Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9xnbGG6TmTZ1XlTmLbYmL-xINRk.roa
File: 9xnbGG6TmTZ1XlTmLbYmL-xINRk.roa (raw, json)
Hash identifier: et87EViZoDiwhbhTOBax6IpxASAcae/rB6m2TcI2kPs=
Subject key identifier: F7:19:DB:18:6E:93:99:36:75:5E:54:E6:2D:B6:26:2F:EC:48:35:19
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 018CC8713EC88935F418DF014BFD6FAE5427
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9xnbGG6TmTZ1XlTmLbYmL-xINRk.roa
Signing time: Tue 02 Jan 2024 04:31:53 +0000
ROA not before: Tue 02 Jan 2024 04:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:7b83::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3e:c8:89:35:f4:18:df:01:4b:fd:6f:ae:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Jan 2 04:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f719db186e939936755e54e62db6262fec483519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:c8:1f:a8:f5:ca:a6:10:22:ac:b7:33:0c:
40:69:0d:cf:66:9d:ba:c7:7c:3b:ea:56:b4:10:68:
8e:88:c7:3b:92:a7:66:6e:f4:97:79:b4:d5:06:81:
ab:77:8d:77:c7:9c:63:5c:ba:95:fc:19:f0:3c:15:
1c:24:ff:5a:f1:4e:4e:a4:eb:ed:fa:c8:02:a8:86:
88:04:d7:5f:c8:38:8c:84:41:19:34:44:e6:0f:f1:
36:03:e1:ef:ce:19:f5:ef:8a:c4:46:23:e5:0d:5b:
47:0d:4f:40:98:19:3f:4b:f4:7f:9f:38:f1:34:01:
d1:af:81:68:1b:71:4c:37:58:ea:aa:1c:48:a0:78:
e6:0f:dc:5d:5c:f4:87:c6:ab:e9:b4:8d:af:5c:3f:
26:c3:79:8f:5f:5a:a8:1c:93:e8:86:6c:c6:eb:03:
71:09:c1:c2:7e:a3:e9:c7:5f:42:52:31:2c:4f:06:
4c:0d:f1:78:c0:86:6b:79:76:0a:22:8e:1b:54:28:
c6:86:3d:5d:57:1f:6e:4e:52:a1:e5:aa:8d:f1:28:
16:eb:a1:f7:74:32:ce:87:b9:33:de:ed:55:66:df:
e5:81:4a:38:58:d7:bd:c4:45:49:67:5e:4d:74:5e:
57:b4:fd:63:ed:db:d0:e6:c8:6a:e2:4d:49:cf:f5:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:DB:18:6E:93:99:36:75:5E:54:E6:2D:B6:26:2F:EC:48:35:19
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9xnbGG6TmTZ1XlTmLbYmL-xINRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
Signature Algorithm: sha256WithRSAEncryption
49:21:96:e2:ea:dc:f8:43:02:55:24:e2:2a:47:4e:91:5a:98:
bf:52:16:93:dc:ed:85:88:ae:5b:a7:ab:34:5c:62:b4:85:67:
c5:df:64:a3:b4:74:fd:18:92:9f:cc:39:96:22:f1:48:cf:27:
3b:f7:46:c1:9d:15:0a:81:d2:10:c1:2f:89:30:76:82:3c:a0:
a9:46:67:03:91:9c:0f:81:fa:5e:35:be:8d:84:43:3d:30:5c:
5b:fa:a2:cb:3c:41:e9:78:6a:75:48:d3:5b:7d:d8:dc:7e:c2:
7b:92:ae:5c:24:1c:30:52:5d:24:c2:cb:ea:66:fc:39:c5:c1:
09:ea:a7:4c:89:1f:3c:28:8a:fe:2e:73:40:87:de:f3:b0:57:
7e:87:99:56:af:ca:6f:07:42:cd:f3:5d:7c:0f:da:1b:e2:0a:
2a:e3:c2:54:50:d3:01:ce:20:84:aa:05:cf:18:e7:6c:0f:35:
59:43:56:e4:98:f5:be:51:88:08:67:d3:ef:7c:91:b7:31:50:
96:c1:b8:c7:09:11:91:ab:95:97:1a:0a:61:fb:6d:77:3f:2e:
75:b4:be:f5:92:56:cd:0f:b0:eb:ff:31:6e:87:6c:93:c8:f2:
ba:0c:7a:d9:56:f5:82:27:ba:8f:f5:94:0d:b9:51:01:08:48:
f8:ec:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:27 2025 by rpki-client