Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cVhzeTcsDG8noOlh10xIqgfY95I.roa
File: cVhzeTcsDG8noOlh10xIqgfY95I.roa (raw, json)
Hash identifier: 4Qqi1Z8rSnMkcRCavK/cQDf2b7KMqVIIJWFEp/VZ7UI=
Subject key identifier: 71:58:73:79:37:2C:0C:6F:27:A0:E9:61:D7:4C:48:AA:07:D8:F7:92
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747EE2CEF7682139E81AED45E0C68D6
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cVhzeTcsDG8noOlh10xIqgfY95I.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212154
IP address blocks: 2a0b:b87:ffa2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ee:2c:ef:76:82:13:9e:81:ae:d4:5e:0c:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71587379372c0c6f27a0e961d74c48aa07d8f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:f7:38:dd:8c:9b:bc:af:73:b4:37:71:e6:
f4:1e:10:ae:69:57:91:1d:c4:c5:90:7e:43:24:32:
04:a9:24:c3:42:a4:f3:9c:d5:12:46:3c:12:50:69:
7a:9d:ea:65:8b:3a:ef:4a:63:f7:b0:6a:90:2d:a6:
82:40:65:ff:c2:0f:e6:72:80:8e:14:fd:72:2a:12:
5c:83:0f:92:62:12:92:8a:1d:ef:2f:d3:3d:92:4b:
1f:d9:f4:64:c5:3b:8b:8f:ab:05:a4:9b:bc:fc:b8:
3a:c7:75:56:06:fd:43:fb:e1:87:5c:37:85:68:9f:
11:6a:6a:99:a7:13:6f:e8:b2:58:6a:eb:34:3d:7c:
92:2b:80:45:e7:0e:d3:74:26:af:45:51:91:8e:94:
03:b9:21:2e:0e:74:0a:86:50:be:77:c2:d7:a0:14:
74:20:45:2d:9b:85:3e:89:40:83:4e:ed:55:1b:f6:
ba:f0:75:47:36:b2:ae:f4:94:9e:63:fe:f5:ed:dd:
be:2c:b3:dd:82:05:aa:c0:98:18:47:c7:01:58:17:
f8:89:e5:01:10:25:9d:28:0b:a7:6d:0d:63:92:b2:
64:fd:54:8c:0e:9b:22:c7:60:94:e4:5e:01:61:63:
85:63:3b:b8:f4:2a:48:b8:04:14:7d:0c:99:f7:97:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:73:79:37:2C:0C:6F:27:A0:E9:61:D7:4C:48:AA:07:D8:F7:92
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cVhzeTcsDG8noOlh10xIqgfY95I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffa2::/48
Signature Algorithm: sha256WithRSAEncryption
99:83:a2:73:39:08:08:88:ef:5d:74:c8:db:32:b7:7c:e4:7e:
7d:bf:02:e6:b1:24:93:e5:85:41:80:5d:62:a0:87:13:77:92:
7d:f2:d2:74:ce:13:ff:d2:05:76:7b:85:35:2c:73:d8:d7:cd:
15:45:df:85:34:3b:c7:c0:fb:ae:bf:72:34:6d:c8:ad:e1:f7:
19:56:a5:f3:37:c7:e1:7b:5b:31:a5:59:2c:51:82:99:00:ed:
bd:67:7c:75:e0:05:5b:e1:f4:61:42:f4:ad:43:86:19:e0:7d:
e9:ad:31:c8:f2:17:f8:41:7f:3b:08:59:09:52:56:02:ea:48:
ea:a0:ef:4a:e3:d4:ea:6c:be:2f:46:35:0f:9c:1c:2c:c1:a5:
e6:69:e0:ed:cc:0f:e1:76:f9:de:a1:c9:cd:b0:62:e4:c0:72:
64:28:50:ab:ec:23:10:ae:86:d3:9e:ef:78:00:9e:62:92:8a:
45:91:7d:ae:2d:0e:23:01:d5:de:e3:3d:4f:24:05:19:17:b7:
c8:e4:3a:35:a9:3e:da:6d:89:ff:13:e0:86:68:48:a4:4e:6e:
5c:05:1a:8b:47:cc:b9:07:29:e2:3a:48:25:50:08:f4:6a:ff:
a9:bf:db:d2:64:2e:dc:3b:0f:01:47:6a:5f:80:80:8c:b9:e1:
f2:e7:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:35 2025 by rpki-client