Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/e-faYsu_q8JpVrdQYQcLj8wnjok.roa
File: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (raw, json)
Hash identifier: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=
Subject key identifier: 7B:E7:DA:62:CB:BF:AB:C2:69:56:B7:50:61:07:0B:8F:CC:27:8E:89
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 019423D71B77D72813CC675E4EA2A936206B
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/e-faYsu_q8JpVrdQYQcLj8wnjok.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204003
IP address blocks: 2001:67c:20ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1b:77:d7:28:13:cc:67:5e:4e:a2:a9:36:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be7da62cbbfabc26956b75061070b8fcc278e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:dc:74:07:b2:0b:d7:f0:96:03:ba:3f:94:
71:a3:8b:aa:c4:bf:69:2c:8a:87:21:87:6c:51:82:
40:41:5b:b1:b9:93:f1:7a:7c:27:19:36:18:ec:0c:
e5:60:25:e2:eb:2a:5b:68:de:c4:2f:8a:ab:d5:a3:
d3:db:79:ac:24:b9:15:a1:c5:ca:2e:8f:dc:c9:a8:
47:96:a1:9a:c8:26:a1:58:de:10:04:4b:ac:bf:27:
2a:c8:a7:de:5c:38:ee:b1:ba:63:e4:69:7a:a3:26:
8c:8a:a5:8f:c3:74:b1:b8:d3:ec:1c:35:e9:21:cd:
9d:87:27:dd:03:dd:2f:b1:a8:a3:56:16:76:36:e1:
d8:94:23:c1:a5:97:97:6e:e3:b2:d4:c9:0e:c9:62:
a0:c5:dc:12:df:22:80:11:9e:fa:9a:e7:16:d0:47:
0c:9f:6a:aa:7f:0f:da:82:14:0f:5b:f7:43:da:d7:
71:66:31:68:47:20:89:83:69:96:8b:63:db:5c:a5:
90:0f:5b:3b:b2:42:dc:43:ae:17:24:a7:73:1d:34:
ca:bb:bf:49:b0:90:98:65:74:e1:58:8d:4d:90:63:
e4:ba:bf:a6:0a:31:14:a0:a9:0a:2d:14:04:b0:11:
9e:1f:38:c6:64:61:51:29:e3:d0:94:5a:d5:91:25:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:DA:62:CB:BF:AB:C2:69:56:B7:50:61:07:0B:8F:CC:27:8E:89
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/e-faYsu_q8JpVrdQYQcLj8wnjok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:20ec::/48
Signature Algorithm: sha256WithRSAEncryption
59:9d:f9:40:7c:97:f0:f7:89:a3:08:c9:c3:1c:3a:63:43:97:
99:66:63:92:14:d1:6f:a8:bb:b1:96:5d:78:af:96:81:60:db:
71:d9:c2:9d:87:7c:5d:3b:85:2b:f1:97:6a:1e:c8:ab:48:8e:
e7:8d:f0:0c:33:d4:2a:7c:26:5f:91:1f:b1:6e:a3:8f:f4:f3:
8a:ff:f6:39:8b:2d:80:64:c1:90:dc:58:53:82:3d:ae:c5:c4:
4e:13:e9:6f:a1:28:d8:5c:8b:a0:4e:6f:a3:3f:47:c9:dd:da:
93:63:c2:04:99:49:a8:c4:9f:75:a0:02:25:66:33:61:a2:30:
c3:a5:55:fe:64:df:0b:2d:77:3a:5f:52:0d:12:e9:01:b5:56:
9b:01:6a:c1:9b:9c:ff:73:7a:45:a9:57:57:ae:b4:60:d6:99:
dc:5f:80:f0:b7:69:d1:a6:3c:35:1f:5d:2a:71:69:ea:90:c2:
ba:33:dc:8c:56:13:35:0f:31:c2:1f:11:38:95:41:e4:ee:a1:
7d:88:a3:1f:be:7e:96:3a:13:a3:ce:c3:cd:8d:f6:74:d1:31:
b7:89:20:f5:b6:0d:4f:eb:ef:f2:6f:94:4c:44:5d:33:23:19:
34:55:50:4c:9c:84:2f:5f:ed:31:75:f0:d6:5a:25:96:dc:23:
bd:50:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:22 2025 by rpki-client