Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CBi8czBabHvhqGzteJtxyqOe8BY.roa
File: CBi8czBabHvhqGzteJtxyqOe8BY.roa (raw, json)
Hash identifier: 4kJvqNByMRN5f7YaaLlJEsWTDL3nTgFnmlxg2A5niAA=
Subject key identifier: 08:18:BC:73:30:5A:6C:7B:E1:A8:6C:ED:78:9B:71:CA:A3:9E:F0:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019586AD69C2BE0E24D3E2A18927400FD90E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CBi8czBabHvhqGzteJtxyqOe8BY.roa
Signing time: Tue 11 Mar 2025 19:27:46 +0000
ROA not before: Tue 11 Mar 2025 19:27:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 2a0a:2d05:19ad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:ad:69:c2:be:0e:24:d3:e2:a1:89:27:40:0f:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 11 19:27:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0818bc73305a6c7be1a86ced789b71caa39ef016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:32:2a:7c:04:c0:bf:9b:2c:d8:78:41:7c:
29:fe:6a:a9:ee:72:a8:06:88:b0:23:2b:82:00:0c:
6a:87:1d:e0:36:48:a7:1f:a3:d8:d2:b0:33:e3:a4:
b6:d7:c8:52:e3:c0:cb:f2:5a:14:81:70:57:fb:36:
b6:13:2e:1c:3e:9b:74:e4:d6:bc:80:9a:58:55:6f:
1e:b5:48:08:98:fe:6b:1d:3c:c8:31:b0:c8:46:29:
01:a8:fe:bc:bc:8f:ca:32:46:c8:a8:42:2b:d4:91:
33:5a:0e:c1:8e:2b:0d:18:5b:a1:21:fa:a6:53:64:
ba:10:ba:19:45:d5:e1:57:59:b9:ff:71:09:80:45:
f8:bc:29:8c:5c:db:6a:ec:23:19:0e:e5:7c:ae:91:
5e:9e:01:06:40:48:5e:13:86:bf:e6:f6:dc:d0:ae:
0a:5d:ae:b1:25:26:d9:ff:c0:2c:c1:83:23:b8:e7:
a5:4e:1d:ea:aa:ad:64:40:fc:de:b5:b1:5d:77:88:
fc:56:4f:43:09:ed:17:97:a9:5b:d2:f6:4a:ee:8e:
42:95:73:d3:ed:ec:88:68:f8:5e:76:6c:63:da:0e:
19:df:85:a4:41:c4:58:a7:1f:6a:fc:fd:41:ae:cd:
2c:2e:9d:f3:b9:2d:a4:a1:65:85:ef:3c:6d:1c:a2:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:BC:73:30:5A:6C:7B:E1:A8:6C:ED:78:9B:71:CA:A3:9E:F0:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CBi8czBabHvhqGzteJtxyqOe8BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d05:19ad::/48
Signature Algorithm: sha256WithRSAEncryption
c0:97:2d:5e:43:06:6a:08:14:c4:ad:ec:7e:f0:17:c1:05:6a:
75:f1:74:52:c9:dc:d0:52:66:1e:5b:7a:47:94:70:f4:9a:87:
28:95:bf:83:46:18:da:a6:a4:87:c5:b5:de:23:10:36:f8:66:
c7:20:8e:88:7c:c4:fc:91:51:b6:26:e3:34:07:7e:f6:00:bf:
09:af:98:24:a1:69:b1:ba:99:d5:83:37:ff:55:03:31:6c:5c:
99:fc:55:4b:21:15:50:bd:a7:9e:be:ea:80:d0:f1:40:60:da:
45:73:6f:d3:2a:5b:35:6e:cf:b1:60:08:f4:e1:da:57:68:ce:
35:c1:9f:6f:73:dd:19:9f:3e:a0:78:e8:8c:07:83:53:a0:85:
96:ac:8b:3b:ff:fb:a7:05:81:28:6c:b3:24:3d:3d:78:e1:da:
e7:81:14:b9:19:28:13:58:43:dd:46:15:6a:5a:ab:b9:58:89:
53:59:89:d7:22:81:6d:d2:ec:dc:b1:ee:a3:bf:f4:70:79:e3:
20:8f:7b:cc:7e:95:50:25:b9:3f:a2:6f:81:c5:f9:82:4c:bb:
61:81:ae:94:e0:bd:30:91:cb:db:88:08:cc:da:9b:02:56:26:
93:90:d9:08:36:9c:df:7a:f1:a4:c5:93:60:5b:9b:c2:f1:67:
94:df:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:26:39 2025 by rpki-client