Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa
File: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (raw, json)
Hash identifier: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=
Subject key identifier: AF:CC:9E:EF:BC:EA:21:BF:01:21:BB:C2:79:6A:5B:BC:05:0B:E0:0C
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 019423D6A5339D56F55C9BCBFF6969CE6595
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203415
IP address blocks: 2001:67c:228c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a5:33:9d:56:f5:5c:9b:cb:ff:69:69:ce:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afcc9eefbcea21bf0121bbc2796a5bbc050be00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:5d:4f:f0:79:b3:0d:a1:14:31:84:3e:e2:
74:9d:8d:0c:4f:b5:34:ac:ff:0f:70:d9:6f:fe:30:
80:ef:d2:3a:35:67:ee:54:45:f9:c9:e0:9c:8a:d4:
f5:0f:f4:09:99:76:53:db:d8:2d:a1:77:fb:07:98:
6f:02:40:98:d8:09:f8:cc:f1:03:ad:62:7d:ee:e8:
86:c0:67:f9:72:ae:83:5a:af:55:e8:d3:84:86:e5:
d6:47:4a:f6:6c:f0:3b:1b:0a:fb:28:1b:5b:86:e8:
f6:fd:fc:1c:7e:4f:f9:18:15:79:79:10:b0:5e:f3:
97:61:36:bb:31:2b:55:70:09:97:3b:9b:c6:48:b3:
93:23:ef:52:6c:dc:c7:8b:87:db:eb:0d:71:8c:3c:
cc:bb:cc:e1:ce:c5:af:0e:84:a4:b9:fa:dd:bd:16:
ba:07:e0:b0:d2:00:19:e2:95:2e:3b:7f:70:48:09:
fb:5d:d8:06:47:76:8c:a6:ea:83:a0:b7:f7:ad:a7:
5c:a0:31:2d:f6:a8:6c:b8:db:5d:b9:07:8c:02:04:
cf:f2:04:4e:aa:6f:87:d6:ac:08:66:38:6d:50:b0:
1e:96:9d:81:98:cc:04:f8:fa:db:c3:59:33:26:b0:
a6:5e:b0:45:d1:1d:de:58:95:a7:55:f7:af:df:17:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:9E:EF:BC:EA:21:BF:01:21:BB:C2:79:6A:5B:BC:05:0B:E0:0C
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:228c::/48
Signature Algorithm: sha256WithRSAEncryption
14:08:f1:2a:9c:98:8e:72:e2:d1:15:4e:99:54:22:59:33:52:
54:a0:61:04:af:ad:ef:bb:83:34:21:58:03:ae:a4:0c:92:3b:
17:e0:e5:80:27:c0:48:d9:67:d4:e5:86:cb:76:2a:6e:a3:47:
0e:93:89:31:44:fb:d8:c7:88:f9:74:ce:a6:45:95:84:e5:7e:
ef:7f:27:13:97:ef:61:08:21:68:9f:b2:cb:c4:d7:40:52:2a:
61:40:9e:51:6f:60:24:41:17:e3:18:e7:b5:e4:38:cb:51:32:
75:36:55:b1:e2:65:43:4a:ff:57:b5:f7:4a:b3:46:07:b5:7e:
5a:f4:0b:8d:81:55:c2:72:64:d3:0e:2a:01:a8:bc:0a:fc:58:
56:cc:14:24:41:20:9d:cd:3c:28:f3:8c:74:1d:0a:4d:c8:5f:
02:c2:dd:c7:7d:c5:e1:05:e3:17:df:05:e2:f5:f1:2a:59:75:
86:41:49:6f:a9:9e:b1:82:72:c7:fe:d0:59:8b:a7:c0:4c:ea:
a0:86:55:ac:78:6d:ed:be:d9:20:7f:5f:3f:15:0a:91:de:04:
3b:6c:ca:dd:34:76:92:2d:f3:f7:80:58:69:4d:f9:a0:94:5d:
0f:9f:c4:ac:27:41:1a:aa:46:1c:a6:12:eb:84:41:47:12:4f:
83:54:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:56 2025 by rpki-client