Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/IiIPmmM-nxlvi6X_BDwclVK8nN4.roa
File: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (raw, json)
Hash identifier: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=
Subject key identifier: 22:22:0F:9A:63:3E:9F:19:6F:8B:A5:FF:04:3C:1C:95:52:BC:9C:DE
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 0194258FB9C8D693A3EB1A38FC67EE9163EB
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/IiIPmmM-nxlvi6X_BDwclVK8nN4.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215332
IP address blocks: 2001:67c:93c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:c8:d6:93:a3:eb:1a:38:fc:67:ee:91:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22220f9a633e9f196f8ba5ff043c1c9552bc9cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:ff:3e:4b:ef:51:6c:b9:7e:f0:f6:29:e4:
d0:75:ea:a3:23:7c:f5:80:07:66:17:e4:cd:ee:9d:
75:83:1b:60:7e:f7:6e:2a:fe:6a:ef:34:c5:aa:80:
00:99:bb:7a:32:9c:c0:37:62:d2:f9:9b:6e:a2:05:
e0:33:74:ff:9f:43:29:03:84:b4:76:7d:6a:d5:77:
d7:07:04:c6:9f:46:ed:8d:c8:98:2c:fd:91:79:48:
be:f6:9e:0e:2d:d2:f2:9c:be:49:9b:f4:bc:07:7b:
c3:e2:53:7c:88:07:0f:2d:bf:d9:ac:ae:1a:e2:b1:
39:50:3a:89:a4:bf:f7:0e:4f:58:1e:3e:8e:4d:86:
f1:47:5e:5b:b8:28:d1:f1:dd:a3:cd:55:78:b6:19:
8b:81:52:44:50:53:a0:01:e1:03:ca:6f:f6:3c:74:
8f:e3:4a:32:1e:61:fa:d1:5b:dc:ca:46:c3:0f:3e:
2f:4a:71:99:52:db:b0:69:83:4e:33:75:46:d0:5d:
f4:d5:91:f1:de:f1:d5:5a:14:e9:cb:b8:b7:2a:73:
71:20:28:0c:4a:9a:52:01:a0:42:a1:c4:c9:6b:68:
7f:d5:8f:a8:3f:b9:54:ab:a8:60:7f:47:f3:20:f3:
4f:98:4e:76:03:d4:4d:6b:01:5d:29:9e:ec:81:af:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:0F:9A:63:3E:9F:19:6F:8B:A5:FF:04:3C:1C:95:52:BC:9C:DE
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/IiIPmmM-nxlvi6X_BDwclVK8nN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:93c::/48
Signature Algorithm: sha256WithRSAEncryption
21:2d:b2:a2:61:03:41:de:78:06:63:69:ef:eb:73:25:dc:65:
16:37:56:42:25:e2:82:b9:75:36:bd:cd:4c:36:cb:19:19:30:
8f:ba:85:82:eb:09:0d:b3:ce:fb:7c:1e:83:74:bd:17:fb:11:
34:d2:9c:39:ae:4d:9e:55:86:73:d2:fe:23:d7:23:a6:13:9a:
38:5f:22:38:be:1d:9f:44:af:f2:16:72:f7:4b:65:bd:87:3e:
37:04:51:21:75:24:d4:61:43:b0:65:90:59:df:b7:cc:c4:07:
c2:8f:42:19:8a:5d:b7:6d:49:8c:0e:54:c9:f5:56:e0:c4:3b:
f1:17:9d:e0:2e:2d:35:66:f4:59:9b:1c:5b:5b:ef:8b:08:86:
d8:fc:38:87:33:5d:63:f4:ac:3b:c3:d4:3d:0e:1f:5b:2f:2f:
78:05:f9:a8:9a:32:53:b2:78:3b:0c:9a:2f:99:58:ec:51:a6:
ff:ae:0e:0a:8b:1f:f8:5d:02:7d:16:03:bd:49:7c:51:43:1c:
c7:20:9f:cf:6f:56:3f:03:75:a5:ae:ff:2d:b1:76:26:fe:0b:
46:3d:e6:f6:3e:a3:5e:67:1e:ba:7f:ca:be:df:5d:75:ca:5e:
21:ca:9f:81:95:c1:3f:b3:eb:38:4d:09:1a:f7:e8:4b:49:73:
96:80:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:00 2025 by rpki-client