Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/N1-oC8Y4pdbHagsKxS8QZdguNVg.roa
File: N1-oC8Y4pdbHagsKxS8QZdguNVg.roa (raw, json)
Hash identifier: gZWEGAG/oLGbb8Qvg3AqcgtEsGoIF2adirjf4aw1OlA=
Subject key identifier: 37:5F:A8:0B:C6:38:A5:D6:C7:6A:0B:0A:C5:2F:10:65:D8:2E:35:58
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B051F5484B4816C13158269DFCCE
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/N1-oC8Y4pdbHagsKxS8QZdguNVg.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b0:51:f5:48:4b:48:16:c1:31:58:26:9d:fc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=375fa80bc638a5d6c76a0b0ac52f1065d82e3558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:2f:a6:e7:d9:97:f0:27:b1:72:54:6f:00:
ae:ff:33:4d:76:54:2f:73:8d:92:ea:60:d9:e0:5b:
1c:99:9e:e4:85:f7:92:be:f3:1c:c8:76:5d:1b:55:
ac:75:86:c5:5f:9b:d0:7a:08:fb:44:70:1f:db:c5:
0f:89:54:d5:d0:ec:b7:4b:13:43:5c:8d:cd:e3:c2:
69:f2:83:bb:6f:52:20:d4:59:d0:de:d3:c4:de:1d:
eb:5e:7b:03:50:0c:17:db:c5:89:07:b7:9a:ee:25:
62:15:de:fb:5a:01:7d:1b:4b:dd:6f:5b:9e:ac:25:
7a:aa:c4:98:1f:3a:1e:29:9f:4e:46:b9:35:a2:85:
50:32:eb:69:a1:bc:a4:66:70:c5:ff:95:58:83:7a:
f5:bb:09:b0:50:9b:1b:ba:25:f0:11:b5:2b:68:91:
9d:2a:2d:4c:bb:7b:b3:4a:86:07:79:2c:69:1c:8f:
87:9c:37:43:eb:3c:12:36:0f:50:c1:da:49:61:15:
fa:0d:34:62:17:63:86:ad:2e:92:16:27:5f:cd:54:
e1:8a:5a:ea:32:3e:6d:4a:2e:54:ca:50:4d:29:5c:
58:fb:c2:6b:42:ad:65:ad:f6:b7:e5:bf:a5:f3:2c:
93:06:65:bf:79:dd:ee:84:7b:61:b6:e7:bb:80:db:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:A8:0B:C6:38:A5:D6:C7:6A:0B:0A:C5:2F:10:65:D8:2E:35:58
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/N1-oC8Y4pdbHagsKxS8QZdguNVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1060::/48
Signature Algorithm: sha256WithRSAEncryption
10:d2:d5:6e:e7:43:99:44:df:d7:c8:fe:af:3b:7b:f0:28:fb:
fc:2f:e4:28:3d:ab:b4:ed:23:74:49:52:73:65:9a:30:37:04:
d5:4b:0a:60:1f:2f:c6:8d:2f:d9:82:47:31:fe:29:c3:8f:28:
5a:43:80:71:2b:bf:19:9b:cd:6d:b7:48:a7:fa:63:ca:b6:fb:
91:d8:a8:35:04:25:8a:d8:db:57:27:59:cd:04:e5:08:24:61:
b9:87:35:ae:ab:af:fc:a2:ca:b1:4a:84:31:47:50:8d:00:e8:
00:6f:df:4e:15:91:6f:47:fd:44:af:74:91:d5:c8:93:c6:f5:
e8:1b:e3:fe:10:ff:30:46:f8:36:27:cc:e0:b4:f8:da:8b:27:
82:cc:90:fa:c3:e4:e9:25:2e:96:47:99:1f:db:7f:45:8f:12:
56:6d:09:5c:a0:53:4b:db:23:6f:16:4a:9b:c3:4b:fd:90:c9:
e9:77:fd:d4:6d:4c:c6:ee:8c:db:4c:21:e7:eb:e1:5f:bc:0b:
30:61:83:95:67:6e:45:73:dd:f3:01:73:a7:32:2c:14:bf:55:
3d:7d:67:fd:80:f6:5a:f3:17:43:d7:e3:24:5e:42:5e:64:70:
87:14:96:b9:6c:4b:4d:a3:46:a7:7d:d1:04:6a:af:3f:1c:49:
7c:73:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:47 2025 by rpki-client