Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/56R-ojzcBSh423eRcYF_e5WPBIk.roa
File: 56R-ojzcBSh423eRcYF_e5WPBIk.roa (raw, json)
Hash identifier: hzIMA5Ry9D5jvlY/Qw5PKpRuKhK4TzWxJGGsjS5AWRw=
Subject key identifier: E7:A4:7E:A2:3C:DC:05:28:78:DB:77:91:71:81:7F:7B:95:8F:04:89
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C27A80066C3B850F1D7CD6FD5D32
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/56R-ojzcBSh423eRcYF_e5WPBIk.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49183
IP address blocks: 2001:146b::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c2:7a:80:06:6c:3b:85:0f:1d:7c:d6:fd:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a47ea23cdc052878db779171817f7b958f0489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:c9:b5:41:e4:fb:d1:e2:1a:44:0f:de:b7:
9e:ed:a9:3d:3d:a8:13:bb:5b:2b:78:74:aa:9b:71:
f7:97:f1:f7:2d:b7:ed:4a:91:a9:f2:c5:1c:12:d2:
43:76:b4:50:b8:78:4e:5a:5a:1c:1b:fc:06:ec:a1:
fe:06:44:0e:ac:4d:5c:46:d4:ed:cf:27:63:75:8a:
83:b2:04:30:b9:1b:9a:b4:d6:44:f7:ae:8e:10:cd:
3e:3e:fe:3a:1f:61:54:4e:96:75:10:8a:55:2b:37:
49:d7:72:2f:b0:72:86:08:60:84:14:f3:98:d1:21:
03:0c:ce:6a:45:da:3d:fd:ff:e7:7b:0b:7e:8f:71:
99:d5:cc:8e:41:83:fb:44:6f:4c:90:0a:5a:ff:3e:
5d:ec:1e:ca:f3:7d:65:c7:93:df:3b:0c:f2:6f:db:
44:e3:43:fe:4f:51:20:29:dc:fd:c8:89:f0:56:9e:
49:2d:40:93:af:d3:7f:f8:0a:74:80:d5:06:02:d9:
b7:81:a4:9a:17:c4:b7:04:e0:bb:24:a8:41:4c:77:
00:be:8d:4e:e2:44:16:b5:5b:59:b8:18:d4:30:1d:
bc:35:15:96:48:ca:02:91:4d:53:f9:7d:7c:b4:7e:
5c:88:90:e2:64:98:73:f6:16:12:c5:7b:ba:10:10:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:7E:A2:3C:DC:05:28:78:DB:77:91:71:81:7F:7B:95:8F:04:89
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/56R-ojzcBSh423eRcYF_e5WPBIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:146b::/32
Signature Algorithm: sha256WithRSAEncryption
12:b3:43:dd:86:fc:f0:bb:17:e9:eb:89:7a:7f:18:5a:80:7b:
cc:eb:f0:dc:fc:77:6d:72:8f:f8:a4:f9:f6:73:32:a8:1b:5a:
26:8d:5d:b6:d6:ce:c5:75:3d:79:82:70:31:34:9f:a5:a6:5c:
e1:32:f4:2f:a9:2d:94:16:bb:96:2a:f2:47:d3:37:7c:08:53:
0d:5d:25:52:60:c2:78:81:14:a0:71:19:9a:e6:3f:42:74:aa:
70:8e:00:c7:85:8b:77:9a:8f:c2:00:5e:bc:b6:8f:e1:3d:8d:
43:e4:5a:38:2a:1f:1b:6d:99:20:11:f9:ba:f1:40:2f:de:68:
27:80:3b:37:3e:a3:3b:b3:78:7f:8c:d5:d9:0a:bf:37:92:04:
a9:4b:80:df:8e:73:99:84:6a:2f:20:a4:84:51:8c:b7:79:b1:
b7:6e:b6:38:25:22:24:0e:53:80:55:5a:00:8e:9e:4a:c5:b5:
82:8b:22:1e:a0:ef:d5:e4:e8:0c:c0:89:4a:34:d6:ce:cb:68:
c4:22:4b:24:82:78:4c:2f:f2:e9:da:4c:2e:20:0d:d7:24:3b:
1e:f7:e8:f3:e5:e0:a2:75:2b:86:4f:75:48:21:6d:8f:1a:19:
a1:a7:f4:1b:6f:a9:d9:c7:61:e1:1e:b5:89:70:dd:81:fa:50:
35:c7:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:37 2025 by rpki-client