Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/7vPaeyI0ln68dhOnAOFd-xv37nM.roa
File: 7vPaeyI0ln68dhOnAOFd-xv37nM.roa (raw, json)
Hash identifier: ZgJ32R2xiY7rG7KLNZLVMbbgQ70wWnVYAoeDmfccZx4=
Subject key identifier: EE:F3:DA:7B:22:34:96:7E:BC:76:13:A7:00:E1:5D:FB:1B:F7:EE:73
Certificate issuer: /CN=022d580f4a069358f8fa57ef065e18f5fe936980
Certificate serial: 0194228E27A69B14B02F2FE8A6774BD8410A
Authority key identifier: 02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/7vPaeyI0ln68dhOnAOFd-xv37nM.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200372
IP address blocks: 2001:67c:b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:a6:9b:14:b0:2f:2f:e8:a6:77:4b:d8:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022d580f4a069358f8fa57ef065e18f5fe936980
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef3da7b2234967ebc7613a700e15dfb1bf7ee73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:96:66:c9:be:01:d8:0c:09:c8:07:f6:6f:
9b:ab:66:e0:06:93:fe:cd:1a:3c:d5:e2:2a:6e:4b:
0e:c1:c1:f7:15:6c:88:32:3b:7b:2f:92:f9:ac:59:
f5:f6:36:32:5b:c6:bb:1d:dd:b4:b2:96:a3:f7:ff:
5e:7f:64:2f:2d:03:e9:1a:c9:e7:ae:2b:15:8c:9c:
92:0d:2f:a3:f4:67:02:13:55:72:a4:88:85:ce:5c:
e5:71:40:63:00:ad:67:51:1e:46:cd:bd:b2:4d:1d:
ae:4a:c8:b2:89:4a:03:99:62:3c:01:55:94:a1:51:
c8:52:44:d9:22:a8:b8:2d:ac:cb:7c:67:e9:fb:6f:
6d:e9:85:48:1c:69:4b:ab:6f:35:bc:86:89:ce:9a:
98:91:21:cb:20:93:84:b5:ae:4f:44:b2:e2:fe:f0:
f4:27:bb:ff:08:1d:ce:8a:72:3c:ef:ea:9a:f7:5c:
d3:11:23:9f:85:f7:58:4a:41:7a:0d:84:88:67:b3:
f1:06:29:8a:ae:3b:49:1b:96:d1:1c:e8:96:ee:a6:
ad:e8:06:28:1f:9c:70:8e:bd:2b:85:7e:e8:52:64:
27:25:b5:ad:3b:a3:7d:a5:1c:7e:1e:74:a6:15:d6:
1e:61:36:d2:a0:cc:3c:b6:17:c0:84:07:cb:25:1d:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:DA:7B:22:34:96:7E:BC:76:13:A7:00:E1:5D:FB:1B:F7:EE:73
X509v3 Authority Key Identifier:
keyid:02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/7vPaeyI0ln68dhOnAOFd-xv37nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b40::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a6:fd:80:8a:03:5d:99:08:7e:57:d0:55:2a:7e:a5:8a:66:
f4:ed:09:24:4c:cd:d5:69:8a:4e:3b:0c:0c:09:b8:42:35:b8:
92:b6:9c:25:07:6f:5f:cc:40:b4:50:3f:3f:cd:19:6e:d8:db:
3e:7f:cb:6f:fc:0f:4e:8a:86:7f:65:7e:08:54:15:c3:f0:14:
61:f6:c9:43:89:ad:c0:17:2d:e4:d3:d1:b1:3b:4d:0d:68:ec:
94:a7:6c:07:2d:15:02:60:c8:68:89:c3:17:56:d5:28:fe:2a:
a8:c8:27:05:d0:77:60:7f:b3:82:c3:cf:f2:8d:4a:0b:6a:54:
dd:0b:fe:57:93:4c:dd:cc:cc:21:ba:59:e8:ab:49:5d:30:30:
41:aa:5c:f6:29:ae:0e:b5:81:22:e3:88:11:fe:80:65:18:00:
c1:db:3f:6a:dc:3e:83:51:f6:4a:93:63:14:58:b1:16:be:1c:
63:a0:ed:66:84:92:d3:e6:d4:b6:14:ff:07:f7:3c:87:8a:c9:
d5:fa:ec:64:bd:a8:ef:5a:8a:b5:64:07:19:ed:ad:42:f3:81:
e4:32:b8:0d:2b:a2:7f:1e:3c:42:81:a1:7f:05:b1:57:69:cd:
4a:b6:ae:bd:8c:9f:92:5e:0c:dc:30:0c:13:d0:29:26:c8:cc:
eb:37:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:06 2025 by rpki-client