Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa
File: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (raw, json)
Hash identifier: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=
Subject key identifier: B9:1F:90:B7:79:37:6D:F3:37:82:A0:FF:88:FC:23:62:EB:35:38:A8
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 01941FFA707C5B7B9DB51759DBD5AB022E50
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209859
IP address blocks: 2001:67c:1768::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:7c:5b:7b:9d:b5:17:59:db:d5:ab:02:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91f90b779376df33782a0ff88fc2362eb3538a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:4b:7a:08:bf:d1:1b:88:d3:a3:77:ef:6d:
46:ec:6f:e8:0d:9c:07:34:81:b5:00:e2:2c:04:85:
e0:96:71:10:de:1e:fe:08:a4:fd:52:0d:6f:53:76:
43:fc:10:c7:12:9f:88:ec:e8:c9:38:1b:45:6a:45:
a7:39:84:1f:ad:85:16:d2:58:3d:f2:10:91:33:e1:
a5:92:47:5e:4a:b3:c5:7f:f9:a3:57:b2:49:5e:ac:
dd:bb:e0:76:3d:9a:60:d1:e8:21:c0:c3:33:ab:0f:
ac:4a:fe:52:2e:05:8f:c7:fd:39:54:3c:44:81:a2:
dc:52:af:dd:99:f3:ae:68:c6:bd:a3:10:6a:4a:fb:
66:28:43:24:60:88:c2:0c:ed:6f:01:7d:82:57:f7:
4a:30:6d:9c:bf:04:1d:f7:f8:ca:7b:5d:3f:94:2e:
68:d2:31:6a:c4:f2:e6:06:bd:40:ec:44:a8:93:00:
90:d9:2e:72:b3:ab:1d:00:0c:3d:b4:f6:db:96:9d:
99:0e:0e:92:24:4d:03:a6:cc:58:b2:11:6c:67:ca:
e4:36:f8:08:bb:4a:28:61:b4:d6:67:ca:b7:29:d4:
bd:30:7c:6b:ea:d8:73:23:f3:a3:00:7a:a8:52:2e:
14:57:88:14:da:81:0f:4b:20:02:53:02:b4:67:8a:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:90:B7:79:37:6D:F3:37:82:A0:FF:88:FC:23:62:EB:35:38:A8
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1768::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a3:94:14:fb:2d:48:0d:e4:58:c1:ad:71:f9:3a:8c:d5:bb:
23:13:14:44:9e:dd:ab:b0:e5:10:33:76:2e:22:05:99:ad:b7:
15:38:10:19:1d:3d:29:ad:18:65:bb:31:85:c9:7c:f2:91:87:
af:89:4e:41:d5:a8:19:3b:bb:f1:ee:c9:ff:a1:ca:8f:ea:62:
2f:8a:44:c0:b1:71:dc:7a:98:37:41:93:18:7e:f6:25:a4:3e:
5d:ec:f5:a1:38:07:30:54:1e:89:fd:77:2b:80:33:6f:69:6b:
a0:7f:1a:a6:07:a9:86:7b:87:ab:2e:10:63:f1:54:9f:66:ab:
30:41:e0:52:b8:6c:56:c1:83:cd:db:11:9b:4a:28:d0:9e:22:
68:92:54:1f:38:78:fe:62:0b:fd:75:75:12:61:77:89:bb:94:
9f:40:40:4b:34:09:76:98:04:5d:41:d9:41:b3:62:18:11:b6:
4e:8c:4e:d5:0b:dd:5e:21:ab:6a:1a:3b:5e:32:92:b7:20:87:
f6:8a:f4:7a:aa:be:c0:87:cf:e6:0d:c4:5e:8a:c9:dc:76:fa:
ff:6d:e2:6f:b6:1b:3d:80:c0:88:ec:2d:ae:28:97:c7:e6:93:
00:60:24:bf:20:95:ce:66:1c:ec:ae:42:88:60:79:cf:82:e8:
1d:fa:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:35 2025 by rpki-client