Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/aBrEW06-xKv77MgMEwK2_lYbz-I.roa
File: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (raw, json)
Hash identifier: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=
Subject key identifier: 68:1A:C4:5B:4E:BE:C4:AB:FB:EC:C8:0C:13:02:B6:FE:56:1B:CF:E2
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 01942445360A619C195079DA2993B5A63BAC
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/aBrEW06-xKv77MgMEwK2_lYbz-I.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.20.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:36:0a:61:9c:19:50:79:da:29:93:b5:a6:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681ac45b4ebec4abfbecc80c1302b6fe561bcfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:f7:a1:3c:9d:60:c9:af:0b:1a:96:1c:4d:
40:e1:2b:0d:d5:1d:a9:76:85:3e:fb:a7:b2:92:e3:
12:6a:e9:21:f2:cf:85:d6:8c:ad:ab:b5:e4:31:13:
7f:7c:53:75:48:24:5e:c9:38:35:56:c4:57:63:8c:
7d:c1:2e:b1:77:f2:11:25:af:3f:2b:4a:d0:24:a5:
2d:8c:30:47:24:fb:44:f7:f7:55:d9:ea:47:56:4e:
a6:9c:4b:c1:9c:49:07:6e:c1:7b:16:8f:03:c1:e3:
06:a4:17:3a:47:35:0c:8a:d9:32:54:25:80:7b:eb:
da:43:40:0e:c8:00:5f:7d:e4:3f:5b:40:39:20:cc:
f3:05:2d:84:ce:0a:e3:c4:1a:14:64:f7:0d:c5:ea:
d3:10:74:ae:de:b9:69:3d:ed:64:80:1d:31:96:9c:
dc:c1:d8:2a:69:94:36:99:f7:14:47:da:a3:22:c6:
d6:9f:65:02:39:fa:e8:99:97:47:96:2e:8f:c7:51:
80:fe:ce:30:56:86:6c:47:05:19:d8:8f:5c:ce:99:
98:08:41:cd:a2:dc:db:14:46:e2:85:c5:ef:5a:07:
2a:44:d8:14:af:a0:d4:ed:7a:42:76:59:83:79:11:
3c:57:a7:fa:e0:af:d4:7f:d8:e3:01:89:2d:9f:b8:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:C4:5B:4E:BE:C4:AB:FB:EC:C8:0C:13:02:B6:FE:56:1B:CF:E2
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/aBrEW06-xKv77MgMEwK2_lYbz-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:87:0c:31:a2:aa:70:29:82:ca:44:60:d7:77:4b:6f:08:48:
c5:d2:7c:3d:18:d8:8a:c3:e1:37:34:c0:bd:db:f5:51:cd:e3:
ca:5d:2c:fc:70:4a:22:b1:0c:26:c2:12:18:a4:7e:22:a8:7e:
a2:90:63:68:3b:92:5f:54:3c:b8:f4:07:4c:da:a7:21:34:fd:
3e:eb:45:9a:8e:9c:e1:f8:f2:b0:e9:79:77:b5:4b:0f:fd:e4:
c6:09:fd:8d:08:8b:29:f5:a8:1a:cf:4b:cb:1d:9b:ec:b0:56:
92:0b:ef:98:c0:0e:53:df:ab:db:5e:d1:87:81:cc:b2:23:a7:
41:ce:6b:97:35:b8:20:c6:79:5b:2b:72:91:fe:01:f7:11:c1:
48:d3:7a:85:09:12:8c:08:63:46:d2:52:18:44:9d:20:ea:61:
27:04:fa:21:47:61:65:c4:b3:42:b2:6b:43:72:d8:14:f1:eb:
27:7a:a0:d3:68:08:6a:f7:89:31:19:a6:f3:26:bc:08:88:24:
5c:0f:53:6e:80:fb:c2:e0:ac:36:8e:12:8f:7c:2f:5c:6e:a6:
d2:83:b4:8d:d8:1e:4d:9c:6b:e1:4a:6e:65:f3:ab:99:cd:cc:
47:54:14:f3:93:10:d0:01:61:de:9c:44:54:7f:3e:67:44:4f:
12:d6:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:04:54 2025 by rpki-client