Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa
File: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (raw, json)
Hash identifier: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=
Subject key identifier: 75:45:E2:65:68:04:33:38:30:E6:F1:59:F2:A0:DA:1F:A5:E6:95:85
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 0194266C39DC633504D4DB716A550C9CF3C4
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64404
IP address blocks: 2001:678:814::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:dc:63:35:04:d4:db:71:6a:55:0c:9c:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7545e2656804333830e6f159f2a0da1fa5e69585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:3e:c3:6b:8f:76:22:22:5f:40:93:76:41:
da:a6:4c:87:3e:4e:eb:31:0d:f0:65:d1:60:d5:50:
41:56:90:a6:c7:52:e1:85:a7:86:d4:49:ef:3c:ee:
51:56:eb:c7:27:14:67:4c:c7:98:52:2b:a0:47:2f:
1e:4d:3e:6e:d9:6c:04:74:25:69:61:9d:d9:47:5e:
b6:62:b4:d6:e7:ea:a1:45:50:3f:f0:29:e7:7b:53:
46:b8:e3:6a:f1:94:e5:89:a3:84:65:df:51:eb:79:
1f:59:9a:9d:f1:f1:4b:fd:78:01:25:d7:70:33:dc:
86:48:f8:88:76:e1:de:ea:91:8d:fd:9d:4c:70:fb:
81:2e:7e:c5:0d:4b:35:63:8a:41:4f:4d:70:09:4a:
ab:10:b2:d4:b7:30:1c:77:11:ee:c8:3c:83:71:6d:
3a:8a:70:49:cb:f7:fc:20:e4:d3:ee:b2:91:29:5a:
da:b9:d7:01:c8:6a:2b:fb:b7:ec:bc:3e:30:11:87:
9d:9c:aa:d9:55:18:1b:b0:77:99:44:f6:13:7b:21:
04:d0:99:23:9a:8e:7c:af:ea:54:dd:29:11:ee:ae:
99:18:d8:c1:f4:70:a0:68:5e:e8:45:f3:a6:d6:0c:
81:3a:a7:2f:99:b0:96:77:06:33:1b:97:1a:fb:0f:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:E2:65:68:04:33:38:30:E6:F1:59:F2:A0:DA:1F:A5:E6:95:85
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:814::/48
Signature Algorithm: sha256WithRSAEncryption
34:27:cd:25:53:21:59:1c:e6:96:84:da:ea:e7:9c:ed:d6:c8:
44:b9:28:25:4a:1e:d1:ed:36:d2:e5:08:8a:d5:10:a3:41:77:
c8:4e:ac:49:2b:ea:a7:72:62:e5:dc:90:3e:50:de:a5:bf:1d:
cd:78:5c:5d:94:b6:b0:0d:cf:ef:21:bd:79:eb:0c:d0:d3:5b:
d7:7a:56:28:92:67:70:56:7e:a9:72:7d:f5:a2:d0:6b:37:34:
4f:ed:78:1c:ef:41:d5:b9:ed:0c:b9:e8:b6:d6:24:d9:1d:f6:
83:4c:e4:83:8e:cc:2a:3e:eb:8d:b2:a0:53:f0:8e:dc:bb:9c:
79:35:cc:8f:0a:19:17:b5:d6:ff:30:f2:80:eb:68:7a:dc:74:
41:d8:1f:07:e4:ce:4d:4b:78:65:0c:1d:f0:21:60:e7:53:3f:
f6:a1:8a:ef:4d:a2:44:e8:20:63:37:8d:cc:ac:47:a2:cf:49:
4b:22:ea:89:71:80:40:be:7f:96:5f:d3:f9:32:9d:a1:ca:56:
f6:36:69:25:ef:9f:f3:98:d2:41:80:b8:a6:36:15:d8:58:15:
a5:7e:27:25:1a:f1:6d:63:26:e9:2c:fc:e2:cb:5a:3e:a7:db:
f2:c6:88:17:b4:91:a7:59:7f:57:2f:b9:82:71:5d:d4:11:67:
ec:61:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:51 2025 by rpki-client