Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/Fd3zfD6VNn1Tua2JLbI338xa6C4.roa
File: Fd3zfD6VNn1Tua2JLbI338xa6C4.roa (raw, json)
Hash identifier: EbC3CgNI5ssBXb71KpQoCo96z3mPTcX+evTTYFpO9+c=
Subject key identifier: 15:DD:F3:7C:3E:95:36:7D:53:B9:AD:89:2D:B2:37:DF:CC:5A:E8:2E
Certificate issuer: /CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
Certificate serial: 01860D7452746D0B34BB864E2468E4FF5654
Authority key identifier: FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/Fd3zfD6VNn1Tua2JLbI338xa6C4.roa
Signing time: Wed 01 Feb 2023 14:49:32 +0000
ROA not before: Wed 01 Feb 2023 14:49:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200975
IP address blocks: 2001:67c:129c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:74:52:74:6d:0b:34:bb:86:4e:24:68:e4:ff:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
Validity
Not Before: Feb 1 14:49:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ddf37c3e95367d53b9ad892db237dfcc5ae82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:75:72:88:bd:24:bd:fa:d4:2b:06:03:38:
49:39:38:fb:a3:f3:9b:5d:ab:26:35:6d:e1:ba:ab:
1d:6f:6b:cf:f2:3e:dc:03:61:b3:ff:ae:08:7c:91:
b9:51:4a:10:b6:52:45:db:6e:51:10:8b:4a:2c:d5:
94:e4:a4:e4:87:2e:f2:99:fb:cb:82:c9:90:08:a4:
eb:4c:25:15:fe:b1:b8:3c:8e:a5:5f:d7:20:64:d1:
50:08:51:4e:38:8f:9b:c7:bf:61:96:7e:bc:c9:bd:
bd:6a:e4:d4:04:53:68:fe:a6:de:cf:a6:a0:7a:95:
52:50:af:94:a5:20:99:db:a8:35:bc:13:ed:e6:35:
11:85:74:b7:35:20:04:fc:0f:68:db:ea:b4:5d:d2:
94:75:09:d3:5c:c6:85:30:5b:e3:48:76:1c:67:06:
f6:58:70:b4:af:a3:fe:4f:40:e4:04:bd:de:e2:36:
4d:55:a7:04:37:a6:5f:07:b5:11:8b:d4:c9:17:98:
06:7a:40:e9:f6:7f:21:10:c6:98:f4:a8:1e:e0:be:
9a:31:34:50:21:3d:f8:59:b0:cd:0e:52:8d:5b:4e:
b0:ed:b9:af:5e:49:a4:55:c5:94:aa:0a:ac:46:cc:
49:fb:da:32:cc:b8:67:bc:78:59:28:f4:37:a4:05:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:F3:7C:3E:95:36:7D:53:B9:AD:89:2D:B2:37:DF:CC:5A:E8:2E
X509v3 Authority Key Identifier:
keyid:FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/Fd3zfD6VNn1Tua2JLbI338xa6C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
Signature Algorithm: sha256WithRSAEncryption
9f:e6:c8:fb:52:4d:18:b0:9e:c0:b8:95:8f:46:f0:5d:c8:3b:
18:dd:52:81:7a:5e:1b:c2:4d:e5:73:2c:a9:6c:8c:e4:bd:ba:
a0:e5:3e:d4:5c:f5:b6:1e:fb:43:12:79:65:16:bc:b1:a1:26:
64:fa:c8:51:62:39:07:91:ac:03:0d:8d:af:1f:b8:bc:26:23:
d1:47:83:14:a1:19:b4:ab:bc:4a:6a:30:23:66:df:3c:28:0c:
d6:5a:78:70:26:18:a0:25:63:83:0d:11:f1:8e:4c:51:1d:c1:
8d:75:c1:4c:c9:8a:d0:55:78:86:6d:52:4e:db:2e:79:d4:0b:
8d:fc:17:f0:1f:55:9f:ef:2d:38:50:d2:7c:27:ab:e9:7d:a2:
9d:39:fd:44:89:96:4d:d4:51:4a:8f:7f:a1:a1:7e:c6:ba:19:
b4:b8:ea:33:5c:a1:70:98:12:58:c5:b6:4f:63:b2:f9:3e:e6:
f6:03:a5:7b:5f:26:40:d9:d7:6b:80:40:74:bf:e6:f6:45:3b:
7f:f0:b1:14:72:db:89:60:c1:32:b3:d2:98:2f:69:14:00:70:
fb:96:4d:a2:bc:06:5f:40:92:1b:8d:d1:03:96:5c:96:0b:e8:
b0:44:9b:02:b5:12:af:1f:09:33:2d:27:d9:91:00:32:3a:06:
b1:76:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:44 2025 by rpki-client