Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/HOox3rDBut2OOcB9IHivYOxsS8c.roa
File: HOox3rDBut2OOcB9IHivYOxsS8c.roa (raw, json)
Hash identifier: ZpQi3BXTXkEvdPp0kUNsP4vk2jEdesCivTX5QwEpkzU=
Subject key identifier: 1C:EA:31:DE:B0:C1:BA:DD:8E:39:C0:7D:20:78:AF:60:EC:6C:4B:C7
Certificate issuer: /CN=83cb09141daebb3202d879a56031ee2fc30cd312
Certificate serial: 018571FA075E8A34CEA9AC7507351AAEA748
Authority key identifier: 83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/HOox3rDBut2OOcB9IHivYOxsS8c.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208122
IP address blocks: 2001:67c:2d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:07:5e:8a:34:ce:a9:ac:75:07:35:1a:ae:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb09141daebb3202d879a56031ee2fc30cd312
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cea31deb0c1badd8e39c07d2078af60ec6c4bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:d8:10:39:f8:f4:91:14:94:d9:ed:f1:d1:
39:02:fa:e6:58:a8:c5:93:2d:68:6c:14:dc:78:4b:
8c:86:53:27:0f:f1:6f:83:64:28:16:bd:6b:72:52:
0b:8b:62:76:1e:cf:da:42:60:ac:6d:4d:09:14:61:
23:ee:60:2a:e2:f8:74:86:68:fd:6e:d6:b0:ba:0c:
7b:18:7a:95:b6:c0:be:dd:28:b3:c1:65:91:c3:37:
fa:48:e8:b5:0c:87:25:9f:75:49:62:84:6c:40:a2:
45:34:2d:4d:01:d0:31:65:d4:07:7b:3c:d0:4a:38:
b7:3b:1f:a8:24:1b:3e:17:24:f5:8c:0e:39:df:cb:
a9:dd:94:f9:44:17:87:dc:13:94:e3:9d:11:78:d5:
b2:c2:91:de:bd:fd:6f:25:86:1a:9a:cd:ef:6f:59:
a6:83:a1:41:cb:7b:2d:c5:b3:e6:7e:2e:57:ed:d2:
d9:af:7c:f2:b6:49:98:6d:3d:65:23:95:42:54:47:
9d:6b:9b:98:ec:40:3b:3a:0b:29:5b:22:b3:59:f4:
15:ed:ba:f9:02:8e:79:b5:11:bf:c7:8d:90:6f:7f:
4d:c5:ad:e4:62:b7:47:7f:d5:fc:1c:14:03:48:61:
7e:d6:83:9e:5a:87:58:19:aa:3f:85:ec:4f:2d:2a:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:31:DE:B0:C1:BA:DD:8E:39:C0:7D:20:78:AF:60:EC:6C:4B:C7
X509v3 Authority Key Identifier:
keyid:83:CB:09:14:1D:AE:BB:32:02:D8:79:A5:60:31:EE:2F:C3:0C:D3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8sJFB2uuzIC2HmlYDHuL8MM0xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/HOox3rDBut2OOcB9IHivYOxsS8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/25602f-5fd8-47e8-8b50-427116c8588d/1/g8sJFB2uuzIC2HmlYDHuL8MM0xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d4::/48
Signature Algorithm: sha256WithRSAEncryption
39:8b:5b:ae:18:20:31:66:f8:69:3f:12:37:45:54:3e:97:9d:
b2:7b:f7:e7:f6:73:b7:a3:b2:76:4c:47:43:4f:8f:71:dc:9c:
45:18:93:a5:0c:33:7f:ea:7b:a2:48:29:6e:5c:5d:18:40:c2:
25:c2:07:c5:cf:fb:b0:6f:7b:2b:82:6d:82:9f:e3:8e:37:74:
24:e9:e7:cc:98:f7:3a:f1:55:9c:77:95:fd:d2:6c:12:eb:ac:
9e:c7:9b:7d:c3:7c:0c:f3:9f:ac:1a:4e:9f:78:5e:a3:69:9c:
67:bc:b4:d5:f9:bb:41:03:37:b0:25:49:7a:b2:1b:57:e9:e5:
00:40:c6:ce:3e:19:e2:70:f3:65:1b:39:3e:cd:ab:df:bd:bc:
00:4a:0c:55:cd:27:c9:82:ff:c5:86:c7:14:82:c7:52:b2:58:
78:24:d5:af:20:ab:bc:71:c1:a4:b3:61:a4:d7:db:29:9a:75:
db:d2:01:a7:7a:22:b3:41:ad:a9:9d:2b:2e:c1:d7:4d:cc:da:
05:c1:a0:b9:38:7d:55:c0:f6:92:f2:00:f5:b1:94:30:83:37:
31:40:44:44:19:84:92:64:b3:08:25:84:cc:94:0a:9c:b9:8d:
ea:8a:4f:ab:3d:26:c5:72:b0:7f:d0:3d:b6:2c:93:c7:25:1f:
ed:9d:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:28 2025 by rpki-client