Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/iSnugqEGJsiGzL7mn_WRGZc-9yc.roa
File: iSnugqEGJsiGzL7mn_WRGZc-9yc.roa (raw, json)
Hash identifier: 100wL3xfvlcayWVsONnphX1qz9k5qXO5K4nUFi24Z1g=
Subject key identifier: 89:29:EE:82:A1:06:26:C8:86:CC:BE:E6:9F:F5:91:19:97:3E:F7:27
Certificate issuer: /CN=1a3f6225cee9c08646e2d6dabc8bf6bbb233efea
Certificate serial: 018572E81E388486DFA4A0AD2D640A601AC3
Authority key identifier: 1A:3F:62:25:CE:E9:C0:86:46:E2:D6:DA:BC:8B:F6:BB:B2:33:EF:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/iSnugqEGJsiGzL7mn_WRGZc-9yc.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203884
IP address blocks: 2001:67c:27bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1e:38:84:86:df:a4:a0:ad:2d:64:0a:60:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3f6225cee9c08646e2d6dabc8bf6bbb233efea
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8929ee82a10626c886ccbee69ff59119973ef727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:8b:8b:a1:b8:2f:88:9e:11:87:2a:57:1c:
b1:45:7b:82:8d:35:8e:39:cc:23:9c:c3:5c:35:3a:
df:95:06:bc:6b:7b:88:58:30:69:d9:ed:66:e8:3c:
86:12:be:77:37:4a:3a:37:96:5c:2e:7c:02:5e:18:
9c:31:c9:bf:0c:55:82:e9:d2:02:3f:03:39:44:0b:
b9:f5:a4:4c:9a:bb:9e:41:20:f3:9a:73:7f:c6:3b:
91:56:c5:17:e9:b0:86:b7:d3:a8:51:e2:74:ec:1e:
a4:75:23:ad:ee:30:d3:6c:7a:05:91:63:ac:ab:08:
7d:4e:b7:cb:db:dd:06:c0:cc:f4:e2:cb:2d:a5:87:
60:cf:12:5d:4a:32:1a:8c:bb:29:34:30:0c:c5:d8:
ca:d4:98:00:f7:ae:7d:13:19:75:2b:78:10:2e:b7:
18:60:a5:f6:ad:5b:91:7d:ec:13:78:f5:1c:c0:2f:
bb:40:dc:53:97:d5:ee:ad:89:26:81:26:7b:a4:65:
e1:05:33:de:85:33:e8:09:b8:b5:f7:74:45:d9:c6:
97:d1:9d:0e:55:e9:b3:7b:3a:91:4d:44:a7:8e:1d:
aa:f5:24:a0:b2:16:e8:28:c8:ab:ea:15:de:67:3a:
07:22:99:0b:1f:05:cf:b1:0f:87:33:f7:c5:55:a0:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:EE:82:A1:06:26:C8:86:CC:BE:E6:9F:F5:91:19:97:3E:F7:27
X509v3 Authority Key Identifier:
keyid:1A:3F:62:25:CE:E9:C0:86:46:E2:D6:DA:BC:8B:F6:BB:B2:33:EF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/iSnugqEGJsiGzL7mn_WRGZc-9yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:27bc::/48
Signature Algorithm: sha256WithRSAEncryption
34:05:e0:d7:37:42:7b:5c:df:1d:75:52:7e:f9:86:7a:19:a2:
ae:e0:29:11:6d:dd:cf:59:5c:a0:e4:60:77:62:2a:90:c3:b3:
37:11:f7:e7:06:91:8a:f7:01:13:fd:a3:b9:0e:14:e5:47:d7:
b5:10:fb:d0:67:6f:17:58:3c:22:65:5e:7a:f8:31:3e:87:6c:
19:0c:45:74:e3:e7:40:22:db:95:02:7b:b7:91:39:54:d2:81:
ad:81:47:21:65:b3:7a:3e:2e:d0:5c:3d:ac:ec:b7:aa:07:8e:
0d:18:7e:88:53:3f:99:fb:fd:1b:a2:44:07:7b:e3:f1:c9:6a:
aa:c9:0d:97:91:c6:65:28:3d:84:ba:ae:85:bc:84:6d:45:b2:
7b:be:ef:93:7e:0e:c1:47:a7:01:f0:05:ba:1c:c6:c3:b2:2c:
62:78:ac:73:e0:7c:92:af:93:3f:df:43:50:f5:4c:c7:1d:74:
2e:25:f1:bf:c5:7d:c7:1d:95:30:64:00:2d:97:5e:a0:7d:89:
b9:41:36:78:0c:96:6b:4d:74:1e:d5:19:e6:2e:26:ef:92:87:
66:f2:16:c2:75:d5:0b:2e:f3:91:04:10:53:52:e7:8e:f8:a8:
c8:db:9e:04:f5:c5:9c:0c:b3:ad:1e:19:07:8c:31:ce:17:89:
2d:84:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:42 2025 by rpki-client