Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_RONvqfoZ4Ze8DPALJCgZI_mHVA.roa
File: _RONvqfoZ4Ze8DPALJCgZI_mHVA.roa (raw, json)
Hash identifier: VXbmyHnGlrrHxRjcHkHb4xQPrihlY5wdeKApXoGXoIg=
Subject key identifier: FD:13:8D:BE:A7:E8:67:86:5E:F0:33:C0:2C:90:A0:64:8F:E6:1D:50
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018856F56E259DC3F67BC9253697DFA5CE01
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_RONvqfoZ4Ze8DPALJCgZI_mHVA.roa
Signing time: Fri 26 May 2023 07:28:25 +0000
ROA not before: Fri 26 May 2023 07:28:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a0c:7b86::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:f5:6e:25:9d:c3:f6:7b:c9:25:36:97:df:a5:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: May 26 07:28:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd138dbea7e867865ef033c02c90a0648fe61d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:54:e7:9f:7d:b4:c7:d0:09:20:23:68:1d:
6a:25:83:99:e8:92:2f:ca:8d:3a:59:ec:4c:e7:19:
0f:2a:94:9d:d3:da:3e:4b:5f:8b:e7:7d:be:c1:09:
34:c3:e6:78:23:a3:ab:4a:00:10:8d:29:9d:35:d7:
86:6e:fd:9f:da:74:0d:e0:5f:80:63:a4:b2:40:05:
fb:f4:25:c7:3d:d1:bd:79:11:c4:e5:d5:8c:a2:e2:
e9:e9:e3:f8:e4:16:21:98:d1:a6:db:9e:66:4a:54:
ec:b9:c9:33:14:ad:c3:bc:4d:c5:ed:f4:f8:b6:2a:
8d:97:5a:6c:69:9b:7f:99:15:f5:1e:58:76:9e:c2:
37:c5:74:b5:de:7c:9f:35:31:eb:3e:2e:0a:a2:61:
70:af:fa:b9:6f:40:fd:10:31:86:54:f4:da:b0:22:
08:e8:a7:e4:7b:d2:3b:ee:df:89:c9:11:eb:83:b0:
fe:2c:42:3c:5c:8d:b7:bc:b3:fc:55:68:2a:38:d0:
03:2d:15:2f:d3:97:d1:e3:4f:3e:5e:37:6d:66:17:
9c:b1:89:d2:34:ff:1c:20:77:f5:00:24:bc:4c:12:
7c:01:b6:ce:db:6e:cb:96:d4:d4:30:c3:2a:9a:3c:
80:36:be:7e:b5:e5:1c:3f:31:bc:1d:f5:59:ac:76:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:8D:BE:A7:E8:67:86:5E:F0:33:C0:2C:90:A0:64:8F:E6:1D:50
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_RONvqfoZ4Ze8DPALJCgZI_mHVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b86::/32
Signature Algorithm: sha256WithRSAEncryption
10:b1:cf:bc:20:58:9d:df:2a:0c:98:45:63:40:94:42:0b:2e:
7a:64:1c:ef:0f:18:a1:b5:a3:5e:9c:84:a3:11:00:7a:9f:dd:
9c:fe:3d:88:a4:95:d0:97:ef:7a:d0:96:52:f1:0b:95:66:6a:
70:dd:2e:03:a1:5f:6f:c3:54:a5:72:b2:28:95:ac:cb:58:ce:
2d:47:7e:20:29:40:f7:09:ae:bc:d0:ee:3b:be:90:98:fc:7b:
0c:81:ac:24:5a:af:13:4c:5c:97:66:e4:70:b0:60:35:e6:e7:
e9:47:f5:aa:ab:df:f8:c2:0c:3d:a1:5c:9c:38:fd:46:90:51:
ff:ed:40:71:32:3a:3a:02:a7:d3:d0:c0:73:ed:4e:2a:b1:60:
51:31:53:c7:95:4c:44:28:97:2e:7e:d7:ab:82:7a:17:67:f7:
35:08:53:40:77:42:bd:cc:dd:19:9c:1d:c2:cb:85:7a:65:f8:
dc:fa:5e:86:6b:f0:4c:03:f0:f3:a0:f1:29:52:bd:34:b1:7f:
73:f2:99:f2:0b:91:7a:94:76:36:0b:26:23:26:fc:ba:53:d7:
89:8d:a5:7c:aa:00:8c:9f:5a:03:74:fd:a8:83:ea:8e:a6:73:
2e:c9:b2:0f:6d:7b:a1:8c:d0:96:63:79:0a:33:85:9c:d3:bb:
d4:ef:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:40 2025 by rpki-client