Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/3dG8YaOnfwEC52wznegQhdeRtcc.roa
File: 3dG8YaOnfwEC52wznegQhdeRtcc.roa (raw, json)
Hash identifier: nBxxQM8wsgWMgEwbxMj3CEVd0N1IYtD0Za8RWxH/o3M=
Subject key identifier: DD:D1:BC:61:A3:A7:7F:01:02:E7:6C:33:9D:E8:10:85:D7:91:B5:C7
Certificate issuer: /CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
Certificate serial: 0846C32E
Authority key identifier: D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/3dG8YaOnfwEC52wznegQhdeRtcc.roa
Signing time: Sat 01 Jan 2022 14:55:39 +0000
ROA not before: Sat 01 Jan 2022 14:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208824
IP address blocks: 2001:67c:1804::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138855214 (0x846c32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26741d31d28d3865dd5381dfbd0bea2f66ff323
Validity
Not Before: Jan 1 14:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddd1bc61a3a77f0102e76c339de81085d791b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:7f:dc:d0:90:97:ec:31:c0:07:0a:2c:5f:
21:00:0b:4d:91:f7:07:52:bb:38:49:f7:7a:7b:1e:
38:87:58:d3:42:ea:87:78:f7:30:06:3d:ee:83:87:
5c:12:78:bf:9c:63:45:7c:90:de:42:9d:73:94:74:
7b:75:b0:0c:ef:47:e7:37:fc:cf:1e:99:14:c9:48:
a7:c1:d2:67:96:47:b9:41:db:29:7d:52:e5:c3:fd:
52:1f:91:01:01:02:03:5a:a6:f7:d7:2b:0d:ea:3c:
05:8d:73:07:03:cf:50:11:45:10:d9:4f:16:25:c4:
b7:18:98:96:63:52:33:b7:9d:47:93:99:8b:17:60:
50:31:99:f5:7a:c8:15:1c:78:05:d8:3b:18:25:3e:
ee:05:70:5d:9c:57:23:cc:b7:b5:c4:05:98:5c:76:
64:89:b8:0b:b7:5c:0c:33:b6:c6:bb:f6:ee:24:9f:
bc:a2:8f:46:b0:fb:09:2e:4a:b5:d3:dc:11:6b:f8:
06:b8:5c:dc:eb:e2:33:81:66:c0:67:5f:dc:59:21:
7d:e7:5b:87:e6:46:08:fb:f4:0b:c9:a9:85:23:13:
75:e5:17:55:98:e1:86:29:73:75:b1:b9:83:07:c1:
8e:fa:de:4e:1a:9f:1a:16:2a:9b:2d:78:58:e9:e3:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:BC:61:A3:A7:7F:01:02:E7:6C:33:9D:E8:10:85:D7:91:B5:C7
X509v3 Authority Key Identifier:
keyid:D2:67:41:D3:1D:28:D3:86:5D:D5:38:1D:FB:D0:BE:A2:F6:6F:F3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/3dG8YaOnfwEC52wznegQhdeRtcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0a51b7-6b5e-421a-bde2-c3da58b4ec4d/1/0mdB0x0o04Zd1Tgd-9C-ovZv8yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1804::/48
Signature Algorithm: sha256WithRSAEncryption
87:7a:36:5b:5b:e0:54:1c:79:47:c5:40:d4:c8:81:8a:c2:ec:
f1:8d:3a:c8:d2:78:69:59:f6:2f:b7:49:ca:63:b2:2e:0f:4b:
ba:3a:4a:95:c4:22:5c:df:03:bf:23:72:be:39:db:c8:a4:1f:
f3:32:f6:6e:f2:a1:5f:8c:70:2b:13:05:86:49:c0:13:94:fc:
dc:49:a1:2f:f0:12:6f:4d:d0:38:da:d1:d9:3a:72:03:43:90:
f7:71:89:6e:1b:18:06:23:ce:90:a1:1a:27:e7:32:0e:39:66:
de:d9:a8:b0:86:8e:e7:53:b7:59:66:b0:18:24:b3:54:a7:03:
d0:e7:7f:f4:70:75:a8:05:f5:4d:18:51:6b:20:d3:65:06:51:
4d:d8:b8:41:23:80:1b:dd:b3:4c:a1:09:a0:54:4f:72:a2:45:
fb:6d:bd:0c:cf:2a:21:38:63:1b:2a:09:51:01:a5:32:79:cd:
04:01:2e:f5:3d:b0:21:90:52:cf:e9:46:9d:43:4f:c0:42:7d:
57:48:7c:4c:5d:de:55:75:6e:70:34:9b:a3:c1:79:77:1e:32:
18:60:8e:5a:f1:15:f0:28:29:70:84:6a:33:1a:7f:64:ce:85:
47:93:6f:64:72:67:2e:c1:51:30:f6:b9:3b:0f:bb:6e:f3:99:
cc:fc:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:55:45 2025 by rpki-client