Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/IHuy5m6zptiT3vWPLOWB9M26Vxg.roa
File: IHuy5m6zptiT3vWPLOWB9M26Vxg.roa (raw, json)
Hash identifier: Fb6igs9Wu8bgUut9KOxlT7ak2CEpM1R8zuX5XVyw6Io=
Subject key identifier: 20:7B:B2:E6:6E:B3:A6:D8:93:DE:F5:8F:2C:E5:81:F4:CD:BA:57:18
Certificate issuer: /CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
Certificate serial: 018A2759058F10ECE5DB4CB000AB2851F505
Authority key identifier: E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/IHuy5m6zptiT3vWPLOWB9M26Vxg.roa
Signing time: Thu 24 Aug 2023 11:41:00 +0000
ROA not before: Thu 24 Aug 2023 11:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2001:67c:1104::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:59:05:8f:10:ec:e5:db:4c:b0:00:ab:28:51:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
Validity
Not Before: Aug 24 11:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207bb2e66eb3a6d893def58f2ce581f4cdba5718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:91:ff:ca:fc:15:04:f3:1a:ae:93:18:e3:
31:96:dc:a4:ee:32:56:c9:b9:46:5a:af:83:ec:b4:
56:76:f0:b7:a9:c8:2d:60:48:96:ea:4f:e3:d7:4a:
99:ac:b5:30:a7:67:5b:d5:35:ab:9e:e7:3d:12:f1:
4a:cc:3b:fe:d3:e3:89:cf:8b:91:ee:bd:c4:fd:16:
78:bc:64:59:68:2d:9f:ac:cc:96:b9:2b:6e:cd:7e:
5b:d0:1c:12:95:2b:83:b9:c2:3f:ec:8f:3a:1d:89:
ea:f2:2f:37:31:8f:79:eb:5f:fc:54:2d:02:d9:a7:
d6:9c:7a:49:83:9b:34:18:44:5e:6b:5e:28:6c:22:
ef:fe:58:c5:ae:d4:0e:09:a6:4a:72:02:e4:7e:04:
46:88:0c:29:de:d7:a1:15:b6:08:2f:e6:74:4e:0e:
48:fc:54:aa:36:89:53:59:44:88:0f:02:d1:6e:50:
1e:3b:e2:f0:0e:e0:2f:cc:89:80:e5:21:1a:34:6f:
5f:bd:aa:29:40:74:3e:3d:02:ff:4a:8d:5b:3d:d7:
20:9c:7f:45:ab:4e:87:d9:96:a2:bf:47:6c:e8:12:
fc:30:ec:2d:b8:ff:cb:0d:bc:67:23:f9:ba:86:a6:
c2:b9:41:38:11:d2:d7:59:ea:aa:1b:62:a3:d1:0b:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:B2:E6:6E:B3:A6:D8:93:DE:F5:8F:2C:E5:81:F4:CD:BA:57:18
X509v3 Authority Key Identifier:
keyid:E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/IHuy5m6zptiT3vWPLOWB9M26Vxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1104::/48
Signature Algorithm: sha256WithRSAEncryption
61:37:08:34:a5:ca:92:33:e9:b5:05:5c:60:60:78:0b:9c:eb:
39:06:ee:21:fb:4a:3d:2d:0d:99:58:ca:01:78:7a:ab:31:49:
d0:ec:f1:b9:62:92:4e:9b:31:7f:2b:0d:5a:78:fc:1d:59:f3:
dc:53:39:85:05:1b:e7:71:95:cc:e1:45:ec:3f:ef:26:74:cf:
67:9a:0e:e8:a3:0c:be:a8:ee:c6:7e:04:86:e2:b0:27:0e:8f:
f3:63:36:81:fa:7c:04:2b:54:3c:b2:5a:5a:7b:a0:13:54:23:
a8:65:73:01:82:a6:36:d8:55:86:a7:f7:87:42:ec:e6:e7:9d:
cb:38:62:55:1d:4c:f0:42:95:94:b5:59:97:6a:68:61:d6:97:
84:2c:79:ab:af:14:2c:8b:da:fe:12:47:7c:03:1f:17:ed:63:
bb:04:4a:1a:a9:ce:d4:96:2e:d4:ac:2b:bc:16:8b:2c:33:77:
8c:63:7b:ec:e3:b6:74:49:51:e0:25:6e:8b:62:c2:5d:07:c7:
76:67:14:8c:82:df:64:66:e5:12:39:6f:5c:03:58:a4:ce:d5:
71:1e:6d:08:4a:e9:ab:5a:ac:63:8b:8e:a2:f7:03:48:00:f5:
0a:e9:3d:f5:1d:3b:e1:60:29:8b:76:67:75:89:d4:57:76:61:
71:10:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:33 2025 by rpki-client