Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/jHpbkP7Y7SL4FQAQOS01aN05aWw.roa
File: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (raw, json)
Hash identifier: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=
Subject key identifier: 8C:7A:5B:90:FE:D8:ED:22:F8:15:00:10:39:2D:35:68:DD:39:69:6C
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019425215C95C34C140C5057E646CAA3F369
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/jHpbkP7Y7SL4FQAQOS01aN05aWw.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8792
IP address blocks: 2001:67c:1170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5c:95:c3:4c:14:0c:50:57:e6:46:ca:a3:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7a5b90fed8ed22f8150010392d3568dd39696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:e1:89:e1:ce:8e:31:35:22:9e:f6:36:e4:
2a:a6:54:a6:5e:87:ef:9b:f4:6b:de:ea:19:3c:91:
21:d4:35:bb:72:47:71:81:f1:ae:5d:3a:58:de:1c:
4d:f1:84:89:ea:41:e9:6f:2e:82:b1:a4:68:ff:1e:
cd:bd:23:54:f5:89:98:4d:bc:b5:1a:19:0b:b4:95:
05:92:c7:be:20:0e:51:13:73:aa:d3:67:7a:e1:ef:
05:1b:09:d5:13:e7:75:00:f0:18:22:51:ed:22:a8:
83:41:8c:45:8a:ad:03:f8:b7:17:9d:c1:49:e9:4c:
7f:12:29:87:28:83:97:1a:09:20:af:de:a7:ec:fc:
1e:b4:2d:6e:85:2b:dc:96:9c:d8:ed:76:c4:30:fe:
f9:c3:61:99:d2:62:f7:61:de:03:7e:b5:3f:b1:8c:
c9:4c:1d:58:f6:c1:f1:fd:26:dd:f9:c5:39:bf:5d:
68:87:8f:0d:72:04:17:3d:d0:93:3f:f5:f2:9b:4b:
48:53:ef:3d:70:e1:f3:5c:42:2d:f9:18:55:7b:e0:
07:32:5f:f3:ea:30:75:1a:44:a7:c9:71:00:50:7b:
c8:2c:02:39:74:6e:f6:d3:f8:31:60:85:42:99:67:
b6:62:d3:d0:63:de:07:18:ec:f1:2c:2f:08:98:ce:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:5B:90:FE:D8:ED:22:F8:15:00:10:39:2D:35:68:DD:39:69:6C
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/jHpbkP7Y7SL4FQAQOS01aN05aWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1170::/48
Signature Algorithm: sha256WithRSAEncryption
23:50:7c:a8:02:3a:57:6b:69:6c:e1:09:d6:2f:7e:62:a2:c2:
2a:14:47:e9:0f:fa:b7:ca:88:96:6e:af:55:1f:d1:18:87:e8:
63:95:e2:69:bb:3a:41:cc:45:35:f1:9c:38:cb:33:31:ff:f7:
e6:18:a7:ae:a7:b1:a9:9a:32:8a:e7:26:9e:a3:fa:69:b3:fe:
9f:7a:25:91:52:84:85:82:5a:65:08:47:1c:51:aa:92:c6:c9:
f8:91:32:a7:1e:d5:c0:5f:7e:dd:41:99:14:bd:ed:d6:44:c4:
be:98:cc:f6:24:65:b8:6c:36:09:9e:02:58:02:5e:9d:fb:4b:
65:29:0b:39:71:35:af:5b:3c:57:54:0f:bc:b0:78:f7:45:d5:
d4:b1:01:e1:90:25:68:fb:1f:c0:db:a4:8e:c3:36:74:f1:3c:
ac:cb:5f:cb:47:c2:9e:27:05:76:f1:94:56:10:39:54:e3:bf:
7a:06:bd:40:12:cb:a6:37:9d:ae:56:b0:57:de:50:4c:19:f6:
06:e8:36:06:be:30:13:54:6d:4f:b3:76:f6:41:39:53:e6:e1:
21:c1:94:9d:42:c3:d1:e4:cf:2d:32:4e:45:81:28:f3:14:0a:
10:28:08:44:28:bb:69:1d:f2:47:65:d5:57:89:c6:94:ae:cf:
1d:4a:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:16 2025 by rpki-client