Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/1-RfR9H48PMrH0l2IhFODBZPPsjc.roa
File: 1-RfR9H48PMrH0l2IhFODBZPPsjc.roa (raw, json)
Hash identifier: Sm9SwEedkhuAddUeC1LWYv1mkBUAFllRZyOAraa10Ho=
Subject key identifier: F9:17:D1:F4:7E:3C:3C:CA:C7:D2:5D:88:84:53:83:05:93:CF:B2:37
Certificate issuer: /CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Certificate serial: 0192BA1082233B95F1337A0788145AC80B64
Authority key identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/1-RfR9H48PMrH0l2IhFODBZPPsjc.roa
Signing time: Wed 23 Oct 2024 15:48:16 +0000
ROA not before: Wed 23 Oct 2024 15:48:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61978
IP address blocks: 2001:67c:a08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:10:82:23:3b:95:f1:33:7a:07:88:14:5a:c8:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Validity
Not Before: Oct 23 15:48:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f917d1f47e3c3ccac7d25d888453830593cfb237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:8d:8e:73:9d:70:5c:0c:38:8b:ba:c2:5f:
a4:cc:59:8c:16:54:b8:01:32:9e:cc:bd:44:ae:70:
78:51:e7:3c:50:eb:de:47:ce:74:1a:2f:8e:29:9a:
d5:9c:b0:7b:00:2d:97:63:f9:a3:39:a3:ee:32:2c:
93:c4:04:49:b9:38:e8:13:87:e4:8b:15:f7:35:8b:
da:ae:2c:ee:a1:79:d1:3d:3d:9d:03:a7:da:a1:97:
84:fb:a4:d4:ea:b1:02:b3:bc:48:43:9e:e7:9b:74:
91:b5:32:33:19:21:e5:76:45:b4:9a:d3:75:a9:36:
a2:5d:ef:af:fe:d6:5c:68:f3:d9:3c:54:6e:98:29:
8e:1a:a0:a0:14:3d:57:5e:48:ce:1f:47:bf:83:07:
f6:da:1d:a4:23:b6:ac:21:71:e7:3a:67:57:2b:1c:
e4:8e:57:e8:89:4a:f3:9c:c9:44:2f:4d:12:32:3b:
a6:fd:5a:6c:56:9b:d9:93:6c:82:65:db:91:8f:76:
bc:ef:87:c2:d4:2f:c7:29:12:77:db:f0:e3:56:74:
b7:fc:e9:ec:3e:38:ac:f9:80:6f:0c:c4:b4:64:fd:
07:1f:24:e1:2b:30:88:29:33:06:61:24:7f:77:a3:
e4:0f:e2:cd:50:f1:a4:56:61:2c:7b:1c:08:2f:e7:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:D1:F4:7E:3C:3C:CA:C7:D2:5D:88:84:53:83:05:93:CF:B2:37
X509v3 Authority Key Identifier:
keyid:6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/1-RfR9H48PMrH0l2IhFODBZPPsjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a08::/48
Signature Algorithm: sha256WithRSAEncryption
4c:dd:06:a2:7e:6d:78:e8:41:84:33:98:2a:20:d9:ee:11:02:
88:e6:02:fc:c4:ee:21:cc:22:69:30:6c:e9:f6:06:64:92:bb:
93:2e:99:d5:48:8c:d9:f8:36:cb:d1:2a:97:b3:fc:22:97:aa:
d2:ec:b7:92:98:d1:4d:e0:50:0f:38:35:ab:bc:59:b8:3c:bd:
57:48:91:09:1b:21:6e:6e:42:1b:9d:27:c5:26:2e:28:50:dd:
7e:ae:d6:a0:3d:1d:c5:cb:19:a9:28:ee:65:65:c3:26:5a:cb:
43:8e:35:9f:3e:55:7b:2c:51:89:f9:a9:65:b0:e2:76:9c:c5:
c9:97:0f:10:54:fa:1d:f6:66:7d:12:19:e5:ba:47:14:f6:6f:
bb:28:aa:bf:3d:54:ad:7c:17:d9:91:59:37:f5:ff:cc:b4:1d:
68:26:ac:59:3c:1a:ab:98:8d:da:50:c9:8f:85:e0:2f:7e:93:
a4:0d:16:6d:7a:6b:ec:0d:ed:a7:2b:7f:d3:7d:7a:40:c0:c8:
c2:54:9a:01:7f:0b:d6:58:1e:be:ac:a8:cd:7e:0b:d9:c2:df:
de:14:1f:9d:ab:06:eb:58:61:99:99:98:ef:4f:90:e2:b6:40:
10:f8:68:49:18:8b:50:2b:62:9b:80:73:c7:a3:e4:4e:7b:9d:
92:53:21:1f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZK6EIIjO5XxM3oHiBRayAtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmU5NjlmZThmYjdiMmE2YjZlNDY0NDI2YTRhNzAzZDM3
ZWI1NTQwHhcNMjQxMDIzMTU0ODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTE3ZDFmNDdlM2MzY2NhYzdkMjVkODg4NDUzODMwNTkzY2ZiMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqleNjnOdcFwMOIu6wl+kzFmMFlS4
ATKezL1ErnB4Uec8UOveR850Gi+OKZrVnLB7AC2XY/mjOaPuMiyTxARJuTjoE4fk
ixX3NYvarizuoXnRPT2dA6faoZeE+6TU6rECs7xIQ57nm3SRtTIzGSHldkW0mtN1
qTaiXe+v/tZcaPPZPFRumCmOGqCgFD1XXkjOH0e/gwf22h2kI7asIXHnOmdXKxzk
jlfoiUrznMlEL00SMjum/VpsVpvZk2yCZduRj3a874fC1C/HKRJ32/DjVnS3/Ons
Pjis+YBvDMS0ZP0HHyThKzCIKTMGYSR/d6PkD+LNUPGkVmEsexwIL+fynwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPkX0fR+PDzKx9JdiIRTgwWTz7I3MB8GA1UdIwQY
MBaAFGtulp/o+3sqa25GRCakpwPTfrVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTI2V24tajdleXByYmtaRUpxU25BOU4tdFZRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hOTc5MjYtNDEwYy00NjZiLThiZjQt
YWIxNmI2OWU2YWQ1LzEvMS1SZlI5SDQ4UE1ySDBsMkloRk9EQlpQUHNqYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvYTk3OTI2LTQxMGMtNDY2Yi04YmY0LWFiMTZiNjllNmFk
NS8xL2EyNlduLWo3ZXlwcmJrWkVKcVNuQTlOLXRWUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwK
CDANBgkqhkiG9w0BAQsFAAOCAQEATN0Gon5teOhBhDOYKiDZ7hECiOYC/MTuIcwi
aTBs6fYGZJK7ky6Z1UiM2fg2y9Eql7P8Ipeq0uy3kpjRTeBQDzg1q7xZuDy9V0iR
CRshbm5CG50nxSYuKFDdfq7WoD0dxcsZqSjuZWXDJlrLQ441nz5VeyxRifmpZbDi
dpzFyZcPEFT6HfZmfRIZ5bpHFPZvuyiqvz1UrXwX2ZFZN/X/zLQdaCasWTwaq5iN
2lDJj4XgL36TpA0WbXpr7A3tpyt/0316QMDIwlSaAX8L1lgevqyozX4L2cLf3hQf
nasG61hhmZmY70+Q4rZAEPhoSRiLUCtim4Bzx6PkTnudklMhHw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:39 2025 by rpki-client