Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/ruh7qb3ZrGt8C1QluBg0EeugL4M.roa
File: ruh7qb3ZrGt8C1QluBg0EeugL4M.roa (raw, json)
Hash identifier: 7mk3SOkCnHD2HPi7ljRJ7jVg745TpAZ6eiaf7zAb0lU=
Subject key identifier: AE:E8:7B:A9:BD:D9:AC:6B:7C:0B:54:25:B8:18:34:11:EB:A0:2F:83
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018CC2DAED1AE69158E0DD8867317D1698E8
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/ruh7qb3ZrGt8C1QluBg0EeugL4M.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61169
IP address blocks: 2a03:b4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ed:1a:e6:91:58:e0:dd:88:67:31:7d:16:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aee87ba9bdd9ac6b7c0b5425b8183411eba02f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:ab:e7:8a:fe:a8:a6:3b:74:4b:b4:00:95:
00:e1:da:0f:67:84:da:3b:70:8a:9b:5a:c1:93:0a:
54:a3:84:f6:95:b4:03:07:aa:57:b6:7a:1b:c5:9c:
57:f9:9c:25:90:72:e8:70:8a:f8:78:ee:4c:44:bb:
82:54:9e:36:fe:a5:02:26:88:ff:8f:63:35:f1:f7:
36:e5:db:3f:94:2e:49:6c:8e:e1:70:7a:7d:37:d7:
77:52:ed:a4:a9:0f:66:39:6f:03:b8:5c:89:fe:b2:
93:7f:d7:31:63:47:99:24:5c:77:b2:dd:58:c1:e6:
c2:d3:20:4b:38:cc:b7:18:36:84:0e:5e:fa:dc:40:
c7:bc:b5:45:cc:bf:48:55:0e:48:84:bb:9d:49:59:
06:db:ef:4e:bb:6d:7c:1f:be:dc:ba:b5:9a:b2:f6:
4c:57:b6:0f:b2:44:a4:f8:ba:0c:e0:27:f2:b4:ee:
17:21:93:6f:02:ed:be:d0:c7:55:ee:8d:be:37:ea:
60:ee:d0:97:a9:12:de:56:b0:6e:be:11:70:30:61:
21:0e:ee:ff:e0:3a:f0:c9:fc:65:ec:68:66:d7:9e:
f9:47:93:2c:c8:43:61:99:75:09:29:ef:17:de:37:
5a:74:c3:ed:9d:11:76:f2:5b:d5:7b:12:87:c6:0a:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:7B:A9:BD:D9:AC:6B:7C:0B:54:25:B8:18:34:11:EB:A0:2F:83
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/ruh7qb3ZrGt8C1QluBg0EeugL4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:df:b5:fd:bb:44:7c:79:2a:e7:f2:06:e5:79:bc:6e:ff:8e:
c7:95:9d:fd:39:24:0c:a9:dd:a3:19:9b:b0:46:2c:a9:2c:a5:
9c:3b:6a:39:45:b7:8c:b6:e8:e0:bb:ae:33:00:cd:05:9a:22:
49:12:b9:b2:6c:ab:1a:fc:d0:58:58:b9:fa:71:a9:f3:d1:bf:
c3:37:ad:6d:84:4c:cb:56:d9:f1:28:44:25:30:0a:b2:94:d7:
32:9e:01:46:58:ee:a0:a6:84:99:a6:57:52:bf:e2:2d:52:9e:
51:5f:50:1b:21:9e:3a:cd:b3:fa:15:59:ce:8f:20:4b:15:e8:
6d:cd:68:8b:4f:a7:21:e7:0f:78:bb:30:90:fb:4a:90:5c:fa:
5b:cf:c6:a3:62:f5:20:25:01:dc:9c:bd:d4:24:bd:25:73:11:
e0:a5:2a:65:bc:93:e1:c0:c8:29:22:59:36:f2:a0:88:86:8d:
b6:32:1a:0c:ad:8e:42:03:ac:2f:7b:5a:f9:5d:be:3a:48:61:
56:99:48:e4:48:d9:e8:e7:88:57:42:fe:79:6c:06:3c:14:91:
0b:6a:1d:43:27:27:da:40:0e:bf:52:ce:f6:51:0a:99:0f:7e:
34:e1:79:a9:f5:c7:5d:40:a3:6c:f2:12:17:b4:61:ce:67:a2:
80:c7:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:16 2025 by rpki-client