Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/KVw6j0NjYgTCJRRDer8NmmB5Opo.roa
File: KVw6j0NjYgTCJRRDer8NmmB5Opo.roa (raw, json)
Hash identifier: enlxS/EvE5U9LhRas7/zihcTziO7CQvMt/ucJD8INuo=
Subject key identifier: 29:5C:3A:8F:43:63:62:04:C2:25:14:43:7A:BF:0D:9A:60:79:3A:9A
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 0185720355FC136FE4F85E768659E587B19C
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/KVw6j0NjYgTCJRRDer8NmmB5Opo.roa
Signing time: Mon 02 Jan 2023 10:24:59 +0000
ROA not before: Mon 02 Jan 2023 10:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61169
IP address blocks: 2a03:b4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:55:fc:13:6f:e4:f8:5e:76:86:59:e5:87:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 2 10:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295c3a8f43636204c22514437abf0d9a60793a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:7d:b1:7e:f7:ab:ed:3c:61:95:bc:24:bc:
a4:82:16:9a:f5:e6:62:ec:84:9b:b5:97:91:41:e0:
db:02:36:89:04:6d:d6:72:d3:e0:ce:e7:0a:6e:dd:
fb:68:7d:61:92:05:92:27:f7:63:29:e8:90:9c:4f:
48:6c:11:1e:b2:03:f9:e0:71:5e:1c:a2:2f:59:f2:
25:12:06:4a:34:3e:77:37:40:37:ea:e9:df:67:39:
63:ad:3c:2e:f9:83:26:be:2c:b6:ed:0e:72:19:03:
1e:74:98:50:70:4c:26:a1:c1:c4:4d:0a:30:ac:86:
d6:64:ff:97:03:b6:cb:4e:2c:bf:e1:0d:d2:fb:40:
ac:a3:3c:04:63:4e:8c:c2:12:af:2f:e2:ed:1e:cd:
e6:c5:82:ef:c4:27:19:69:c5:92:20:f3:74:70:11:
5d:d7:aa:c7:d3:80:07:4b:20:87:59:6f:51:2e:1c:
32:8b:b7:17:bb:3d:b2:f9:4d:40:05:44:fb:4f:d6:
85:50:a6:ca:88:4e:6a:f2:a7:aa:bf:3f:7a:6a:ec:
89:6a:b8:ac:71:68:ba:69:f4:99:29:7d:c8:db:55:
c9:02:7b:8b:31:92:96:a0:fa:5b:a1:f9:df:cf:13:
4e:3f:69:6b:73:60:06:fd:a2:0a:fa:ae:71:ae:30:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:3A:8F:43:63:62:04:C2:25:14:43:7A:BF:0D:9A:60:79:3A:9A
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/KVw6j0NjYgTCJRRDer8NmmB5Opo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:95:ed:0f:e2:c7:2e:96:88:4c:2a:56:13:49:42:cd:7c:9f:
1d:88:53:74:57:59:98:2d:ae:d7:6e:3b:af:89:ac:ec:92:b8:
91:c1:ce:f3:56:68:f2:83:a9:36:4a:09:f1:3f:40:fa:c8:a5:
af:aa:ba:f6:9c:92:49:02:65:37:ab:74:67:97:68:01:75:07:
27:b3:38:98:bf:25:14:12:76:a4:e6:40:b6:e5:74:93:a5:34:
6f:85:35:a7:e5:c9:9d:d3:65:56:a7:20:02:01:15:3a:0f:fd:
f1:0b:5f:a4:91:62:3a:db:bb:98:ed:90:62:a5:c5:0c:16:7d:
87:21:8f:4e:ad:ce:05:0d:8e:37:46:b7:91:16:f3:8e:6f:8e:
75:7b:64:cb:1f:65:c6:f4:2c:7e:f0:48:d5:d9:6d:e9:6b:b8:
da:8d:ee:31:05:b2:60:c6:f0:04:87:a7:62:d6:8e:8b:bd:60:
3b:04:c4:ec:87:41:af:23:c4:c6:a1:50:28:7b:f2:0c:40:85:
76:62:d9:a6:f4:05:41:94:97:2e:2c:cd:3f:60:05:3f:8e:4e:
f7:46:a7:95:de:aa:22:26:a3:16:76:32:d5:7c:37:c4:53:b0:
c6:a3:4b:27:cd:33:33:95:44:ec:14:c1:5f:8d:50:5a:63:87:
df:cd:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:45 2025 by rpki-client