Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/J0NOecwJxDnn5NugGREZrawk-e0.roa
File: J0NOecwJxDnn5NugGREZrawk-e0.roa (raw, json)
Hash identifier: 7uv2ItV4EFv9yUmDktYF+XmxWEBOzOXQm0cFl/MtxZQ=
Subject key identifier: 27:43:4E:79:CC:09:C4:39:E7:E4:DB:A0:19:11:19:AD:AC:24:F9:ED
Certificate issuer: /CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Certificate serial: 049F82A3
Authority key identifier: 0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/J0NOecwJxDnn5NugGREZrawk-e0.roa
Signing time: Sat 01 Jan 2022 06:04:37 +0000
ROA not before: Sat 01 Jan 2022 06:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212966
IP address blocks: 2001:67c:2480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77562531 (0x49f82a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Validity
Not Before: Jan 1 06:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27434e79cc09c439e7e4dba0191119adac24f9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:44:5f:60:f3:75:28:94:25:b1:18:4d:b8:
86:a5:96:2b:44:7e:b3:32:e0:44:9a:ed:c7:48:96:
43:10:95:5a:a4:09:ec:04:ff:59:71:df:07:04:91:
00:ac:db:85:70:6e:26:f9:d4:74:35:1d:22:40:29:
26:52:ed:c9:6e:38:80:29:f0:9f:ae:16:88:1b:06:
07:47:cd:e5:08:37:1b:e4:11:31:2f:10:ca:7e:83:
7a:44:55:6a:ea:3b:c4:c7:55:19:f1:ea:24:33:a5:
20:a0:07:7f:f6:a9:1c:87:9b:48:19:40:69:80:79:
92:7c:98:eb:a5:86:02:d6:9a:ad:a9:57:5d:87:15:
9f:68:79:dc:f9:2b:87:6f:69:c4:f5:fe:f7:0b:51:
63:80:30:f2:0b:1e:5b:4a:bb:02:37:82:33:64:76:
ad:cc:f8:76:49:61:a0:94:c4:27:36:4d:15:d9:b4:
0a:4a:c0:f0:d2:cc:f0:ce:bc:ba:6a:e1:ad:66:72:
f5:eb:24:5f:a2:dd:48:b5:be:32:eb:eb:d8:50:fe:
3a:97:27:7f:4e:a3:c5:2f:35:3f:f6:30:54:48:b4:
f5:9f:9d:14:fe:3a:8b:47:ed:65:ae:47:19:c7:25:
9d:c1:a0:56:0f:ca:7b:d9:d5:82:7f:ec:2e:7d:bb:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:4E:79:CC:09:C4:39:E7:E4:DB:A0:19:11:19:AD:AC:24:F9:ED
X509v3 Authority Key Identifier:
keyid:0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/J0NOecwJxDnn5NugGREZrawk-e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2480::/48
Signature Algorithm: sha256WithRSAEncryption
89:6f:da:ae:c8:ef:9f:e4:ba:50:d3:b8:99:4c:f9:48:e5:86:
b4:96:0c:bb:9a:c4:08:b8:7e:f6:96:71:b1:a5:75:26:39:af:
89:ce:47:61:7f:77:e7:36:08:41:45:d9:78:1d:11:af:52:64:
26:77:bd:26:2e:52:9c:ff:e9:94:da:b1:18:30:3f:12:02:ae:
ed:8b:4c:83:71:76:50:bb:49:5f:b2:e6:cd:a8:cb:b5:de:0d:
1d:7e:39:f8:bb:bf:84:29:35:02:69:87:cd:0d:80:5f:f0:eb:
aa:25:b4:d1:04:f1:61:71:f4:cf:12:01:75:40:78:56:4b:db:
39:6d:ca:33:26:0b:a5:da:7b:e0:59:5c:c4:ec:33:54:ee:06:
5f:7e:88:a3:84:7f:0e:79:e1:f0:89:72:1e:4d:dc:0b:e9:ec:
13:52:22:8a:17:f8:e1:51:48:0d:ea:6f:a4:1e:e8:02:74:5d:
71:96:68:13:1c:18:82:06:1a:26:d6:8f:08:6b:61:46:64:2f:
1d:3c:82:e1:0e:4e:7d:a1:66:3c:5c:d4:d3:89:03:fa:bc:11:
0a:2c:7c:c6:33:e3:38:30:1e:48:4d:75:6d:e6:64:5a:4f:cd:
29:ed:0c:90:db:7c:9d:19:4c:d3:ef:5b:6f:0c:4e:18:a0:b7:
c7:63:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:28 2025 by rpki-client