Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa
File: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (raw, json)
Hash identifier: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=
Subject key identifier: 01:3B:D2:16:11:5D:FC:20:27:71:43:E1:65:18:18:23:C1:D0:E6:FA
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 01942747A05CFD88DE35468CAC09041C3320
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2001:67c:1980::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a0:5c:fd:88:de:35:46:8c:ac:09:04:1c:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=013bd216115dfc20277143e165181823c1d0e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:48:ad:26:af:01:10:db:46:fb:43:db:56:
d8:bb:07:0b:f3:d8:a1:6e:d9:16:99:c8:6b:97:86:
d0:cd:19:57:3d:97:5a:47:c7:00:87:ee:13:5c:6c:
b7:6c:cb:35:77:63:04:20:36:cb:b9:9c:55:79:ab:
96:5a:c8:94:b6:b2:59:64:07:25:20:80:45:b2:fb:
2d:a9:ee:bb:64:14:e9:d8:e9:ee:c3:a5:ec:22:3d:
e1:1e:a8:85:3e:a6:5f:61:0b:9b:4f:ac:bb:ec:40:
2d:d0:c6:78:c8:ec:65:8b:f0:a5:99:b9:f6:63:6d:
6e:68:bd:ae:2f:11:58:b9:8d:09:0c:af:48:80:30:
f6:b1:17:67:dc:30:64:80:59:d6:cb:de:a5:ee:22:
8c:d5:37:10:c7:c3:b1:66:da:57:d6:23:6e:88:a5:
c5:81:e2:ac:c9:f5:03:c6:71:0f:29:b6:a8:ee:2b:
cc:aa:4a:18:03:69:c7:20:4a:31:50:46:48:d7:71:
15:cf:2f:43:4e:db:1c:5b:65:50:f8:5f:62:6a:56:
8e:e2:db:12:f4:c8:f3:a0:e0:b0:e2:95:d7:1e:54:
21:3e:0d:8e:60:af:95:f5:0e:e2:47:92:3f:bd:de:
55:40:18:11:84:89:1c:dc:29:28:b0:70:e4:81:7e:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:D2:16:11:5D:FC:20:27:71:43:E1:65:18:18:23:C1:D0:E6:FA
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1980::/48
Signature Algorithm: sha256WithRSAEncryption
3b:3d:d8:1e:f7:94:47:e8:17:fc:a3:af:dd:18:90:2a:43:67:
49:06:19:5a:6a:9f:1f:27:a7:90:a1:5c:6b:b8:2e:26:28:c6:
a0:97:de:a7:f8:67:65:fe:e2:5f:16:67:3d:70:0e:e1:4f:ac:
af:89:81:74:30:32:2b:87:27:d2:a8:d3:ef:b4:e2:cf:93:83:
ac:56:0b:58:78:5e:32:f0:db:2f:79:45:1b:a0:40:b4:50:65:
f5:06:5c:8b:75:31:0f:2b:ff:e2:26:a7:94:a9:c1:15:cd:fa:
aa:6a:f7:a5:d4:16:0e:8d:7f:97:e6:8f:7e:b5:58:a3:09:79:
59:c0:7d:e3:8d:5e:d1:9d:c2:b5:d4:75:cf:93:16:13:53:62:
db:f2:24:96:03:53:59:2f:34:e2:56:f9:af:eb:5e:62:86:a7:
25:53:66:ee:4e:e9:4c:1c:66:9a:5a:b2:6c:00:75:bb:d9:a0:
d7:30:13:f3:46:e4:96:ce:fe:23:06:fc:56:f3:80:62:6f:6c:
62:ec:e4:4d:fe:0d:01:3d:fc:5e:9b:ea:8e:a4:47:84:0a:d8:
0b:f8:f4:c7:79:d1:4b:2a:a2:be:97:94:36:b1:5c:7f:4f:22:
9c:88:ba:a9:fe:9e:3d:48:42:b0:67:6f:ac:a1:76:31:92:cd:
27:c3:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:29:52 2025 by rpki-client