Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa
File: N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa (raw, json)
Hash identifier: ze9XLgcSLr5D7asiuVCsSkgm8+mRcLFwD4iJ0pP6fg4=
Subject key identifier: 37:51:90:AB:A3:EB:80:4A:84:09:9F:C3:E8:6F:3A:67:35:47:75:57
Certificate issuer: /CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Certificate serial: 018CC802EDD5D6CC927085845F17B644D4B1
Authority key identifier: C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208743
IP address blocks: 2001:678:710::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ed:d5:d6:cc:92:70:85:84:5f:17:b6:44:d4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=375190aba3eb804a84099fc3e86f3a6735477557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:59:8a:17:83:da:df:66:63:77:db:fd:71:
e4:27:3c:0f:13:e0:78:2e:2a:71:5d:49:5c:0d:68:
19:f7:0a:a1:7f:ee:82:e4:40:5a:ea:03:e6:65:43:
68:9a:69:c2:a2:e2:89:96:4f:81:f5:60:b1:f9:71:
27:3b:71:6a:dd:1d:42:73:a2:64:f7:55:2f:6d:8c:
37:a2:b3:a6:fd:19:5e:7a:e4:94:10:46:99:fa:c6:
8c:f2:10:8a:03:0d:da:ef:0c:c7:70:f7:c3:40:7d:
7f:ac:85:61:ef:2e:dd:2a:c9:1c:47:35:5a:28:a5:
b9:e2:c7:8d:8a:cd:c0:ea:b8:ba:3a:70:0f:43:b2:
60:68:17:1d:ff:aa:eb:1e:66:60:9a:c6:12:38:b9:
0b:a1:66:77:bd:fb:c9:71:3e:9c:25:0e:92:f8:d0:
38:92:4c:85:c2:87:cb:8d:58:d0:a4:d1:cd:7e:52:
48:be:b7:97:85:9a:41:e3:e2:cd:37:76:29:24:26:
fb:95:11:f6:99:bb:c2:35:27:90:12:e1:33:54:6e:
76:7f:4e:fa:58:26:56:64:e2:33:5e:18:69:c7:b2:
5d:2f:3b:ed:d3:79:d6:5d:a1:64:37:d8:35:75:79:
2e:7a:f4:20:55:20:e3:79:bf:7c:b0:f5:bb:82:b1:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:90:AB:A3:EB:80:4A:84:09:9F:C3:E8:6F:3A:67:35:47:75:57
X509v3 Authority Key Identifier:
keyid:C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:710::/48
Signature Algorithm: sha256WithRSAEncryption
34:02:6b:28:9c:8f:72:c1:e5:63:b2:38:f3:7a:e9:6f:4a:5b:
30:4b:b9:b1:bc:2a:04:9a:50:67:6a:05:9d:4b:26:dd:c6:d7:
a7:6b:e1:b4:3a:09:73:5b:60:13:55:80:63:80:8d:45:70:03:
d4:94:eb:c5:1b:11:50:53:c7:90:16:d0:5f:3a:29:a6:32:c1:
bc:c1:98:fc:14:a8:db:59:00:35:90:f1:09:09:a6:f5:f4:00:
24:45:09:66:60:79:e4:77:c3:54:e8:da:25:6e:bd:0b:e2:b2:
2f:32:22:46:65:a0:03:85:9b:2f:fa:f6:7e:6f:48:3c:1e:b8:
4e:b7:6e:d1:61:a2:0f:d8:26:2f:7d:bd:a1:93:b5:1b:6e:4d:
58:95:09:32:8b:85:a1:b3:69:f2:ae:86:06:81:11:1a:29:18:
8a:66:cf:e2:fd:e7:4a:05:b6:bb:a2:6e:92:18:ce:d2:76:10:
5c:bd:29:ac:b5:54:1a:33:83:c0:34:e3:83:62:01:93:50:f5:
e8:6e:36:c6:30:cf:99:e6:ad:e2:68:77:09:59:06:24:6f:ab:
bb:48:8a:0d:23:3b:43:13:be:3b:91:5b:67:8d:51:7a:b8:1c:
94:dd:d3:e5:74:42:66:68:49:cc:f2:b6:2f:09:22:31:c1:21:
68:c4:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:19 2025 by rpki-client