Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa
File: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (raw, json)
Hash identifier: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=
Subject key identifier: 92:CD:C4:F6:B8:09:0E:B6:07:4A:7D:73:2A:FD:C3:44:A6:76:25:96
Certificate issuer: /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial: 019424B3CBA71F074AB6F88A3BCC53DE1072
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213003
IP address blocks: 2001:678:d7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cb:a7:1f:07:4a:b6:f8:8a:3b:cc:53:de:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92cdc4f6b8090eb6074a7d732afdc344a6762596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:b6:71:a6:b7:f1:0b:bb:a2:14:4f:f0:88:
7e:83:da:f4:8d:b4:a6:b5:69:c9:40:a8:03:d2:7c:
52:df:42:8b:db:8b:00:d5:08:42:59:15:2d:54:af:
a5:69:0f:c2:74:de:b9:47:ad:1d:3c:9d:5f:81:39:
0e:3d:db:f1:a8:ff:4a:84:37:01:32:03:ee:b8:0b:
17:1b:72:39:e2:4d:0e:f8:d6:fd:c2:0a:92:e9:bc:
c2:00:40:23:3d:71:c2:57:ce:6d:5a:ca:a8:2a:bf:
de:b6:4e:cf:67:45:04:32:54:d7:4b:25:78:ae:62:
a8:f1:fd:02:d7:42:6b:bf:83:34:fd:0d:5e:34:0c:
37:0d:9b:d6:70:f9:f0:03:95:bd:1c:2c:f7:14:f5:
7f:3c:fc:ab:2c:55:cb:e4:fe:a0:f2:4a:ae:e5:aa:
f8:80:ac:f1:41:02:52:f0:ae:54:b6:a8:ed:70:ae:
e4:85:ca:c7:71:02:3a:74:b4:b2:ea:dd:76:83:a2:
22:33:94:b3:59:d3:61:81:cc:3c:ef:cb:a0:7e:17:
3a:53:cf:c0:18:37:bb:07:46:23:05:e7:e1:6f:7e:
26:d1:13:28:b8:b8:db:18:5e:07:0e:7e:9a:e3:9b:
2e:b1:a9:76:00:a6:b7:e6:fe:7c:42:d3:0a:4b:12:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:C4:F6:B8:09:0E:B6:07:4A:7D:73:2A:FD:C3:44:A6:76:25:96
X509v3 Authority Key Identifier:
keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d7c::/48
Signature Algorithm: sha256WithRSAEncryption
70:1d:e2:20:4d:90:9a:a1:63:d2:6b:3c:0a:68:38:08:06:e5:
77:2b:22:fc:8b:7b:21:ed:95:7c:0f:dc:4a:d7:b2:4d:91:59:
f4:26:ed:0b:66:5b:37:36:e6:9d:e3:1d:40:9e:1e:aa:ec:a2:
72:85:fa:7e:80:75:c8:1a:81:46:59:c3:b4:2e:c5:50:75:68:
fa:1b:68:f3:9f:ee:23:37:6b:32:68:b5:22:c1:cc:3f:41:59:
45:55:d8:17:de:71:41:78:49:08:5b:ef:b8:f7:23:9b:0a:37:
61:45:94:f7:b2:19:97:6c:29:c1:d7:84:f9:6a:87:7d:06:39:
f9:b9:cf:61:45:39:90:c2:17:7c:b5:1a:44:ed:56:64:f2:bc:
0e:9c:74:61:72:21:da:af:70:2b:d3:86:38:1c:dc:a5:b6:a0:
4f:e0:65:59:6e:f7:12:74:16:4f:d0:4a:0b:a5:42:15:26:d8:
2d:1b:72:56:02:5d:60:49:8b:e6:a0:a6:dc:8e:02:cf:32:f4:
62:87:1a:c1:d3:d3:f5:0a:69:c4:27:00:df:ef:c0:cb:06:6f:
2d:ec:ab:9e:de:a5:66:d6:33:6f:df:d9:fe:75:9c:51:96:65:
90:4d:48:17:43:c7:9a:26:7a:be:f5:05:a5:ba:ed:78:44:3f:
b3:b2:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:08 2025 by rpki-client