Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/efH1Lr_0atFc3HheDqYHA278Y1k.roa
File: efH1Lr_0atFc3HheDqYHA278Y1k.roa (raw, json)
Hash identifier: iHUG3nQZWKIVhnkzzmJ7MUcheskDd0xyMv+OUbK00BE=
Subject key identifier: 79:F1:F5:2E:BF:F4:6A:D1:5C:DC:78:5E:0E:A6:07:03:6E:FC:63:59
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018B678DEB17194B47DD7C7A0B258DD8DDEE
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/efH1Lr_0atFc3HheDqYHA278Y1k.roa
Signing time: Wed 25 Oct 2023 15:57:15 +0000
ROA not before: Wed 25 Oct 2023 15:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 2a11:68c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:8d:eb:17:19:4b:47:dd:7c:7a:0b:25:8d:d8:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Oct 25 15:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f1f52ebff46ad15cdc785e0ea607036efc6359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:12:8f:24:9c:3d:03:0e:ed:b9:15:ba:0b:
47:0a:bb:e3:de:39:55:75:45:db:52:73:c9:da:6f:
07:23:95:c3:31:0e:01:48:ca:99:ef:73:99:d2:30:
63:bd:59:3a:73:8b:12:c8:7a:02:7c:32:85:e1:90:
c4:30:72:7d:6e:4a:8e:b0:92:72:96:54:16:ff:2b:
d0:13:5c:41:d7:bc:bd:0b:e2:97:dd:0a:01:81:a6:
4e:b2:bf:de:28:6e:f7:ee:21:4c:b3:38:40:13:03:
44:ce:80:cb:d2:69:3f:26:e8:85:75:70:16:05:54:
36:f7:62:3e:fe:17:fb:6c:66:bb:ce:a7:d5:dc:f6:
c3:6e:c8:19:d5:a5:21:a0:97:a6:94:e0:2f:0d:d2:
50:60:4c:ec:9e:59:cf:2f:92:a7:bf:1f:60:c8:cf:
c2:99:b6:f6:cb:06:02:7f:e7:28:d7:ee:15:70:f9:
90:80:f3:30:c8:1f:fc:62:3d:c2:ef:f1:e8:14:78:
25:c7:be:9e:ee:d0:26:25:a7:8a:42:a4:da:82:f4:
09:2f:b0:7b:23:5e:de:a5:b6:1e:79:9a:65:8b:37:
84:35:87:e0:f3:49:f9:74:56:0d:9a:1e:1b:60:6a:
b6:c8:19:cd:84:f7:6b:a0:65:08:89:a5:a1:b0:91:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F1:F5:2E:BF:F4:6A:D1:5C:DC:78:5E:0E:A6:07:03:6E:FC:63:59
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/efH1Lr_0atFc3HheDqYHA278Y1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:68c5::/32
Signature Algorithm: sha256WithRSAEncryption
bb:13:89:23:87:a5:e2:4d:19:00:1a:70:60:f1:09:2f:84:91:
80:fa:b6:1f:aa:02:d3:35:bd:e8:7e:47:7a:78:30:3a:cd:ac:
78:a3:66:d8:f6:81:9a:c1:83:72:ef:3c:45:3c:43:9c:4d:a2:
e2:89:73:86:30:29:ed:9a:4d:a0:98:8d:9b:e7:77:05:c7:87:
3f:ef:3b:30:39:56:c0:38:1a:16:ec:07:01:28:3a:73:f6:f5:
3c:75:af:cd:9c:0a:4c:34:ae:86:03:3c:0a:d0:36:42:84:72:
f7:45:d4:ef:32:d8:39:bc:15:26:f6:fe:f5:94:b3:12:c6:97:
13:77:86:71:11:6b:ef:a3:64:82:27:b4:75:10:4f:81:16:50:
84:3d:ac:56:59:90:c2:fd:89:26:8b:3d:0d:ea:07:7e:f5:91:
53:45:de:10:e0:ac:b6:5f:89:06:67:99:34:de:90:8b:68:ba:
1c:fc:5c:ee:b4:c0:e8:57:d4:bd:58:9d:3c:23:59:99:a1:e9:
b0:9d:c9:21:b2:94:45:88:62:1d:ec:93:0c:f5:cc:7b:76:18:
a4:e9:17:ac:8d:1d:4e:01:67:99:4f:de:0f:3a:58:ce:81:69:
d9:f5:8c:1d:e8:8b:ca:02:7f:37:4d:bc:58:a4:9f:0b:19:f3:
a1:17:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:40:47 2025 by rpki-client