Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa
File: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (raw, json)
Hash identifier: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=
Subject key identifier: FB:76:3E:E1:A8:56:9B:57:B3:B7:8D:F5:CC:26:06:38:15:32:42:FB
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019423D6B3CA295799CCF80B3F38FF9091A6
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211586
IP address blocks: 2001:678:f18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b3:ca:29:57:99:cc:f8:0b:3f:38:ff:90:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb763ee1a8569b57b3b78df5cc260638153242fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:a5:08:bc:7c:55:a3:23:e6:79:e7:33:92:
78:47:17:98:b5:ff:9e:bd:12:8f:1d:11:54:3a:6c:
f1:88:ba:04:d7:96:52:e4:05:f7:06:0b:5a:f6:c9:
02:9a:b8:94:cf:88:fa:e7:a6:ef:9b:c1:32:e4:86:
a8:fc:e6:5b:e1:a9:98:22:69:b0:5f:0d:a0:ef:f5:
3f:60:92:3e:10:e4:d3:18:06:b3:87:07:b5:9b:4f:
d6:a9:a7:32:69:f8:46:8f:5b:8f:25:5b:dd:09:0c:
ad:ac:c3:19:a3:94:b6:5c:75:89:e0:0e:f0:e2:c3:
1b:20:66:94:bd:82:dd:d9:8c:3a:65:f7:0f:05:d7:
8e:b6:52:e4:3f:99:66:7e:67:eb:d4:2e:af:c9:64:
a0:79:b5:4e:c7:f5:cc:02:7b:09:06:03:c8:bc:38:
b9:44:71:a7:dd:6e:20:ff:46:87:22:d7:2e:a9:95:
bf:7c:b9:87:5a:89:a2:cd:7d:de:0f:4d:88:95:25:
6f:75:d5:73:1b:f3:f1:26:f0:19:57:16:5e:e7:4b:
1e:2e:b5:87:0b:4f:1d:56:ee:2d:1c:d7:02:b1:ad:
44:6b:08:d7:6e:1d:7b:c0:b3:bf:23:66:1f:04:e3:
c4:3f:fd:27:3c:de:8b:5b:2e:10:08:52:27:3c:e5:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:3E:E1:A8:56:9B:57:B3:B7:8D:F5:CC:26:06:38:15:32:42:FB
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f18::/48
Signature Algorithm: sha256WithRSAEncryption
88:ac:85:e2:7a:ad:d9:38:81:a0:32:7b:66:0f:7f:e9:31:73:
29:6a:c3:96:42:2b:de:9c:42:51:a1:66:05:92:8a:5b:85:42:
62:99:ff:7d:d6:dd:eb:f3:40:d6:ac:ff:1c:88:71:71:a3:bc:
2d:1d:d8:5d:c9:a5:16:f1:93:8c:6a:2d:37:7b:c1:80:7d:1c:
f1:c6:71:39:8b:0c:f6:c6:60:9e:56:15:f7:2b:84:14:ad:c9:
8c:b3:31:dc:3b:e2:a4:ef:15:03:c6:6d:20:7a:3e:7d:97:48:
be:72:e9:52:3e:82:11:3a:ca:33:7b:2c:19:fb:c7:97:0d:13:
67:94:82:6f:63:48:98:0c:e4:49:e2:bb:fc:91:02:16:81:9e:
19:c5:d3:5e:11:c6:3c:f7:93:9e:bd:a6:26:e0:dd:dd:80:cc:
6b:14:6f:9b:be:dd:5f:78:db:3d:a9:bb:6e:36:06:f0:14:44:
10:46:a2:2d:85:8a:f6:4d:3b:42:ce:96:d5:c1:5b:d6:d0:eb:
c7:88:0f:6e:8b:1f:a9:ad:b8:77:d5:6d:dd:cd:0a:0e:99:e5:
04:5d:f2:07:53:4d:af:ec:0b:46:12:59:65:6e:68:70:ef:c5:
87:30:cb:05:26:d0:48:ae:b5:3f:f5:37:d2:70:98:a4:cd:85:
c0:f1:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:53 2025 by rpki-client