93:7a:03:f3:9a:56:bd:4c:d4:3b:55:
72:c6:d1:e9:47:46:b3:8b:68:69:db:68:84:1a:75:
4e:d4:41:7d:1b:be:9b:d0:03:93:4c:63:da:b6:43:
9e:fe:2e:b8:f8:de:bf:8f:62:4f:9e:ad:d8:8b:8a:
57:f5:ba:97:66:c0:58:c4:25:5a:41:a2:35:c9:ab:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:1B:7D:85:46:EA:4F:48:02:7E:F5:57:3A:EF:2C:1D:C1:53:39
X509v3 Authority Key Identifier:
keyid:4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/8cUbfYVG6k9IAn71VzrvLB3BUzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c6c::/48
Signature Algorithm: sha256WithRSAEncryption
ba:5c:06:ed:e1:bd:3c:fe:aa:37:ca:42:07:2b:16:ce:bd:ed:
6d:1f:5d:d3:67:15:ff:a9:64:a1:66:0d:fc:aa:00:92:bf:43:
cd:a2:2a:94:74:cf:8c:73:d6:ae:6f:e4:3b:48:8b:9c:1a:f6:
fc:c1:18:fd:8c:f9:ff:f8:ed:d5:0a:25:c4:f3:dd:42:fa:70:
d6:14:8f:24:98:07:8d:9c:cb:54:56:2d:3e:07:97:74:de:c1:
2c:86:e3:b5:72:87:04:9c:0d:90:70:b3:58:e7:e3:5a:bd:5b:
12:58:f8:77:6e:57:c0:6c:db:69:9e:00:f4:13:52:b0:81:5f:
0a:b1:18:50:05:33:e1:22:38:a8:d8:d4:08:73:21:b0:0c:3d:
ac:51:f0:4d:cc:d3:d8:cb:f5:51:cd:aa:e1:27:cf:8d:a9:7c:
df:33:65:83:59:65:d2:75:f7:93:dd:89:89:d5:83:b1:20:54:
83:97:17:bd:ec:21:2c:97:76:5a:b4:bd:1d:2b:2b:63:f6:69:
8b:ce:46:cf:1c:2b:d2:f3:d8:3e:62:e9:65:71:4a:88:11:db:
77:f0:78:70:52:cd:0f:d2:42:5a:11:74:2f:da:27:29:55:15:
9b:12:7c:46:30:bd:1e:8e:c4:6f:39:1e:77:e8:ab:b2:6e:75:
af:a8:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:52 2025 by rpki-client