Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/tX7ugzTELMCfaa10qZ6cRQFzo6s.roa
File: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (raw, json)
Hash identifier: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=
Subject key identifier: B5:7E:EE:83:34:C4:2C:C0:9F:69:AD:74:A9:9E:9C:45:01:73:A3:AB
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019421B1C7CC5BDB88A7A7E0DE284EDF5F47
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/tX7ugzTELMCfaa10qZ6cRQFzo6s.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2001:67c:2458::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c7:cc:5b:db:88:a7:a7:e0:de:28:4e:df:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b57eee8334c42cc09f69ad74a99e9c450173a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:75:8c:c1:77:26:9d:71:57:c5:03:fb:b0:
3e:33:9b:db:e9:1e:a0:ae:43:cd:a2:87:e2:a5:7d:
f5:5d:7a:df:05:2a:b1:71:42:74:b8:59:5d:de:2d:
15:66:05:40:a8:d7:bf:f7:ab:7b:5d:64:cd:6d:46:
5f:80:be:17:6b:be:69:87:ea:08:28:c7:57:48:46:
61:1f:d4:d0:06:b8:6e:31:08:d4:61:60:68:ba:88:
91:5f:61:f1:2a:57:c9:ba:aa:fe:f3:1f:cb:96:0f:
44:d4:9b:f1:51:59:ee:f7:cc:69:86:18:ef:10:5a:
51:87:ce:46:02:a6:5f:8f:b9:41:e9:29:3d:8e:a5:
6f:fd:9c:35:50:c6:c8:fd:c7:93:45:81:41:d2:f8:
ce:c3:da:85:00:f9:c5:12:ff:ac:35:e3:2b:34:1b:
2f:9d:fe:68:22:ff:2e:34:70:2a:67:92:40:7c:d6:
7d:00:69:aa:68:ce:cb:f6:14:33:8a:a8:ca:ef:a7:
f0:ef:75:33:da:2f:93:38:4f:99:46:de:98:e2:b5:
04:58:35:a6:df:38:e2:40:f9:84:e9:81:c5:75:e4:
53:75:1f:e8:9c:63:56:39:e1:df:bd:1f:6e:dc:ac:
5f:51:38:15:86:97:c5:16:3d:b1:0f:4e:76:c6:c9:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:EE:83:34:C4:2C:C0:9F:69:AD:74:A9:9E:9C:45:01:73:A3:AB
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/tX7ugzTELMCfaa10qZ6cRQFzo6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2458::/48
Signature Algorithm: sha256WithRSAEncryption
41:59:27:39:c4:c8:92:1e:6b:63:8e:67:43:11:7d:80:84:b9:
bf:7f:d7:36:6a:9f:7f:af:f5:4d:10:b1:e9:62:80:81:39:98:
15:39:43:9d:a4:82:e0:c9:65:22:88:35:51:3e:2f:49:2b:e1:
8a:e6:04:bb:2b:30:23:63:cf:60:9c:c7:e2:ec:8a:40:55:5f:
1e:1f:9e:f0:6b:58:2b:c5:87:1b:e9:28:24:65:88:b2:5d:1b:
ea:a4:d4:e5:82:cc:c0:d9:86:64:76:ae:c9:b1:bc:cb:10:ba:
62:d9:1a:6a:43:89:28:df:f4:64:bb:26:a6:1b:27:ad:75:13:
bc:72:29:14:10:e7:79:6d:d1:7c:7b:e7:34:bd:c2:69:c4:b3:
49:f7:e0:bd:5a:16:a6:70:94:df:3c:af:d8:0b:2c:1d:44:93:
db:d5:36:48:16:24:da:b3:e0:06:86:f7:4c:1e:67:b1:c1:38:
ce:65:85:4d:2c:b8:86:5d:68:7e:4a:4c:08:a7:f3:3d:2a:4c:
26:9d:76:9a:21:12:68:25:00:22:ad:44:1f:fe:fb:67:72:d2:
92:99:ee:79:bd:f4:20:8a:47:02:2f:30:e7:e3:98:a8:71:a5:
ba:e3:40:45:12:eb:50:ab:29:82:7a:1c:96:13:98:51:b4:85:
5e:f3:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:57 2025 by rpki-client