Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/f4_Vy8zgvi00AP7F_aIbNAi9fTQ.roa
File: f4_Vy8zgvi00AP7F_aIbNAi9fTQ.roa (raw, json)
Hash identifier: WnXvcefQJiJFSe2nDAPhOlQf3pzOJbY7/WDcXOfnD6g=
Subject key identifier: 7F:8F:D5:CB:CC:E0:BE:2D:34:00:FE:C5:FD:A2:1B:34:08:BD:7D:34
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C734DA
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/f4_Vy8zgvi00AP7F_aIbNAi9fTQ.roa
Signing time: Sat 01 Jan 2022 16:01:41 +0000
ROA not before: Sat 01 Jan 2022 16:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15398
IP address blocks: 2001:918:ff5d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355232474 (0x50c734da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f8fd5cbcce0be2d3400fec5fda21b3408bd7d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:d4:db:1c:b6:3c:e0:5c:16:44:77:4d:31:
dc:06:3e:bc:05:fc:a2:f8:06:63:55:02:2f:42:61:
fb:58:05:ff:47:00:2e:c1:d3:a8:38:db:c2:f4:54:
34:bc:33:97:7d:ca:03:dd:14:cf:d9:9b:02:90:5a:
e5:8d:0f:e0:85:dc:66:cc:93:99:17:0e:19:0a:2f:
6d:ac:db:06:09:fe:a6:c6:5f:98:e3:70:36:24:d1:
2a:58:a9:28:dc:4c:55:c5:9f:fc:cf:99:3b:24:62:
7a:37:ce:5b:5d:ac:0f:d3:ae:08:a1:0e:81:43:c8:
50:aa:0c:1a:cc:82:f5:56:ec:6a:91:4f:e4:4f:d9:
0c:44:4e:a8:e0:5c:c8:2e:a3:e8:65:72:ff:d7:37:
d0:2c:dc:a7:f2:88:62:22:16:59:55:9d:8f:81:93:
db:11:61:41:6b:89:1d:89:bc:71:c7:ae:e3:58:f0:
16:52:60:64:76:06:f5:b4:61:df:aa:06:17:a0:58:
26:9e:17:cc:90:3e:76:0a:27:a7:c0:2d:2a:30:7f:
f8:6e:95:8d:66:e6:62:9f:c0:ae:d1:bc:d8:8f:31:
61:23:b4:6a:3f:28:f8:ef:de:f1:09:9d:92:24:a5:
cf:eb:37:58:1c:a2:99:bc:af:1c:7f:6f:96:8a:01:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:D5:CB:CC:E0:BE:2D:34:00:FE:C5:FD:A2:1B:34:08:BD:7D:34
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/f4_Vy8zgvi00AP7F_aIbNAi9fTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:918:ff5d::/48
Signature Algorithm: sha256WithRSAEncryption
37:79:0e:b7:86:96:bd:ff:75:ef:b4:bf:63:8a:40:8c:3c:c2:
d2:2c:1c:c6:18:99:ff:4e:c2:d6:b0:81:51:87:85:8a:d5:a2:
d4:fd:42:d5:f6:f6:67:09:d8:83:3f:6f:8f:11:06:7a:53:6e:
2c:21:ec:95:19:9d:b0:58:d5:c6:4a:5b:7d:d3:0a:91:9d:37:
cc:8e:1b:b1:ac:d9:4d:19:38:5b:b4:38:d7:7b:aa:65:e3:ae:
d0:d4:5b:ce:a8:7f:55:88:b3:22:4f:ab:af:97:02:fd:0a:ab:
27:50:22:0f:9b:04:f0:bb:60:b9:b1:52:9d:92:ee:42:58:83:
05:0f:0e:c7:51:f4:ea:2f:43:ca:2e:81:a0:fd:23:b6:35:0d:
76:9e:f3:09:08:72:10:5d:05:f7:0e:48:cd:05:a2:b4:4e:d9:
38:eb:fc:4b:76:aa:28:f4:25:de:62:fe:f5:74:fa:a3:65:de:
91:59:fe:4d:b7:ad:23:5e:07:ed:9f:8e:08:6f:78:da:f0:e7:
e1:80:33:39:56:87:66:4d:67:9d:4c:af:9b:77:c0:b4:c3:65:
09:33:3b:0f:a4:52:77:17:b6:f0:a5:eb:5f:8a:78:3a:fc:20:
e0:77:a6:f0:f9:bc:e7:f7:ec:ed:38:41:77:f0:69:37:a4:89:
18:fe:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:36:59 2025 by rpki-client