Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/busUHZWgZLy4pQI6l2Lb_Hu3b48.roa
File: busUHZWgZLy4pQI6l2Lb_Hu3b48.roa (raw, json)
Hash identifier: lQVh1jC/nVeJyIkZ8kEdNDQeE58kxJRWB/B1al3zioY=
Subject key identifier: 6E:EB:14:1D:95:A0:64:BC:B8:A5:02:3A:97:62:DB:FC:7B:B7:6F:8F
Certificate issuer: /CN=defcaabda68730a2ced3cc103b3c808ae2ea21c4
Certificate serial: 010FFD4D
Authority key identifier: DE:FC:AA:BD:A6:87:30:A2:CE:D3:CC:10:3B:3C:80:8A:E2:EA:21:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vyqvaaHMKLO08wQOzyAiuLqIcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/busUHZWgZLy4pQI6l2Lb_Hu3b48.roa
Signing time: Sat 01 Jan 2022 09:00:03 +0000
ROA not before: Sat 01 Jan 2022 09:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 2001:678:258::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17825101 (0x10ffd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defcaabda68730a2ced3cc103b3c808ae2ea21c4
Validity
Not Before: Jan 1 09:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eeb141d95a064bcb8a5023a9762dbfc7bb76f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:81:0a:c6:00:9d:0b:bf:80:17:5a:a3:fa:
9a:70:17:9c:f0:76:b4:df:4a:12:62:f0:08:bd:b8:
51:e4:eb:03:55:33:a4:b3:69:8b:84:2e:79:9d:7d:
27:60:ec:1b:52:da:93:d2:b6:1b:98:29:34:ca:31:
7e:fd:a2:b4:22:a0:a0:bc:5d:c5:91:c4:0c:c1:2f:
2a:54:66:7b:eb:44:d6:ee:96:ab:9c:27:ea:21:63:
c5:61:c2:1a:bf:bd:22:45:b8:e4:2b:4a:be:c7:a1:
98:46:da:74:06:d2:45:b7:a6:2f:68:b7:72:5d:5e:
bd:fa:3d:f0:3a:c8:f7:7e:82:f0:4b:70:50:db:dc:
34:bb:50:13:db:cd:eb:13:af:74:8f:8d:0f:24:68:
ec:64:36:00:90:ba:5c:7d:51:5b:5f:a1:d9:d5:c9:
2a:13:b3:d6:c7:d5:c0:92:b2:0b:ba:88:c4:b1:fd:
68:d8:e8:e6:c9:43:52:bc:63:d6:df:fb:02:f2:16:
83:b1:e2:e2:20:2d:42:c3:f0:b8:d8:1c:b0:d3:8f:
de:50:6d:06:9b:d2:3e:96:3f:41:d6:ae:5f:7b:a1:
0b:a2:a2:fe:39:89:f6:db:f8:3c:b9:46:6c:d2:9d:
ee:b7:63:f5:e3:8d:d0:f4:17:ec:8b:71:64:fa:ad:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EB:14:1D:95:A0:64:BC:B8:A5:02:3A:97:62:DB:FC:7B:B7:6F:8F
X509v3 Authority Key Identifier:
keyid:DE:FC:AA:BD:A6:87:30:A2:CE:D3:CC:10:3B:3C:80:8A:E2:EA:21:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vyqvaaHMKLO08wQOzyAiuLqIcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/busUHZWgZLy4pQI6l2Lb_Hu3b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/377d70-c05f-4ff6-851a-558acf3501a6/1/3vyqvaaHMKLO08wQOzyAiuLqIcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:258::/48
Signature Algorithm: sha256WithRSAEncryption
83:87:e6:3e:bb:f8:3f:2f:71:b9:31:84:5d:4a:cb:3a:d5:c0:
39:e5:1e:d2:ec:96:cd:3d:88:1d:4c:b9:3a:04:5d:0f:ba:8c:
33:c4:9e:61:c3:70:d3:9a:e2:b0:d4:3e:52:89:43:88:e6:de:
e5:52:46:8b:f8:ac:39:1b:eb:b5:c8:8c:6c:82:8d:d6:a8:da:
fb:ac:34:17:1c:f6:ad:c8:07:68:59:3a:1a:23:d6:24:8b:2a:
42:8f:9c:5f:ab:09:41:db:a0:cd:2e:58:a7:7d:0b:20:f6:e9:
3f:4b:09:7a:98:4e:f7:2a:e2:90:23:a1:70:e9:97:91:a2:55:
76:d6:be:7f:70:d8:b9:38:82:83:0b:3a:4f:d4:13:7e:b4:e0:
66:3b:74:42:c7:c1:08:7a:1a:b3:4d:d7:1d:f9:82:04:ca:4a:
93:ed:0c:aa:7f:ce:c1:34:e8:e1:f0:9c:31:7a:6f:20:e5:a0:
12:7a:e2:ca:39:c6:aa:2c:83:f4:8c:bf:fb:11:79:10:b9:a0:
3e:6a:05:bb:35:4b:ab:b9:3d:c7:61:ac:9d:08:fc:da:84:a4:
fa:63:ac:b7:d2:c9:0c:0e:d4:46:1e:5f:98:05:f4:98:e5:0e:
6f:a5:9f:dd:31:32:71:08:a3:38:9a:74:ec:76:ee:07:13:4d:
bb:2c:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:00 2025 by rpki-client