Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/3qkmGgqtmYdHNv_ftyhyNHU_wt4.roa
File: 3qkmGgqtmYdHNv_ftyhyNHU_wt4.roa (raw, json)
Hash identifier: yBD3e9tycLzpy/PtqgEIX1wcFkGMYiAtjQmYx10zRc8=
Subject key identifier: DE:A9:26:1A:0A:AD:99:87:47:36:FF:DF:B7:28:72:34:75:3F:C2:DE
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 01856E78C4F627957E37BC15048DD7284522
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/3qkmGgqtmYdHNv_ftyhyNHU_wt4.roa
Signing time: Sun 01 Jan 2023 17:54:46 +0000
ROA not before: Sun 01 Jan 2023 17:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25295
IP address blocks: 2a00:fb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:c4:f6:27:95:7e:37:bc:15:04:8d:d7:28:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Jan 1 17:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dea9261a0aad99874736ffdfb7287234753fc2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:1f:6c:c0:43:bf:af:1e:67:97:a1:97:e9:
89:82:67:19:5d:85:ea:4d:5b:f0:29:f0:22:04:b2:
fd:96:01:2a:e3:2e:6c:37:e5:21:a8:b3:fc:67:dd:
b7:f8:96:1e:eb:9e:55:1f:67:25:17:e2:69:cb:c2:
d8:92:b2:97:8e:f7:6a:a4:9f:42:eb:54:18:b0:de:
f5:e8:4e:54:1d:f8:59:d9:ab:0f:2c:60:ca:e8:0f:
1c:07:15:ab:3e:46:43:f3:01:16:15:95:35:73:38:
75:d4:b6:f5:f0:0b:8a:fe:2d:21:47:e6:00:3c:be:
c7:9a:9a:94:e3:40:9f:52:7b:35:45:9d:49:4e:a8:
d5:a4:ce:18:60:4b:1f:ca:c4:53:ac:66:2f:4e:65:
6e:b8:41:85:ed:ef:1d:61:9f:f2:80:47:8d:2d:20:
d5:70:0e:cd:34:df:1b:ad:e2:2b:1b:f2:b5:85:9d:
d7:73:7f:1a:ec:eb:f7:ad:45:b5:33:47:8b:89:00:
63:81:5e:09:c7:c6:9c:73:f0:05:6e:5e:70:83:d1:
9c:b6:04:00:9f:b9:80:1b:8d:65:10:e0:bc:43:0b:
aa:a5:82:b1:35:45:27:b3:f9:84:16:e4:ce:6b:61:
9f:01:60:01:e5:52:c6:97:4c:38:c2:56:35:75:eb:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:26:1A:0A:AD:99:87:47:36:FF:DF:B7:28:72:34:75:3F:C2:DE
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/3qkmGgqtmYdHNv_ftyhyNHU_wt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fb8::/32
Signature Algorithm: sha256WithRSAEncryption
7e:23:70:fd:e5:cf:30:67:5a:f8:42:1f:7f:f5:7c:50:26:62:
98:ca:aa:e4:4c:df:75:00:1f:68:55:41:07:43:0b:2f:b0:6c:
6c:cb:66:fb:cd:16:ad:fc:6c:70:d5:a5:bb:86:ef:64:76:4b:
13:10:52:4a:72:28:b4:4e:28:90:02:53:40:6b:8e:80:9c:61:
e5:ca:64:12:43:38:af:3d:2e:e5:b8:61:92:65:e5:b1:95:b2:
93:d9:ed:21:4f:c6:19:a4:5e:af:a8:09:c6:9f:4d:9b:b6:2c:
0b:41:97:9d:a8:38:45:22:79:a0:0b:6b:db:33:35:7b:13:bd:
2d:ae:14:8d:9f:eb:3e:47:a0:0b:02:6c:69:3e:55:79:e6:80:
49:56:71:eb:98:5b:40:10:08:a1:e1:e4:a5:a9:bf:b5:c8:23:
8b:14:a2:07:a2:e2:ca:79:86:a2:bd:54:e6:7d:c3:a1:01:29:
50:8a:3f:9c:c6:2d:6c:d3:82:1d:ec:68:f9:2a:fb:8c:77:b8:
b8:d8:dd:16:4d:e1:21:38:75:de:aa:e8:d4:6a:ac:1c:d7:44:
d9:d9:12:25:22:13:ca:e2:e2:0e:47:ba:c0:7f:aa:0d:51:f2:
16:4a:b0:b9:c5:04:dc:9b:0e:c8:70:0d:4d:1c:17:18:3d:a7:
db:45:6d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:02:33 2025 by rpki-client