Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa
File: dmKRtNVh3XeXRjo4YQRI83idcEg.roa (raw, json)
Hash identifier: FVjd4U/3t1mYlHNCLv28PYeVcBRFmaKzm3VfPkAbXLc=
Subject key identifier: 76:62:91:B4:D5:61:DD:77:97:46:3A:38:61:04:48:F3:78:9D:70:48
Certificate issuer: /CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Certificate serial: 01856E666362924618604E05321DB92444A5
Authority key identifier: 0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa
Signing time: Sun 01 Jan 2023 17:34:41 +0000
ROA not before: Sun 01 Jan 2023 17:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212966
IP address blocks: 2001:67c:2480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:63:62:92:46:18:60:4e:05:32:1d:b9:24:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Validity
Not Before: Jan 1 17:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=766291b4d561dd7797463a38610448f3789d7048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:58:b6:b7:84:58:c5:d9:b9:f7:72:52:ff:1d:
17:11:cf:2c:a5:39:ee:74:b7:21:3b:67:ae:fc:a5:
6e:ca:49:45:4e:50:ed:d1:ae:3b:95:7f:40:e8:28:
f1:43:9f:d9:e4:93:b1:29:57:66:f0:1a:ba:c0:c7:
bc:ef:8c:fd:69:f8:ad:65:64:c6:f8:50:09:dc:64:
28:84:11:52:64:81:57:c1:43:8b:98:d0:3c:b4:1a:
d6:7f:65:50:56:c7:ce:82:27:f6:d0:7b:ba:f0:87:
dc:75:cf:c0:f1:e6:47:f8:4f:74:c4:7c:40:97:8c:
a7:c4:12:f2:df:b8:91:99:21:83:2f:a6:3d:fd:ce:
f9:13:87:d3:f3:27:85:4d:ac:f3:23:b0:5f:46:e0:
ae:93:6a:bc:a0:12:9a:0a:aa:ec:6a:ce:17:a8:aa:
e1:37:a8:0a:42:c6:57:cd:29:96:be:31:f1:35:78:
98:db:63:f4:b1:77:6b:fe:02:fb:5f:18:c4:59:98:
88:97:10:c2:cb:94:0c:38:72:f7:fd:ee:4f:d6:f7:
9f:64:4a:b1:c4:1f:af:7c:2f:d4:55:bb:32:e1:69:
ed:64:51:f2:72:2a:da:04:ca:f5:aa:97:ac:7c:8e:
d6:2a:b2:59:a3:4a:cb:72:d6:64:0c:ae:4d:12:9b:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:91:B4:D5:61:DD:77:97:46:3A:38:61:04:48:F3:78:9D:70:48
X509v3 Authority Key Identifier:
keyid:0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2480::/48
Signature Algorithm: sha256WithRSAEncryption
35:6f:53:83:a4:bf:49:d1:cb:69:8d:ff:f0:fe:15:17:7e:26:
a8:9e:e8:80:44:09:0e:25:dc:7b:96:c3:ea:12:41:3d:60:3a:
4a:6a:e6:45:78:31:f4:4e:99:49:73:c6:4d:b8:1a:fc:48:1a:
46:e4:10:3a:4b:48:90:f8:d9:08:fb:bd:a7:60:62:99:3a:9b:
8b:74:58:24:e5:c2:cd:3a:e7:a6:0d:11:bc:3a:aa:6f:12:bf:
2a:95:b1:6d:14:fb:5d:4b:74:1c:57:76:7d:f3:f8:d3:17:fe:
ed:09:27:37:4f:a5:c6:26:13:80:14:d0:1e:71:0e:cb:b5:f0:
68:9a:07:8c:a7:41:13:88:e0:0c:5c:eb:4d:fb:e5:52:b6:82:
05:a1:c1:b1:8c:dd:c5:ce:3c:9f:5e:fb:b4:a6:65:0f:e2:18:
e3:ce:13:c6:66:c0:cc:42:7b:76:69:4a:0e:95:3b:4b:41:3c:
8c:10:de:fc:a7:63:17:6b:8b:8c:52:74:32:3f:72:2b:31:c7:
41:7f:10:fb:ce:4c:21:3e:02:73:b5:77:0d:51:48:13:03:40:
e1:c2:ce:06:67:04:0f:82:d1:f3:da:8f:2a:ed:0e:83:d3:f5:
67:96:9c:84:2c:4f:24:06:43:1b:ec:42:8f:aa:fc:4c:b9:df:
4b:b3:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:04 2025 by rpki-client