Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/uRejM1snlHHNPDsq41cl4M3Lbyc.roa
File: uRejM1snlHHNPDsq41cl4M3Lbyc.roa (raw, json)
Hash identifier: Bm+JGB7PXMl/gqtddcZGIyOZnbRVj/tO03798MdApOY=
Subject key identifier: B9:17:A3:33:5B:27:94:71:CD:3C:3B:2A:E3:57:25:E0:CD:CB:6F:27
Certificate issuer: /CN=06216f2190cbe8ea7e4e337e30debe6fa74f51ea
Certificate serial: 018FE7C203AD77ED23A253DFE46D3FE6D50C
Authority key identifier: 06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/uRejM1snlHHNPDsq41cl4M3Lbyc.roa
Signing time: Wed 05 Jun 2024 09:36:42 +0000
ROA not before: Wed 05 Jun 2024 09:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214770
IP address blocks: 2001:67c:e9c::/48 maxlen: 48
2001:67c:ea0::/48 maxlen: 48
2001:67c:ea4::/48 maxlen: 48
2001:67c:ea8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:c2:03:ad:77:ed:23:a2:53:df:e4:6d:3f:e6:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216f2190cbe8ea7e4e337e30debe6fa74f51ea
Validity
Not Before: Jun 5 09:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b917a3335b279471cd3c3b2ae35725e0cdcb6f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:98:e6:ed:fe:8a:d4:0e:6d:cd:f7:1b:ab:
1d:9a:85:76:da:b6:35:4b:20:ed:76:c4:b7:25:a8:
38:d7:e9:ab:d9:da:0d:b4:c0:82:0f:a1:9a:bb:af:
f1:5c:d6:5e:82:b5:ca:4f:85:e8:78:42:19:e4:d0:
ab:86:51:db:fd:91:c3:a0:9c:e3:93:6b:5b:7c:8e:
66:55:98:19:b3:af:eb:7d:43:8f:ec:60:e9:f0:be:
0a:c3:22:8a:dc:b7:8c:e1:78:43:2c:70:03:9e:68:
d7:e6:70:06:81:ab:ef:a4:a8:a8:4e:c2:ef:5f:76:
62:75:07:b1:67:fb:3d:2c:2e:f4:f6:1f:3d:30:ec:
e8:aa:67:57:59:8f:b4:05:bb:f7:42:7a:d4:b4:9e:
a1:98:93:42:45:9d:2c:f3:a0:2c:31:e9:f1:68:c1:
75:fd:3c:f0:4a:c7:1c:f0:f4:97:21:98:36:3b:65:
6f:83:a0:d6:66:d1:0a:cf:e8:b6:a1:2f:c9:e9:be:
9f:5e:6b:da:5b:7d:47:44:0c:84:be:e0:5f:2f:dc:
e4:7a:a5:58:2f:f1:12:6d:26:92:fb:63:cc:5b:95:
17:ba:79:35:94:3c:fc:e7:75:dc:7a:97:7f:fd:4d:
9a:ee:55:51:1f:40:ec:3a:ec:29:76:80:aa:bd:15:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:A3:33:5B:27:94:71:CD:3C:3B:2A:E3:57:25:E0:CD:CB:6F:27
X509v3 Authority Key Identifier:
keyid:06:21:6F:21:90:CB:E8:EA:7E:4E:33:7E:30:DE:BE:6F:A7:4F:51:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFvIZDL6Op-TjN-MN6-b6dPUeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/uRejM1snlHHNPDsq41cl4M3Lbyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f753f9-e8f6-4e8d-9bc0-cb5d86f927fe/1/BiFvIZDL6Op-TjN-MN6-b6dPUeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e9c::/48
2001:67c:ea0::/48
2001:67c:ea4::/48
2001:67c:ea8::/48
Signature Algorithm: sha256WithRSAEncryption
42:85:bc:73:58:8e:dc:0d:1f:59:60:fe:36:53:25:5b:1f:6f:
e4:43:7a:77:f1:95:5d:84:2d:ff:1d:a4:3d:7a:4c:e5:c1:37:
4a:fe:2d:f8:46:5d:51:71:53:8b:c9:87:f9:39:29:7e:8c:6a:
d8:87:4c:11:8d:98:01:15:1a:98:ef:e9:8b:b1:d2:08:41:de:
7c:bb:cc:15:22:bf:bb:eb:e2:32:89:c2:60:f4:83:1e:d0:42:
26:ab:1c:b4:ab:2f:7c:00:27:11:f7:a2:60:d3:f6:a0:d9:83:
15:d5:ab:96:9f:01:03:9b:04:22:12:4d:d7:d8:d3:5d:87:46:
96:be:ab:ce:60:1f:bb:ba:c7:88:6f:1a:e8:34:aa:06:94:6f:
ec:72:0f:85:f5:d0:bc:20:ed:c8:47:36:00:27:8c:80:16:94:
84:a0:7d:9d:5f:86:3e:7c:98:5f:f5:00:7f:dc:28:41:b7:0c:
92:06:d6:b4:c2:d0:a6:1e:96:81:cd:1e:8c:57:1e:a0:f9:00:
a7:af:95:6b:e6:34:74:2c:19:d0:19:f9:1e:ea:b4:1a:a5:08:
2b:25:39:17:83:6b:7c:3e:30:e1:9f:3c:e1:35:32:dd:5e:3e:
c0:ae:6a:05:69:15:1e:7e:c8:07:34:be:ad:d0:9e:3e:53:d5:
cf:a0:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:15 2025 by rpki-client