Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/3e5f9LPZMhxR4usfQI5sh5ftEjc.roa
File: 3e5f9LPZMhxR4usfQI5sh5ftEjc.roa (raw, json)
Hash identifier: kYLJGChZi/5Rc9kxj/MKuIXFqtMmFptf3zy0y5PKAS4=
Subject key identifier: DD:EE:5F:F4:B3:D9:32:1C:51:E2:EB:1F:40:8E:6C:87:97:ED:12:37
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 0D2BFD2A
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/3e5f9LPZMhxR4usfQI5sh5ftEjc.roa
Signing time: Sat 01 Jan 2022 14:05:21 +0000
ROA not before: Sat 01 Jan 2022 14:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204926
IP address blocks: 2001:678:58c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220986666 (0xd2bfd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jan 1 14:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddee5ff4b3d9321c51e2eb1f408e6c8797ed1237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:1d:09:34:dc:64:6e:c8:c9:5c:12:c5:4e:
1e:25:07:e3:b1:33:fe:8d:30:93:76:61:e0:51:b9:
f2:00:c1:3a:e3:db:1f:9d:83:0a:52:9e:7c:74:eb:
1a:43:1e:0b:6b:34:c9:fe:9b:05:71:da:ac:cf:e2:
82:cc:a3:be:9c:8b:8f:91:2d:e7:3c:9f:68:ac:27:
4f:25:18:c5:1f:ea:c6:d8:d0:7b:27:2e:77:43:5f:
ab:8f:c7:36:1d:36:2b:7c:7a:d2:c1:14:6a:35:48:
3e:4c:b5:ef:ed:eb:be:99:56:2a:c5:c5:92:46:9a:
2d:78:57:72:67:8d:6a:e0:65:00:e3:70:94:6e:07:
7f:de:75:1c:ee:33:b8:8e:32:4e:cb:a0:12:28:b6:
5d:53:53:6a:30:e5:1a:20:a6:67:9d:bc:b1:a7:23:
41:5c:06:c7:f9:11:07:f8:4d:30:de:cb:ce:40:cd:
0a:f0:aa:4f:6c:f2:99:e1:80:2e:43:9d:5c:67:16:
3d:3e:21:31:18:83:04:9d:a5:41:6f:1d:51:d1:d1:
b8:b1:4d:13:76:da:63:3e:af:2d:02:56:cd:bb:90:
96:f2:df:6f:ed:79:c9:fd:23:26:c8:d2:6f:95:54:
86:f8:22:35:02:cd:73:1a:5f:14:8c:cf:e0:50:2b:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:5F:F4:B3:D9:32:1C:51:E2:EB:1F:40:8E:6C:87:97:ED:12:37
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/3e5f9LPZMhxR4usfQI5sh5ftEjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:58c::/48
Signature Algorithm: sha256WithRSAEncryption
5f:78:23:a2:52:6c:6b:cf:b0:db:71:e0:1c:f0:0f:3b:d0:79:
3a:78:cb:de:22:fb:5d:36:e6:be:f1:08:df:86:02:df:c1:c0:
f9:92:f9:7a:63:a3:44:02:01:77:55:07:0a:87:a5:8a:68:fe:
8c:d7:6e:15:de:0f:0d:23:e9:20:a4:e6:f4:dd:96:12:2b:7a:
bf:2b:0e:f1:40:b6:51:17:0c:af:2f:f1:c8:9b:96:08:8b:16:
60:72:35:2f:6a:ec:7b:b1:63:d5:5b:a6:86:6b:4e:df:bc:f1:
7d:1e:55:75:f1:d2:1f:03:a7:f6:ec:25:58:78:5f:06:fc:c2:
68:e1:d8:b3:ad:5f:67:25:6b:0d:af:c2:c9:85:05:06:82:71:
ba:92:ff:74:71:6d:a6:e7:78:67:74:d9:7e:71:d4:b7:bd:58:
84:c9:e7:b5:26:9a:b8:2c:f6:72:1d:13:4d:38:44:8c:fb:e6:
ae:a4:09:96:a6:a6:d5:18:bd:15:9d:00:b4:cc:8e:50:22:b4:
dd:65:16:50:15:57:be:31:f6:2e:9a:16:99:7a:a6:92:9e:9c:
0a:e6:2a:e9:a1:c5:89:18:70:ce:84:22:ab:c2:3d:89:e0:88:
54:a9:37:fa:0c:f0:5d:bb:ff:c1:69:79:03:19:10:85:01:01:
b2:c4:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:48 2025 by rpki-client