Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/F9NENsgLQplgyDxaKboJGp-ngV4.roa
File: F9NENsgLQplgyDxaKboJGp-ngV4.roa (raw, json)
Hash identifier: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=
Subject key identifier: 17:D3:44:36:C8:0B:42:99:60:C8:3C:5A:29:BA:09:1A:9F:A7:81:5E
Certificate issuer: /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial: 01941FFAB1B9B124DF75717EF62BDD074DED
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/F9NENsgLQplgyDxaKboJGp-ngV4.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64424
IP address blocks: 2001:67c:774::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:b9:b1:24:df:75:71:7e:f6:2b:dd:07:4d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d34436c80b429960c83c5a29ba091a9fa7815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:f4:ea:ad:0b:77:8a:95:2f:d7:df:fc:85:
ed:45:f8:29:69:e7:b9:03:da:12:43:8d:ec:12:95:
62:e2:50:22:95:70:82:7a:4f:83:1e:b9:15:c1:1c:
c6:e6:b6:dc:e4:bf:db:4b:2e:03:c6:5d:6d:71:b6:
7c:a5:5c:85:00:20:86:3f:6b:f1:c1:8c:6b:91:8d:
49:d7:e8:24:cd:99:ca:d7:4c:5c:c0:55:0a:b3:23:
b2:6c:2d:d5:3b:c9:85:ef:5a:78:e5:64:da:38:4c:
b0:45:0c:69:08:35:2e:de:f7:45:1f:a6:06:39:bd:
9b:cf:60:04:ba:21:35:e1:19:1d:0c:76:2b:e1:9f:
36:ea:1c:6f:a8:ed:9d:95:fa:83:c2:1b:2b:6d:9b:
f8:92:f2:32:08:88:cc:38:a6:fa:c7:e1:59:9c:0c:
5c:9e:f9:37:fa:87:79:be:8a:b8:6d:5c:2d:1f:77:
af:5a:4b:28:af:68:41:73:ae:ea:ee:de:7e:ed:1e:
da:9c:4d:cc:13:7d:50:3d:e3:da:53:8d:9e:f2:63:
6e:d9:f9:61:da:8c:57:f6:df:b3:db:55:75:43:f0:
7d:8c:40:ae:b6:e4:05:41:bf:e8:d7:fb:0a:6e:2b:
6b:93:95:d1:fe:8f:c9:0c:a1:b1:3d:b3:f1:e7:7e:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:44:36:C8:0B:42:99:60:C8:3C:5A:29:BA:09:1A:9F:A7:81:5E
X509v3 Authority Key Identifier:
keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/F9NENsgLQplgyDxaKboJGp-ngV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:774::/48
Signature Algorithm: sha256WithRSAEncryption
30:e2:6d:ef:b0:6e:be:8b:96:ce:25:b1:2c:81:72:7c:b1:57:
bb:87:04:db:0d:37:4c:53:b9:1f:38:5e:cf:72:eb:71:54:2d:
3a:13:61:ec:c7:f8:11:42:c2:ed:4a:60:0b:33:4f:8b:ea:c4:
77:d5:a9:1c:59:84:eb:6c:15:28:cb:8d:8b:73:2b:df:c0:d9:
3d:1a:87:98:b3:fc:04:de:83:db:f5:2b:62:19:cb:70:25:e0:
12:45:ed:83:02:30:05:44:cc:55:c3:44:51:d4:79:d3:69:11:
7a:3d:3b:ec:51:36:e4:34:d6:60:a8:a6:97:88:fb:27:a7:16:
b4:95:17:db:ce:b4:55:d8:07:0e:56:02:2c:9d:95:f1:2d:c5:
29:9a:7f:af:08:1c:11:0f:cc:fd:55:08:7b:8f:98:12:0f:b8:
29:91:71:12:68:9b:8f:b4:d5:d0:2a:d2:d8:30:c2:24:7d:ec:
69:9e:49:62:7b:0e:82:f3:fc:c6:2d:53:5c:fd:4d:57:2e:3e:
5e:00:37:4d:b3:f3:1c:38:d2:06:bf:41:81:c4:e3:7c:3f:f8:
c1:e8:aa:2a:97:fc:2b:42:70:f9:04:84:1d:b1:51:09:1d:bc:
a8:d9:e1:e1:6a:2f:71:16:e9:a9:e8:70:0a:08:83:6d:fe:7b:
0e:14:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:04 2025 by rpki-client