Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/r4jdXYm2Ym-VDAIsE4Qe7aCLBso.roa
File: r4jdXYm2Ym-VDAIsE4Qe7aCLBso.roa (raw, json)
Hash identifier: FwhdeGBOOJmeZuiaIxc0/kIcjQW+ndW3732g8uppShw=
Subject key identifier: AF:88:DD:5D:89:B6:62:6F:95:0C:02:2C:13:84:1E:ED:A0:8B:06:CA
Certificate issuer: /CN=948956c1c6769f42d60403de1319bf463454a0d6
Certificate serial: 01942747003BAFDDD1BFA66E7DCE7F880020
Authority key identifier: 94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/r4jdXYm2Ym-VDAIsE4Qe7aCLBso.roa
Signing time: Thu 02 Jan 2025 13:49:12 +0000
ROA not before: Thu 02 Jan 2025 13:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197900
IP address blocks: 2001:67c:60c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:00:3b:af:dd:d1:bf:a6:6e:7d:ce:7f:88:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948956c1c6769f42d60403de1319bf463454a0d6
Validity
Not Before: Jan 2 13:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af88dd5d89b6626f950c022c13841eeda08b06ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:88:da:ae:31:ba:ef:4b:2a:d6:55:9c:a3:
a1:4b:32:a7:22:53:02:65:b1:7b:bb:41:13:f1:fa:
20:95:8a:85:12:25:a9:a3:76:e0:fb:3a:2e:d1:39:
86:1e:66:30:9f:57:91:0f:ec:9a:14:3e:5f:99:11:
e4:6a:12:43:1c:a7:3d:25:d1:a0:ff:30:79:eb:aa:
58:27:80:4d:ef:e9:01:6a:3e:a6:1a:26:e2:90:11:
49:12:2c:d4:ad:d4:c4:f2:d3:44:96:5d:3b:ac:95:
c5:d0:4e:fa:38:1c:e9:0e:c9:87:bb:ca:30:f8:a0:
d5:65:75:2c:1d:ae:dc:fd:e8:cf:48:2d:df:7b:74:
8b:d6:ab:1f:63:9e:e0:16:ac:29:b3:39:fc:de:fb:
93:65:c8:ba:8c:48:d7:c2:68:1f:58:e7:f0:5e:42:
72:a5:da:1e:e1:58:93:a2:ed:70:39:28:fe:d0:f8:
43:e4:91:d2:60:02:83:03:79:d1:29:3b:45:44:f8:
ff:20:e5:bd:3b:90:e6:aa:5d:4a:8a:4b:44:31:c6:
0f:03:1b:c1:0b:02:29:82:c0:3a:a2:fb:32:e5:a8:
64:37:d3:7e:5a:73:22:b1:fe:58:51:0e:7b:d7:17:
76:77:55:87:73:b5:00:e0:01:df:f2:dd:9e:52:a3:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:DD:5D:89:B6:62:6F:95:0C:02:2C:13:84:1E:ED:A0:8B:06:CA
X509v3 Authority Key Identifier:
keyid:94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/r4jdXYm2Ym-VDAIsE4Qe7aCLBso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:60c::/48
Signature Algorithm: sha256WithRSAEncryption
86:f4:89:36:5a:9e:88:c7:29:30:d4:a7:19:ee:88:4e:c6:42:
39:67:85:ce:9b:0f:72:40:10:ee:e4:28:1c:a5:3d:6e:70:fa:
e4:55:3c:ef:c7:41:1e:c2:aa:b8:98:e2:31:1e:45:f6:ab:9e:
f3:9c:76:76:41:28:de:35:8c:cb:9b:01:50:41:0e:6c:29:63:
2b:22:ff:42:46:49:18:d4:86:9f:db:84:ec:68:29:05:ab:88:
c2:55:26:cb:42:97:b7:e5:af:66:58:66:9f:8c:9c:d4:5e:06:
0d:41:4b:f6:e1:e2:82:d2:0b:a7:43:2a:cf:f8:1c:6b:6e:38:
01:4c:15:1e:46:07:26:fd:d7:06:7c:fc:87:cc:a1:1f:78:71:
3f:f7:9d:68:2b:7f:1e:1e:f7:a6:dc:8b:a9:00:b0:30:98:f9:
a8:db:ab:10:26:fb:d1:f3:78:87:5d:ce:b3:c1:8c:e5:29:ac:
18:ec:ed:e8:a5:a3:47:b7:6d:b4:69:76:ab:eb:d4:a9:55:18:
85:78:75:73:ed:17:31:33:ff:32:e9:41:4f:a0:08:e9:0b:ee:
2f:66:f4:f9:cb:16:0a:e6:6c:ba:d7:5f:ee:89:db:8d:09:8a:
4e:92:3c:c9:4c:26:09:fd:01:b1:a5:a2:26:08:5b:21:52:66:
42:64:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:26 2025 by rpki-client