Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/v_AyBzxVLywfZfubO2gIoD6HYcA.roa
File: v_AyBzxVLywfZfubO2gIoD6HYcA.roa (raw, json)
Hash identifier: Bu9PXYjul900SWhv6yFd0LRvrAQ/AIGISKQM4ajk50Y=
Subject key identifier: BF:F0:32:07:3C:55:2F:2C:1F:65:FB:9B:3B:68:08:A0:3E:87:61:C0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0194887660391C11BFBA0A967A8C7538C49D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/v_AyBzxVLywfZfubO2gIoD6HYcA.roa
Signing time: Tue 21 Jan 2025 10:44:06 +0000
ROA not before: Tue 21 Jan 2025 10:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 2a0d:1ac7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:76:60:39:1c:11:bf:ba:0a:96:7a:8c:75:38:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 21 10:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff032073c552f2c1f65fb9b3b6808a03e8761c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:94:0c:57:da:13:39:75:ae:fa:cb:81:59:
70:45:78:5c:aa:aa:25:53:bc:06:b2:9d:b6:b8:15:
3c:40:57:6c:2f:3c:48:86:e7:ed:1c:15:b5:b1:95:
a9:f2:29:77:7a:e3:1b:41:4a:73:1e:4e:d4:44:1b:
be:aa:a6:20:97:69:30:64:0a:0e:1f:e1:00:60:15:
f6:fc:d9:32:fc:a4:38:1d:68:9d:27:c5:f0:7d:4b:
c9:ad:dc:4a:0a:97:1f:49:f9:31:4e:99:3a:f6:d6:
c3:f4:86:98:1b:6b:e8:ad:b1:7a:a3:e4:93:cf:28:
b9:96:75:c3:e3:38:5f:74:21:36:59:f0:c1:9f:8b:
fe:d6:5b:36:d2:d3:6d:4c:52:79:38:a1:4c:ee:21:
63:a6:95:a4:7a:a2:24:f5:ce:c7:ee:8a:81:3e:ea:
82:de:6e:39:8b:85:a3:f6:c1:53:b5:9d:ce:be:7e:
bb:73:3d:01:45:28:44:31:bd:82:4f:9f:7c:7a:a1:
db:f3:8b:70:ff:6a:c2:05:bd:49:ee:f5:d0:eb:b9:
7d:fb:0a:f8:44:3a:7e:ff:bb:25:72:90:27:ad:16:
ca:cc:92:a5:d7:eb:c5:56:58:4d:08:8b:6c:cf:99:
12:8d:f7:a0:35:50:2d:17:a1:82:27:2e:ad:8e:dd:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:32:07:3C:55:2F:2C:1F:65:FB:9B:3B:68:08:A0:3E:87:61:C0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/v_AyBzxVLywfZfubO2gIoD6HYcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1ac7::/32
Signature Algorithm: sha256WithRSAEncryption
6d:4b:28:60:25:cd:1d:b4:9f:8f:b1:fc:b9:fd:58:ca:ed:39:
66:59:7e:80:fc:6a:e6:a2:c1:bf:6b:08:01:c4:9f:bc:d0:25:
6c:32:bc:af:7a:e6:4b:2e:28:1f:e9:c6:35:2a:6c:d4:48:35:
36:44:11:6f:f7:15:48:bc:09:d9:4c:15:f6:c4:2a:2c:e7:c0:
cd:aa:f3:9c:29:82:e3:81:d2:58:d1:6f:ac:62:98:b2:ee:36:
fa:d4:6b:bb:2a:a5:ac:c5:72:f3:0a:8a:1b:17:27:29:8e:a5:
57:b9:8f:71:a8:dd:b8:c5:fe:1d:03:48:10:45:2a:76:50:da:
bf:a2:5d:15:23:48:e1:e2:4d:a8:51:74:06:ab:0a:90:b3:c0:
e5:9e:6d:a1:ef:51:bb:f6:5f:8f:93:04:cd:36:b0:58:d7:68:
ec:df:81:4e:c9:cc:57:8b:25:d4:d9:02:33:a0:7b:99:30:c3:
77:d2:ff:fb:d1:76:fb:a3:c6:0b:20:b3:2c:7c:f1:cf:7e:e3:
4b:27:a3:b2:c1:60:34:a1:3e:c7:08:d3:6f:15:1b:fa:29:13:
3d:15:69:78:cd:06:ad:b5:ad:a2:0f:cd:bc:b3:61:8e:69:62:
5f:ce:91:7f:3d:89:42:40:5c:15:2a:34:e2:cf:9e:cf:6e:50:
61:3a:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:36 2025 by rpki-client