Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rNGuPSJft-Vo3aMmE_0SHixDFYs.roa
File: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (raw, json)
Hash identifier: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=
Subject key identifier: AC:D1:AE:3D:22:5F:B7:E5:68:DD:A3:26:13:FD:12:1E:2C:43:15:8B
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 01942444B9CC2351AFF683056FC9015E8644
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rNGuPSJft-Vo3aMmE_0SHixDFYs.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210918
IP address blocks: 2001:67c:c58::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b9:cc:23:51:af:f6:83:05:6f:c9:01:5e:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acd1ae3d225fb7e568dda32613fd121e2c43158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:4b:f3:24:67:5d:20:ea:7d:1f:5e:cb:04:
e0:4e:72:7d:67:b3:4e:e2:38:81:cb:c1:36:7a:f1:
d9:bf:08:20:b4:ad:23:fa:69:72:a2:20:3f:73:3a:
91:e0:07:89:1e:ea:60:bf:13:86:46:ee:f3:52:6f:
ce:60:5f:ef:74:a4:a2:73:42:74:45:34:aa:89:70:
df:7a:70:97:35:59:d2:12:5e:07:66:7c:42:9a:43:
3a:22:5c:02:d0:ca:e8:08:02:45:bd:f1:e6:cd:a0:
9e:d0:de:f8:40:ff:4e:6d:8a:3b:da:01:80:f2:59:
aa:2c:64:51:43:2c:26:54:3c:cc:d5:5a:e1:e0:6c:
fc:c8:f6:5f:c7:72:5a:f1:b8:6b:c4:04:7c:6f:40:
3e:01:9f:f0:91:f6:b8:5a:c7:7c:b7:9b:67:1c:10:
2a:f5:57:2c:b5:87:1d:98:9d:8b:80:2d:87:08:58:
34:e7:4b:0d:b4:60:35:8b:88:8f:33:af:b8:34:08:
55:97:27:90:82:ba:cc:a9:e4:d3:40:94:d3:17:7e:
c2:64:65:59:37:60:3e:a0:1e:5b:1c:b8:ab:97:99:
bf:d7:e6:0e:99:30:7c:86:98:d2:45:7f:3e:42:e4:
aa:c3:36:5d:e0:cb:9a:e7:b6:60:22:ff:75:5a:d0:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:AE:3D:22:5F:B7:E5:68:DD:A3:26:13:FD:12:1E:2C:43:15:8B
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/rNGuPSJft-Vo3aMmE_0SHixDFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c58::/48
Signature Algorithm: sha256WithRSAEncryption
2e:4d:05:c4:d4:18:20:4f:a0:f9:de:d2:83:1e:b8:15:a1:9c:
5e:0b:46:30:2c:14:ab:a9:ee:fe:da:26:91:85:26:54:75:ac:
b5:93:f8:79:fc:50:2e:65:85:9a:0b:ed:b4:0c:37:17:2f:b9:
77:1d:f5:40:93:4a:f2:ed:72:24:25:5c:45:b3:87:69:a1:df:
0d:23:ed:07:e3:43:ab:f2:b6:06:75:2b:5c:e8:d3:3e:ac:77:
c4:f1:36:3f:a7:b3:fd:0b:f7:4e:b1:2f:7b:4c:65:cd:7c:7e:
d4:74:d3:61:34:b4:51:bb:f6:51:52:96:54:d5:2e:48:3d:2b:
3b:40:b8:9b:4e:7e:b3:3b:d7:a9:69:94:54:c0:fd:f4:c0:dd:
1d:ab:fd:c7:5a:58:9c:3c:ad:2d:cb:63:58:06:e2:b3:21:23:
fb:de:dc:81:bc:8a:4a:e1:41:b6:a3:2e:07:d0:94:f9:6a:ca:
7b:e5:68:e5:a7:d1:ca:74:b2:d5:bd:0e:d9:e1:9e:e3:0b:a8:
53:b8:3d:17:9e:6f:13:21:ec:90:04:56:ed:3e:b9:75:19:9b:
5d:b3:dc:a0:dd:20:d9:08:81:f2:50:72:89:6b:f2:68:14:60:
b5:d2:d7:23:43:9a:7b:ee:46:44:fa:f2:53:b1:2e:f0:b0:59:
50:50:b3:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQkRLnMI1Gv9oMFb8kBXoZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1
OTU1YjQwHhcNMjUwMTAxMjM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2QxYWUzZDIyNWZiN2U1NjhkZGEzMjYxM2ZkMTIxZTJjNDMxNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrNL8yRnXSDqfR9eywTgTnJ9Z7NO
4jiBy8E2evHZvwggtK0j+mlyoiA/czqR4AeJHupgvxOGRu7zUm/OYF/vdKSic0J0
RTSqiXDfenCXNVnSEl4HZnxCmkM6IlwC0MroCAJFvfHmzaCe0N74QP9ObYo72gGA
8lmqLGRRQywmVDzM1Vrh4Gz8yPZfx3Ja8bhrxAR8b0A+AZ/wkfa4Wsd8t5tnHBAq
9VcstYcdmJ2LgC2HCFg050sNtGA1i4iPM6+4NAhVlyeQgrrMqeTTQJTTF37CZGVZ
N2A+oB5bHLirl5m/1+YOmTB8hpjSRX8+QuSqwzZd4Mua57ZgIv91WtBmtQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKzRrj0iX7flaN2jJhP9Eh4sQxWLMB8GA1UdIwQY
MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct
ZGVkZWEzYWIwZDNiLzEvck5HdVBTSmZ0LVZvM2FNbUVfMFNIaXhERllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi
LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxY
MA0GCSqGSIb3DQEBCwUAA4IBAQAuTQXE1BggT6D53tKDHrgVoZxeC0YwLBSrqe7+
2iaRhSZUday1k/h5/FAuZYWaC+20DDcXL7l3HfVAk0ry7XIkJVxFs4dpod8NI+0H
40Or8rYGdStc6NM+rHfE8TY/p7P9C/dOsS97TGXNfH7UdNNhNLRRu/ZRUpZU1S5I
PSs7QLibTn6zO9epaZRUwP30wN0dq/3HWlicPK0ty2NYBuKzISP73tyBvIpK4UG2
oy4H0JT5asp75Wjlp9HKdLLVvQ7Z4Z7jC6hTuD0Xnm8TIeyQBFbtPrl1GZtds9yg
3SDZCIHyUHKJa/JoFGC10tcjQ5p77kZE+vJTsS7wsFlQULMG
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:54 2025 by rpki-client