Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/8GNKNVNcFdK7ul-lnZ3YvSFR8co.roa
File: 8GNKNVNcFdK7ul-lnZ3YvSFR8co.roa (raw, json)
Hash identifier: /c21kt1vp2OV1oltuGz+xJ90KT7eXHqzalw3Fm7M7lE=
Subject key identifier: F0:63:4A:35:53:5C:15:D2:BB:BA:5F:A5:9D:9D:D8:BD:21:51:F1:CA
Certificate issuer: /CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Certificate serial: 018570C2BB698AAD0D6E2AF24B46A1BA12AE
Authority key identifier: 3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/8GNKNVNcFdK7ul-lnZ3YvSFR8co.roa
Signing time: Mon 02 Jan 2023 04:34:47 +0000
ROA not before: Mon 02 Jan 2023 04:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2596
IP address blocks: 2001:848:804::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:bb:69:8a:ad:0d:6e:2a:f2:4b:46:a1:ba:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Validity
Not Before: Jan 2 04:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0634a35535c15d2bbba5fa59d9dd8bd2151f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:18:aa:54:02:2a:24:46:4a:96:e4:dc:5b:
f0:6c:7f:e8:93:37:d3:69:67:d1:37:9d:6e:7f:61:
07:ff:fe:c6:2b:45:bf:8c:20:eb:91:5d:81:81:e6:
99:9d:9e:7d:67:dc:3b:59:36:65:4f:8c:f5:4d:8a:
21:a7:87:c3:5f:f1:c5:6b:3e:93:b2:c9:0f:b0:1e:
51:bd:37:d5:5c:fc:63:7a:06:b1:46:7e:e0:6e:84:
73:eb:50:c0:c2:fe:3f:d9:6d:2c:15:f9:f9:33:80:
50:fc:26:26:fe:95:a1:46:24:23:22:31:19:3e:a5:
c1:23:da:d0:b8:01:43:12:98:22:46:93:44:b0:0b:
27:cc:d3:93:68:7a:0f:74:ed:59:d4:a4:2f:18:2c:
09:cc:79:d0:ca:2e:26:42:0b:13:01:b4:72:88:b8:
ea:cf:8c:63:85:67:df:0e:b8:aa:ec:3e:9b:4c:a3:
3c:b2:b0:6d:37:b5:d2:43:da:41:3b:99:01:ce:f4:
d3:8c:73:bd:c2:29:0d:fd:c2:4e:16:f4:ad:0f:3f:
c4:d7:fc:77:06:a0:e0:88:d9:43:89:cd:38:05:c1:
a8:58:d2:32:79:e3:ee:8e:ab:94:d1:87:0f:7f:09:
35:e4:c6:ac:71:7a:4e:48:bb:e9:56:8f:f1:bb:de:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:4A:35:53:5C:15:D2:BB:BA:5F:A5:9D:9D:D8:BD:21:51:F1:CA
X509v3 Authority Key Identifier:
keyid:3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/8GNKNVNcFdK7ul-lnZ3YvSFR8co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:848:804::/48
Signature Algorithm: sha256WithRSAEncryption
19:78:e7:c4:b2:57:24:e2:f2:c5:7e:27:58:0e:9f:fb:ba:14:
02:25:04:1a:ab:f3:c0:d7:2a:38:4b:1a:60:b3:f1:5f:ea:44:
4f:1c:68:bc:78:ec:9c:d8:c7:54:68:94:0b:60:a2:ee:43:80:
8a:3a:4f:e8:c0:6d:41:e0:8a:37:e3:41:ad:3d:a4:41:87:c2:
01:35:27:1d:94:be:f5:64:b4:cf:3a:ec:80:99:c1:98:b0:5e:
5e:06:7f:8f:3a:43:c6:0c:7a:b9:12:0e:15:1d:8b:a1:02:be:
d8:4f:16:ad:89:71:16:09:33:4b:c7:96:ca:22:6a:98:b4:96:
67:9a:5c:f5:c9:05:e3:0c:71:88:50:1e:c1:fd:fe:91:31:15:
ae:68:2a:39:ff:e3:1d:93:bc:dd:f8:3d:e6:36:b2:9d:58:00:
3f:f5:31:fb:6e:90:c7:43:53:ea:36:41:5b:22:3f:f1:b4:6e:
d0:34:6b:52:f7:55:96:4f:a9:a9:02:51:2f:e2:af:48:86:ce:
7e:b4:41:4a:ea:11:5e:58:78:24:de:dd:bf:37:27:19:4e:fc:
c7:4e:be:d2:a9:82:92:09:9e:5d:aa:b4:b0:19:b5:41:1f:2b:
90:ea:63:dc:4a:70:d2:0f:60:9c:80:4d:2a:70:86:82:be:e4:
e8:df:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:02 2025 by rpki-client