Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/f31JM5R62FkZoMTgS5ZW91aPR_M.roa
File: f31JM5R62FkZoMTgS5ZW91aPR_M.roa (raw, json)
Hash identifier: QVIqQ/SGAQ5wpWVY00S0uRTQWsOXv08QV+Inv0hjrjQ=
Subject key identifier: 7F:7D:49:33:94:7A:D8:59:19:A0:C4:E0:4B:96:56:F7:56:8F:47:F3
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 01942369020587D8446E83A3212B0CC15274
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/f31JM5R62FkZoMTgS5ZW91aPR_M.roa
Signing time: Wed 01 Jan 2025 19:47:51 +0000
ROA not before: Wed 01 Jan 2025 19:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211207
IP address blocks: 2001:67c:b08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:02:05:87:d8:44:6e:83:a3:21:2b:0c:c1:52:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: Jan 1 19:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7d4933947ad85919a0c4e04b9656f7568f47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3f:6c:c1:2e:7a:be:e9:1f:5c:78:10:4c:71:
3b:2f:82:11:7f:fa:6c:c9:0c:70:63:e5:54:95:8f:
88:da:4d:3d:bd:51:7f:2a:69:70:97:cb:f1:9a:bd:
e7:90:4a:3c:e5:9a:93:9f:81:a3:77:55:e1:3a:b1:
6f:83:9d:d8:78:30:4f:60:b9:b6:d3:3d:50:8c:0e:
64:9f:e8:fb:03:07:77:4d:2b:e4:64:84:33:4b:fe:
31:3c:82:b9:69:b0:7f:bd:e9:2b:63:2f:74:5e:66:
95:67:0c:66:01:95:30:ff:d2:27:d5:4a:c7:6d:41:
3f:42:4a:1a:59:ed:ff:23:9a:8b:21:a8:df:d8:1a:
93:01:9d:d1:e4:34:93:6a:ae:28:d4:b8:8e:4e:cc:
8e:4a:75:e1:7f:27:b7:7d:bc:30:8d:b1:dd:66:79:
c2:a4:ad:a2:c4:b0:b6:fd:4e:c8:96:db:89:19:65:
53:80:bd:1b:09:48:e8:07:f9:3b:cc:0f:1f:dd:16:
ac:f2:b4:27:01:d3:65:0a:cf:39:97:ea:c5:57:8c:
4b:98:63:70:3b:38:c4:49:50:3a:3a:90:e2:13:3f:
99:28:85:c1:06:09:da:3d:e6:db:f5:02:a7:34:b4:
ee:bf:2e:63:b0:16:d5:95:30:6c:21:7e:48:17:8d:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:49:33:94:7A:D8:59:19:A0:C4:E0:4B:96:56:F7:56:8F:47:F3
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/f31JM5R62FkZoMTgS5ZW91aPR_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b08::/48
Signature Algorithm: sha256WithRSAEncryption
0e:39:0e:88:16:cf:ed:7e:66:ff:7d:83:7e:56:63:91:fc:db:
69:85:a7:cd:c4:fa:c3:77:3f:04:1f:52:6b:de:a6:90:aa:19:
79:ee:cb:54:67:93:90:9d:7f:c4:50:fd:d3:f2:af:db:35:f9:
c3:17:6f:eb:27:a2:95:31:6b:42:15:0a:e5:68:7d:b4:5d:c2:
73:46:75:45:da:e7:09:95:f9:f5:12:cf:47:ea:03:38:66:6d:
a4:f8:bd:9f:ec:7e:26:13:f6:84:85:34:d5:1d:bc:87:d7:52:
f9:6d:ef:e3:c5:74:77:91:ef:32:b7:f3:72:98:16:1c:f8:13:
35:a4:43:5d:76:6b:27:59:c2:29:98:54:cf:d0:71:95:f5:0a:
02:89:87:c0:09:08:82:78:63:7c:e4:af:c9:c2:c7:72:08:a0:
67:02:85:1e:77:f1:16:fc:c9:1d:41:d2:8e:67:05:b7:d0:ec:
0e:40:fa:47:d6:3b:f9:2f:a2:f6:5a:80:c3:c9:a3:0f:fa:b3:
b2:7a:05:d6:36:c2:77:8a:fe:af:2e:f2:5c:11:a4:0e:4a:f1:
77:37:1a:ff:2f:a6:cf:4b:c9:ec:58:f4:75:ec:1f:8c:b2:91:
e1:f0:67:ae:c8:fd:45:13:5e:79:29:b1:cd:4a:5c:25:63:4f:
41:b3:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:30 2025 by rpki-client