Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/pFur-kbIHPtMOLrHz0LwLOKyGnk.roa
File: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (raw, json)
Hash identifier: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=
Subject key identifier: A4:5B:AB:FA:46:C8:1C:FB:4C:38:BA:C7:CF:42:F0:2C:E2:B2:1A:79
Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial: 019423D6DE3B7EA0780DEAEF5527D2598B47
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/pFur-kbIHPtMOLrHz0LwLOKyGnk.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205740
IP address blocks: 2001:67c:c18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:de:3b:7e:a0:78:0d:ea:ef:55:27:d2:59:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a45babfa46c81cfb4c38bac7cf42f02ce2b21a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:51:41:72:e2:40:8f:a5:61:3f:94:a4:8e:
bf:bb:dc:a4:19:c5:13:cb:88:fc:7d:0c:60:07:77:
35:09:db:da:d6:d2:f4:82:8b:76:1f:db:c0:c3:ea:
5a:db:e1:4c:49:cf:66:d5:08:58:f8:05:61:bb:4e:
ed:a7:37:d9:f5:30:05:c1:94:a0:6e:cd:58:ca:2c:
ec:df:94:ad:d8:bf:ad:9f:6f:51:cc:b4:a2:ee:de:
a7:e2:8e:3d:02:07:d4:1a:f4:dd:2f:93:03:85:04:
5d:fe:27:2e:2f:6e:50:b8:23:6c:21:c6:7e:0a:0d:
cc:6d:b3:13:ff:9a:b7:8e:f8:a4:2d:9f:12:b8:54:
e0:b8:8f:26:85:58:dd:ce:8e:41:f8:e4:4a:c6:61:
e4:04:57:68:cc:eb:4a:c7:a9:21:f0:53:9d:38:02:
59:78:fb:7c:e0:aa:11:9e:af:81:d2:5d:80:b8:15:
27:2e:dd:05:b6:9a:fe:31:37:9c:3b:4d:a5:a1:ff:
3d:03:34:c9:b3:15:b4:4d:fb:1b:0f:95:9b:a3:ec:
22:5e:47:5a:ab:b5:36:a9:d3:3f:ec:c7:9c:a6:13:
22:34:5b:ad:5e:d5:4a:8e:4d:7d:8e:65:6b:fc:d0:
fb:4b:a7:37:0c:5b:91:32:f2:c5:2e:4d:af:a9:2a:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:AB:FA:46:C8:1C:FB:4C:38:BA:C7:CF:42:F0:2C:E2:B2:1A:79
X509v3 Authority Key Identifier:
keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/pFur-kbIHPtMOLrHz0LwLOKyGnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c18::/48
Signature Algorithm: sha256WithRSAEncryption
95:0c:0b:20:99:6d:8c:5f:73:3e:60:99:ab:f4:94:1a:84:43:
6e:dc:5a:b3:c6:52:c8:2a:34:56:bc:96:6d:e1:50:8b:fe:7e:
8e:3b:89:f9:9d:2a:1c:f5:75:0c:4f:9c:12:52:ae:82:53:9a:
fc:55:23:64:4c:48:38:6d:2e:9d:89:0c:d7:37:fa:90:3b:52:
cf:54:39:cd:38:f2:f9:dc:98:de:57:35:c4:5e:c4:f5:29:3d:
79:31:29:96:47:90:d4:e1:3d:f4:52:e6:27:e7:f2:68:45:ea:
e3:3d:ea:c4:97:0d:02:db:7b:f9:0b:fc:34:05:00:53:a0:9f:
80:dd:b9:d8:9a:ac:21:1e:f2:24:a9:a7:43:f0:7a:74:76:8c:
d3:10:b7:a0:e6:23:6d:e1:0a:06:7e:75:08:bd:8f:26:57:a7:
0d:b3:c5:4e:d3:28:1e:b9:78:10:e1:b4:38:cb:2f:da:65:11:
a5:b7:6b:0d:4b:8a:45:e6:bd:13:72:48:33:37:88:8a:6d:10:
e2:4b:e1:0a:03:90:f2:6a:9d:21:4d:fb:a4:09:37:90:97:05:
de:1e:74:88:6d:dc:90:93:34:11:0c:84:f5:b4:2a:40:07:b1:
1a:b5:9c:74:32:2c:47:07:41:c7:4e:ba:95:2e:b7:fb:83:49:
9a:fc:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:21 2025 by rpki-client