Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1-gYwiHi4kEdrKCmhBQ7hnjLrhH8.roa
File: 1-gYwiHi4kEdrKCmhBQ7hnjLrhH8.roa (raw, json)
Hash identifier: LFi6c2PK7vvj8+Y7sYtvPh/Gyxc5+OZivNipFO0QsVQ=
Subject key identifier: FA:06:30:88:78:B8:90:47:6B:28:29:A1:05:0E:E1:9E:32:EB:84:7F
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0185737A89E3D02F6977320FE25293DC660D
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1-gYwiHi4kEdrKCmhBQ7hnjLrhH8.roa
Signing time: Mon 02 Jan 2023 17:14:48 +0000
ROA not before: Mon 02 Jan 2023 17:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208084
IP address blocks: 2a0e:3bc0:3::/48 maxlen: 48
2a0e:3bc0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:89:e3:d0:2f:69:77:32:0f:e2:52:93:dc:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 2 17:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa06308878b890476b2829a1050ee19e32eb847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:5b:f9:30:cc:d6:10:05:89:d3:72:88:bb:
e5:e5:e3:87:c5:f2:87:06:f6:25:56:34:b3:91:ec:
06:06:7c:4d:f9:39:3d:b3:8a:c5:d9:76:56:08:cf:
ce:f2:79:60:f5:8c:b3:eb:87:5a:c4:9f:0a:4d:af:
88:81:07:0c:0f:c9:3b:7f:7c:de:f0:58:83:1f:ea:
a6:c5:86:88:7b:77:ca:4a:6b:a1:a4:51:3a:27:9b:
bf:db:92:76:7b:c8:52:08:fb:93:fd:21:2c:7f:c4:
06:a2:6e:4c:76:8a:b5:a3:0b:50:f1:46:1b:41:f6:
77:06:e8:fe:ec:16:f5:c8:6d:52:49:70:8d:5c:c5:
08:55:16:15:33:87:a0:ab:cb:9a:4f:27:cf:e3:43:
ab:4d:37:e4:ec:01:3d:29:2d:d5:65:d4:82:6d:3d:
13:d2:ec:9d:f4:f2:92:ab:cb:bf:6a:b6:32:18:cc:
47:dc:a5:f5:1a:4a:cf:bc:9c:21:38:02:2c:ad:a7:
33:dd:52:da:58:8c:85:68:21:09:c8:75:1d:08:c4:
7a:9a:1a:aa:5a:15:1a:a2:80:23:c0:81:02:b0:b0:
64:99:f1:44:29:89:f2:99:f6:d4:9b:ad:07:0b:2d:
b8:fe:38:c8:74:bb:77:30:21:8f:6a:fb:1d:92:58:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:30:88:78:B8:90:47:6B:28:29:A1:05:0E:E1:9E:32:EB:84:7F
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1-gYwiHi4kEdrKCmhBQ7hnjLrhH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:3::-2a0e:3bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:d4:e3:c4:ff:be:a8:c3:fc:84:d6:fd:97:e2:cb:1b:17:aa:
c9:2b:ff:35:fb:d4:b0:00:d5:d3:4d:63:bc:1a:61:3d:88:7f:
46:3d:48:d6:e2:16:e7:65:0b:c8:3c:03:46:07:bb:a2:0c:e3:
11:ab:e8:c4:29:81:69:45:cc:f1:fb:82:07:ec:0e:9c:65:ca:
0b:5e:cf:f0:8c:29:d6:d7:71:db:1d:54:1f:bb:22:d7:8c:80:
f6:00:7d:85:e7:09:14:9f:64:fe:cd:5d:a0:0a:32:d5:c0:4f:
a1:7f:9f:ea:28:e5:06:90:ab:34:0d:74:f3:28:b0:8b:48:95:
00:94:e9:88:65:19:f0:7f:3d:10:bf:30:dd:07:e4:cb:a6:44:
d0:3c:87:6b:1d:da:36:b9:a2:eb:fb:4b:5c:58:30:e6:13:39:
ca:b9:9b:d9:1f:65:49:28:c8:01:47:77:09:b7:de:b0:2d:c4:
29:4b:3f:65:dd:a3:11:6a:c4:d8:58:39:ee:e4:23:9d:36:dd:
c8:39:aa:7f:e3:e6:f0:a0:26:e4:36:7a:20:c1:63:41:00:97:
74:c0:20:ed:61:91:f1:94:8f:4e:62:3a:13:7b:11:89:c5:df:
ae:6e:17:26:f5:bc:3b:dc:32:34:37:d2:2f:dd:c1:4f:a1:45:
58:f9:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:18 2025 by rpki-client