Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/tnCEZfbo7-8Y6d6dy9KZFlIxvog.roa
File: tnCEZfbo7-8Y6d6dy9KZFlIxvog.roa (raw, json)
Hash identifier: WGbu++0vc0x1vvXrWA7Vn/SyQ0+5IydoqtBbBOCdves=
Subject key identifier: B6:70:84:65:F6:E8:EF:EF:18:E9:DE:9D:CB:D2:99:16:52:31:BE:88
Certificate issuer: /CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Certificate serial: 0193206ACB3D8850597FBACBA3D97132B020
Authority key identifier: C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/tnCEZfbo7-8Y6d6dy9KZFlIxvog.roa
Signing time: Tue 12 Nov 2024 12:48:09 +0000
ROA not before: Tue 12 Nov 2024 12:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212855
IP address blocks: 2001:67c:f8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:6a:cb:3d:88:50:59:7f:ba:cb:a3:d9:71:32:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Validity
Not Before: Nov 12 12:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6708465f6e8efef18e9de9dcbd299165231be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:fb:17:03:f3:dd:68:e9:b9:ac:76:40:7a:
db:d9:2d:18:f0:76:2d:bf:dc:e3:45:cb:f9:22:67:
68:01:42:89:a9:72:3a:4a:1b:e5:e8:ce:30:5a:09:
4e:f4:11:b0:39:bd:8c:ed:e6:70:b9:0c:19:74:6d:
13:85:77:b7:32:b7:13:d5:17:f9:17:35:d2:7e:31:
b4:ba:a1:f5:42:e4:ab:f7:68:52:68:43:d1:83:dd:
d2:e8:38:b2:da:2e:22:9a:d8:23:cc:6d:ce:8a:02:
7f:7a:5e:2b:12:46:3e:aa:d6:39:ee:0b:41:8e:f6:
20:a7:ab:cd:b4:f1:ed:13:47:42:8d:45:c6:83:1b:
74:59:04:6f:12:b9:cb:9b:0c:83:2a:41:4b:08:95:
ea:68:cd:a9:fd:1f:45:4d:32:9d:d1:6e:37:2b:e1:
65:c1:99:2c:e4:00:61:cd:cd:08:58:fd:95:05:b7:
2b:85:ab:ed:76:25:01:df:6e:1b:20:62:53:03:96:
8f:b7:8f:ff:16:55:42:00:f7:81:ce:a0:94:6e:3f:
0d:1a:2d:77:1c:a2:1a:bb:c0:15:aa:cb:a5:f8:18:
19:b8:1d:aa:3a:cd:e0:47:3e:08:3f:3d:06:34:34:
32:de:8a:33:d1:c8:33:dd:2f:c4:e2:76:ea:6f:40:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:84:65:F6:E8:EF:EF:18:E9:DE:9D:CB:D2:99:16:52:31:BE:88
X509v3 Authority Key Identifier:
keyid:C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/tnCEZfbo7-8Y6d6dy9KZFlIxvog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ce:7d:ca:7e:9b:70:20:74:ce:4a:be:cc:75:32:dc:53:4c:
20:56:04:4c:f5:63:f1:aa:4f:b4:ba:d1:00:c4:f1:6d:25:19:
bb:fb:8b:3c:d8:6f:ea:16:cc:c0:7c:74:2f:ad:24:90:a1:c2:
ec:9c:e9:92:4a:d9:ad:3f:cd:f1:d0:4b:8d:85:99:05:69:07:
f2:bf:b7:0f:f1:5d:ad:36:18:29:6e:27:3a:24:d7:ce:53:e7:
bd:9c:6b:44:73:f5:0a:4a:16:6b:76:67:66:3e:3b:37:2f:ba:
82:f9:71:04:d2:1c:24:23:3f:db:3b:73:d6:9a:fe:4c:85:3d:
0d:3f:00:d0:38:ba:da:63:35:c1:9f:c9:cb:a1:fc:25:34:70:
66:fd:c1:4b:0d:58:3b:2d:84:a4:67:4c:6e:56:79:37:d3:7d:
33:6c:29:75:65:fb:b2:c3:72:cf:ed:64:14:d0:09:c0:42:f0:
4c:9c:69:5f:53:a7:c2:63:42:2b:ad:81:1c:67:09:a9:23:06:
61:89:c1:60:4a:ed:62:e6:32:49:b1:10:64:c8:51:45:6d:14:
53:5b:df:41:24:37:56:9a:46:d9:43:15:a9:be:50:22:fe:a8:
2c:6f:47:dd:bc:f0:c5:19:ab:1b:da:94:b7:81:36:10:0e:45:
d5:3a:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:25 2025 by rpki-client