Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/G9WVHFvNsitbNh3zqoWEmuOtXfI.roa
File: G9WVHFvNsitbNh3zqoWEmuOtXfI.roa (raw, json)
Hash identifier: i6hML9EXiX03dndRuYgMYgdJVzC82cGDns27B5iBOv0=
Subject key identifier: 1B:D5:95:1C:5B:CD:B2:2B:5B:36:1D:F3:AA:85:84:9A:E3:AD:5D:F2
Certificate issuer: /CN=f167e7ee93676629dda44b57f33ad3e1ada60a55
Certificate serial: 018CCA2A704A9A5DED5803A8E430C1574D3C
Authority key identifier: F1:67:E7:EE:93:67:66:29:DD:A4:4B:57:F3:3A:D3:E1:AD:A6:0A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Wfn7pNnZindpEtX8zrT4a2mClU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/G9WVHFvNsitbNh3zqoWEmuOtXfI.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197749
IP address blocks: 2001:678:c84::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:70:4a:9a:5d:ed:58:03:a8:e4:30:c1:57:4d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f167e7ee93676629dda44b57f33ad3e1ada60a55
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bd5951c5bcdb22b5b361df3aa85849ae3ad5df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:d3:9c:5d:4e:b6:58:fc:14:6a:31:fc:5c:
dc:2a:49:2e:d9:a4:07:8e:a0:82:23:a3:84:c1:23:
7b:3f:fc:84:17:fe:ca:cb:b8:4b:0b:31:07:3b:1e:
28:80:aa:dc:2a:3c:5f:ae:15:6f:a3:4b:4f:87:b0:
41:89:c5:8b:de:ec:b4:a5:71:95:da:d6:d6:67:a6:
0f:9b:00:fb:48:bb:29:79:7a:d7:2d:91:73:a3:6f:
9a:03:b2:0f:62:fa:60:97:7e:49:a3:db:ac:50:43:
12:43:40:f8:97:86:43:03:ee:f0:7c:a5:fa:87:ec:
da:1a:fd:e4:f7:6f:b4:73:e5:66:83:64:c7:15:67:
cd:ff:c6:a1:3a:50:37:d6:2d:2e:99:5f:c5:00:00:
9d:ae:a9:c9:21:32:9e:6c:11:5f:46:88:5a:15:96:
db:ef:92:69:ca:7d:32:4c:b7:c1:ad:1a:06:cd:d6:
12:19:16:46:a7:1a:e9:ca:ff:86:34:15:fb:cf:9a:
1c:15:36:67:86:42:54:2b:50:39:7b:d5:1e:54:94:
b9:cb:6b:4b:ed:64:ae:be:6d:81:ba:f4:9b:91:7e:
4b:04:92:0a:a9:18:12:ab:e3:fd:38:d5:a3:98:b5:
99:be:66:d4:99:91:b4:d1:49:52:8d:68:b5:17:dd:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:95:1C:5B:CD:B2:2B:5B:36:1D:F3:AA:85:84:9A:E3:AD:5D:F2
X509v3 Authority Key Identifier:
keyid:F1:67:E7:EE:93:67:66:29:DD:A4:4B:57:F3:3A:D3:E1:AD:A6:0A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Wfn7pNnZindpEtX8zrT4a2mClU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/G9WVHFvNsitbNh3zqoWEmuOtXfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/8Wfn7pNnZindpEtX8zrT4a2mClU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c84::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a1:0e:54:59:72:2b:22:7c:44:48:b0:78:db:16:66:94:c5:
7a:be:b1:48:6c:41:b4:43:38:1e:28:01:6c:3c:2c:c7:cb:da:
a2:dd:7e:2d:06:ab:db:10:47:6f:4f:53:d5:60:6e:3c:a5:65:
4f:ba:fc:f6:0d:36:b8:8e:d1:40:04:b5:09:15:ae:48:ec:e9:
7a:e8:4c:db:e1:bf:f4:e8:ce:86:4f:ae:ce:9b:ca:c5:b2:fc:
0f:10:52:4c:27:a4:cc:e5:75:1f:f3:c6:1d:8c:21:e7:84:14:
61:62:da:45:f9:ac:00:bc:5e:20:d4:fe:87:13:94:c9:95:6d:
f1:44:39:67:71:14:49:92:e6:ae:29:84:f9:c5:f4:a2:3b:ed:
99:5f:81:2a:86:a9:ed:f3:6a:3d:58:9c:a4:89:ff:24:25:ca:
8d:3d:0d:f3:e6:60:97:b9:c4:32:38:1d:ac:56:d3:13:bd:ac:
ad:b6:37:83:13:67:e1:29:ea:29:37:8e:d6:9f:f8:b2:40:64:
58:3d:c4:bf:05:98:47:82:fc:9a:e7:08:75:0d:a4:9b:85:5b:
68:d6:a2:1c:1f:9f:f4:a1:e8:54:98:55:a9:91:29:10:4c:20:
a1:cc:0c:93:3c:ef:87:86:51:a8:93:11:0d:4b:16:83:6f:5a:
91:18:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:50 2025 by rpki-client