Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B4ncJfrTJM3-Kwz9fBB_fxTViTI.roa
File: B4ncJfrTJM3-Kwz9fBB_fxTViTI.roa (raw, json)
Hash identifier: iiMS07Xp8asdeqgNZhiwJqPZNEH7JrqqJedJaFCWa0w=
Subject key identifier: 07:89:DC:25:FA:D3:24:CD:FE:2B:0C:FD:7C:10:7F:7F:14:D5:89:32
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018B91877A1ED2ECA01E227DA02332D249B5
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B4ncJfrTJM3-Kwz9fBB_fxTViTI.roa
Signing time: Thu 02 Nov 2023 19:34:16 +0000
ROA not before: Thu 02 Nov 2023 19:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211411
IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:87:7a:1e:d2:ec:a0:1e:22:7d:a0:23:32:d2:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 2 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0789dc25fad324cdfe2b0cfd7c107f7f14d58932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6e:c3:ff:5e:23:0a:ac:ea:3b:81:c9:ea:99:
7f:f4:bb:f0:d9:e0:67:6f:71:ea:ba:30:50:a7:06:
2e:b5:90:2b:a5:b9:f1:3a:cb:6c:1a:e3:b3:33:b2:
4e:f6:5c:61:44:db:1a:30:0b:d8:e2:b5:2a:17:d2:
79:75:ec:cd:e7:d6:e6:cf:c1:4b:8b:21:c1:ac:7d:
94:1c:e6:2c:fa:de:27:bf:a5:3c:bc:69:cd:5b:54:
9e:7d:cc:20:a4:a3:98:6b:5b:8b:12:34:da:d9:4f:
a9:e4:52:b0:9d:fc:13:38:20:02:2d:3c:1e:61:ee:
22:eb:34:36:fe:43:94:7b:be:4f:ff:ef:30:bd:4c:
27:ae:6c:ab:b9:94:33:67:59:fa:b5:fa:87:09:6a:
ee:52:c6:0a:0b:fe:7e:8e:2b:8f:d2:87:ec:5b:d7:
22:cf:3e:e0:da:4f:31:7f:91:8e:39:6a:32:39:08:
5e:2c:57:6c:c3:9f:ac:c0:16:e0:8e:8f:cd:dc:c7:
fe:96:a6:ec:c8:5c:62:2f:bd:cd:22:06:1c:1a:88:
02:3b:5a:a4:70:89:05:96:91:86:d9:c8:e4:f3:e0:
fa:ac:12:2f:f4:bd:27:c1:7f:8c:b8:58:96:92:2d:
fa:c6:5d:7c:67:2b:41:24:39:8f:d2:97:31:67:d1:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:DC:25:FA:D3:24:CD:FE:2B:0C:FD:7C:10:7F:7F:14:D5:89:32
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B4ncJfrTJM3-Kwz9fBB_fxTViTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:5000::/37
Signature Algorithm: sha256WithRSAEncryption
59:c9:de:65:a6:43:41:5a:ce:24:8f:d2:7c:1f:cd:62:5a:44:
9f:d2:84:70:7b:a8:dc:30:ca:c8:04:95:c2:fc:e9:4b:de:35:
a3:11:fb:81:37:44:cc:7d:8d:59:b0:75:17:39:7c:32:26:41:
11:29:67:bb:df:70:f5:f0:34:a6:b6:fa:4b:31:37:4a:89:2d:
40:a1:7f:6d:d8:c9:78:1d:d1:cc:11:99:b6:e6:b0:61:42:26:
51:e1:95:f9:28:e6:0f:77:30:2b:e8:de:6b:04:1d:3d:9c:7e:
f1:b4:06:1f:a7:20:b9:fa:7b:54:1f:81:c2:e7:bc:bc:af:17:
46:6e:8b:64:32:dc:ba:37:0d:27:e9:5b:e6:8c:13:5a:7e:de:
0d:e8:32:00:3c:44:6b:ba:c4:65:32:29:45:c7:9b:a0:b0:7f:
14:9f:1a:92:e2:fa:5a:09:11:a6:26:0a:df:5f:e5:bd:f5:0d:
0a:fb:4c:94:de:c8:ce:38:7e:b5:6c:42:e3:51:5a:a1:23:e1:
ae:f8:19:9b:2e:30:91:c3:de:2c:11:71:f1:17:c6:fb:18:c1:
a6:b3:ff:29:7c:83:6b:7e:7d:66:ee:12:39:52:6d:45:9e:19:
7b:dd:a7:60:0f:7e:26:68:76:d7:43:06:68:09:d8:dc:cf:5a:
f2:9e:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:51 2025 by rpki-client