Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa
File: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (raw, json)
Hash identifier: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=
Subject key identifier: F0:A5:19:92:38:ED:3B:21:FC:AD:57:F7:AC:46:A6:BB:87:76:16:98
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 019422FC1BA33D2447C7185E205492AEA53C
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44471
IP address blocks: 2001:678:e00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1b:a3:3d:24:47:c7:18:5e:20:54:92:ae:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0a5199238ed3b21fcad57f7ac46a6bb87761698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:fb:bb:d0:ff:ac:c1:4f:67:70:75:79:92:
ac:49:d7:20:41:52:55:c9:1c:90:b8:a5:15:09:cd:
fd:bc:10:fc:b9:62:bc:cf:40:51:da:31:32:2f:d8:
cb:f1:dd:65:0a:12:2a:5f:34:50:87:bf:69:6d:af:
9f:44:af:bc:df:08:aa:14:01:1b:bc:ee:e4:b7:c7:
01:c6:9f:9c:62:e0:9b:12:c4:24:39:3a:ba:5a:bf:
41:f2:d8:33:fa:0e:0b:b9:20:fa:17:c1:7b:68:30:
92:85:2a:db:04:b5:4e:06:4a:85:85:d1:45:6d:c1:
2c:48:8b:c4:b8:38:9a:1a:e2:cf:84:61:57:70:25:
aa:5e:6f:62:65:fd:91:52:7f:d3:b7:b1:aa:e5:e7:
8e:5c:a6:48:bb:e9:e8:15:2e:81:5b:f8:c3:47:ec:
d2:b1:df:cd:3a:78:69:7c:55:e0:ef:0a:fe:0f:fb:
4b:c8:8d:72:75:74:d8:79:bf:41:0f:6f:85:c8:93:
ad:3e:e7:69:41:df:91:57:be:47:71:0b:e2:ec:0c:
d9:1b:92:5a:9c:96:32:84:f9:b6:a3:94:1f:7f:70:
f9:2b:94:02:13:aa:c5:4f:6d:6e:bd:b1:97:b8:24:
90:2e:de:58:f6:24:67:e0:69:10:b3:29:79:c8:44:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A5:19:92:38:ED:3B:21:FC:AD:57:F7:AC:46:A6:BB:87:76:16:98
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e00::/48
Signature Algorithm: sha256WithRSAEncryption
b8:60:9c:de:a0:cb:ac:d0:c5:b7:79:6f:b6:c3:f5:cf:63:0d:
2b:83:8c:95:01:28:fc:03:d2:e0:2e:b8:d7:f0:16:ad:b7:84:
aa:14:e9:ab:29:06:fc:e7:24:cf:43:34:cc:f3:f0:20:ad:68:
4e:29:19:23:97:b9:f6:c0:05:b6:5b:e1:e0:4c:a0:53:21:a1:
2b:f9:ec:f2:7e:65:30:69:5c:fb:11:56:1e:04:19:5f:df:be:
b8:9e:85:d0:fd:0d:08:76:ee:09:5b:67:de:e0:9e:18:55:8b:
32:01:c2:5b:35:86:99:eb:ec:bf:9c:9d:d3:05:0a:b6:87:f2:
9b:db:25:66:14:89:51:3c:7d:a7:10:16:d0:55:43:5b:69:5c:
59:cf:0a:a7:b3:7b:d8:42:db:74:2e:0c:9e:04:da:ba:83:f5:
e1:4e:e0:98:a4:59:67:2d:78:21:17:14:97:a8:8b:8a:b0:65:
52:4e:ee:32:f4:ca:e9:0a:81:ef:6d:b8:14:fc:7b:f7:86:73:
27:b4:f1:d4:c4:3e:df:ab:0b:0a:02:3a:51:c8:3c:60:0a:22:
53:68:e3:cb:ca:47:e2:8f:a4:a4:8e:c2:b2:ba:38:ec:bc:74:
5a:19:60:f4:0e:ca:2d:45:0d:34:8a:47:2e:e3:b8:f1:4a:9f:
fe:af:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:06 2025 by rpki-client