Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/NQTt_HtxBCzrK-bZblncxLPyets.roa
File: NQTt_HtxBCzrK-bZblncxLPyets.roa (raw, json)
Hash identifier: +niNy0LWT+hAFQqbWmv1VtMVE3/lk5Q83ZgjqqBPrSk=
Subject key identifier: 35:04:ED:FC:7B:71:04:2C:EB:2B:E6:D9:6E:59:DC:C4:B3:F2:7A:DB
Certificate issuer: /CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Certificate serial: 01856E8B1995C0553D6A056ACE8F3302D7DB
Authority key identifier: FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/NQTt_HtxBCzrK-bZblncxLPyets.roa
Signing time: Sun 01 Jan 2023 18:14:47 +0000
ROA not before: Sun 01 Jan 2023 18:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212548
IP address blocks: 2001:678:e88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:19:95:c0:55:3d:6a:05:6a:ce:8f:33:02:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Validity
Not Before: Jan 1 18:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3504edfc7b71042ceb2be6d96e59dcc4b3f27adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:e4:e3:46:65:6b:f6:a6:f4:2f:12:e8:4c:
53:c3:15:88:1a:7a:25:53:c0:37:ef:9d:b4:fa:a9:
9f:4d:fb:5b:06:52:bb:e1:f3:19:96:54:ab:82:da:
99:4e:b6:07:28:4a:18:98:df:1d:b0:c0:d6:bd:a8:
54:96:75:df:97:8a:d3:e1:da:be:79:3d:c2:6d:2d:
4c:71:15:d4:c4:e2:90:cd:1b:8a:cb:93:15:ca:7c:
8d:c5:db:9c:70:b7:b6:e4:4c:d8:88:89:84:88:99:
36:c7:64:28:5c:1c:34:5b:12:16:3b:54:86:d9:30:
b4:d7:5e:71:ad:c0:b7:ea:03:56:0b:6d:96:f8:43:
be:47:63:96:c7:d0:91:4d:f2:39:88:38:37:95:ec:
1c:4d:11:71:29:91:83:27:4a:6f:ce:ce:77:3b:e6:
e8:77:ad:14:d6:1b:e3:48:43:71:79:8d:48:5d:d5:
6d:db:e6:71:64:90:6b:48:38:54:a8:86:2a:16:e7:
b3:b5:de:e3:ca:02:a2:93:7a:12:80:3e:4d:97:76:
92:d6:00:4f:c7:b9:3f:49:44:23:3b:b7:6e:82:a1:
cd:0d:89:7c:b9:bb:a6:a1:2a:a1:c9:87:44:d2:54:
fd:e6:a5:fc:67:2c:0b:2e:36:04:51:be:29:0a:92:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:ED:FC:7B:71:04:2C:EB:2B:E6:D9:6E:59:DC:C4:B3:F2:7A:DB
X509v3 Authority Key Identifier:
keyid:FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/NQTt_HtxBCzrK-bZblncxLPyets.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e88::/48
Signature Algorithm: sha256WithRSAEncryption
a4:6d:d9:83:d0:ee:48:04:8e:da:a8:31:5e:28:c4:16:3b:4e:
dd:d9:47:ee:a6:ab:31:a0:80:77:97:0b:a2:99:34:de:dc:a0:
8d:eb:4c:f1:28:d6:61:1b:f7:00:f6:78:05:bc:cb:af:1b:cf:
9d:bf:fb:0c:ba:b6:cd:fe:bc:74:ab:aa:2c:a1:6e:e6:d8:49:
ef:c6:7f:fd:0a:ab:b7:7a:ce:8a:42:1a:d3:59:32:ca:a3:71:
84:b7:67:76:f6:33:52:cb:75:bd:1c:01:3d:35:02:43:b0:53:
3b:a3:2c:41:16:21:dd:13:be:0b:95:00:f4:cf:91:1a:9a:28:
dd:e0:d5:a7:2d:ab:4f:ef:3a:45:3b:44:cd:d1:3a:6e:1e:20:
b3:e5:28:0a:02:d4:73:5b:8f:f9:72:17:86:9b:d2:b2:05:99:
85:34:2b:b8:29:f5:e8:c4:b8:b3:3c:27:4d:84:95:ef:f9:c9:
c4:85:3a:a4:e8:7b:e9:b5:11:d4:8d:65:16:e3:c0:c3:61:76:
69:54:10:a2:c0:67:05:41:ca:f2:b0:d8:64:2a:64:4e:e2:6e:
31:15:aa:f9:72:a8:c2:b6:b6:32:09:58:eb:7a:86:ca:7d:3b:
b4:20:ff:da:c2:89:be:3d:45:30:8f:88:83:94:72:03:23:a9:
f5:26:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:44 2025 by rpki-client