Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/1-AFDT1m8iGjuA3GJthrbhJeAsoU.roa
File: 1-AFDT1m8iGjuA3GJthrbhJeAsoU.roa (raw, json)
Hash identifier: 0/cAN4NtVmB+HjGSam7+26cEjMAJdJLJsKj0d1mv+Z4=
Subject key identifier: F8:01:43:4F:59:BC:88:68:EE:03:71:89:B6:1A:DB:84:97:80:B2:85
Certificate issuer: /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial: 0185F2D0EC78CAD4B3F7A05F933B37B6DBBB
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/1-AFDT1m8iGjuA3GJthrbhJeAsoU.roa
Signing time: Fri 27 Jan 2023 10:40:56 +0000
ROA not before: Fri 27 Jan 2023 10:40:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23031
IP address blocks: 2a0e:cd00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d0:ec:78:ca:d4:b3:f7:a0:5f:93:3b:37:b6:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
Validity
Not Before: Jan 27 10:40:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f801434f59bc8868ee037189b61adb849780b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:ab:3d:a3:91:48:1f:08:db:ab:7e:30:4b:
48:1b:12:a9:67:4a:81:29:4a:a3:6a:a0:c5:f4:f1:
21:96:58:83:50:ed:ad:56:da:25:fc:16:e6:0a:5c:
8f:fa:62:95:49:90:44:ab:b6:a7:e1:15:c4:00:ed:
5b:37:5b:4c:66:5e:2c:da:02:e5:a1:4c:a4:ce:d1:
75:e9:11:4b:a4:f5:3e:2b:e1:de:6c:11:76:6a:bb:
1d:69:d7:99:1a:58:ea:b6:46:c8:6f:e8:05:f2:b4:
ef:d2:ef:88:fd:9a:90:21:f6:85:e5:cb:03:f0:d1:
4a:d4:a9:12:4a:49:e7:fc:68:58:c7:99:c8:e9:4d:
ec:cf:e9:57:5c:3e:b2:89:c7:a3:7c:20:47:0b:8e:
b5:b1:69:a7:70:bc:0c:ac:97:b1:d5:8f:a8:38:ee:
a6:c2:c8:b8:22:96:0b:3f:8f:69:74:87:f4:5b:35:
20:a4:e1:63:2e:dc:71:f1:3d:0a:87:f5:1d:f4:3a:
57:5f:ba:fb:25:fa:52:90:42:13:89:e4:f3:2c:0c:
6a:0c:94:f7:49:7e:79:d0:0f:ea:a3:79:30:34:07:
cf:25:ec:25:38:01:c2:e5:5e:82:77:e0:8b:e5:50:
94:67:c2:5c:a2:d7:1b:e1:05:e7:76:59:28:7e:99:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:43:4F:59:BC:88:68:EE:03:71:89:B6:1A:DB:84:97:80:B2:85
X509v3 Authority Key Identifier:
keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/1-AFDT1m8iGjuA3GJthrbhJeAsoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:62:e1:60:cd:36:09:19:0c:d9:e8:6d:6f:3a:42:81:b3:6a:
e4:7e:56:28:1e:03:c8:57:5a:60:d2:ea:97:fe:44:4a:b8:3c:
3b:5a:92:2f:63:3e:09:0d:5e:c0:fb:aa:ce:f6:00:c0:b6:67:
88:bc:97:fd:41:cd:a4:36:1f:2a:82:9b:58:3c:5d:59:71:3c:
27:a6:75:bf:d0:2f:b9:7e:01:63:66:41:d5:90:f5:04:b9:a2:
1f:f4:98:9f:b6:0d:c6:98:70:bd:7f:5d:8a:c3:99:66:5b:ab:
81:fd:1b:1f:80:a9:da:9c:3d:2e:00:26:2d:3c:f9:b5:6d:84:
3b:7b:8e:f2:42:e3:c1:14:00:ba:be:06:26:49:56:80:82:53:
62:87:54:4e:b8:3b:36:97:ff:52:00:63:57:8e:8f:5a:6f:2d:
bb:0f:21:c2:2c:37:de:ac:46:84:36:f9:cc:8f:85:07:b1:65:
e5:dd:25:97:f1:45:fd:6a:29:2a:16:e1:bf:ec:03:b0:d1:cf:
49:4a:7f:ea:4e:2f:83:79:9b:9d:dc:10:fd:cb:34:44:ec:a4:
2d:3d:81:3e:22:94:a3:db:f0:70:3f:ed:13:9b:5f:b2:35:82:
6b:ba:4d:7e:15:7e:a7:7f:4f:35:ba:0b:14:86:50:8b:8a:a7:
de:81:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:28 2025 by rpki-client