Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/v0fVJgWPfAdvY6DnBONOqMJmBlw.roa
File: v0fVJgWPfAdvY6DnBONOqMJmBlw.roa (raw, json)
Hash identifier: KmVG9o2oCaEGQp0L/XulNLE+wev6mFnKUr1S/1eXz8s=
Subject key identifier: BF:47:D5:26:05:8F:7C:07:6F:63:A0:E7:04:E3:4E:A8:C2:66:06:5C
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0184C85FEE6E5828C3E2181FDCDE16E9A013
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/v0fVJgWPfAdvY6DnBONOqMJmBlw.roa
Signing time: Wed 30 Nov 2022 11:50:40 +0000
ROA not before: Wed 30 Nov 2022 11:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51105
IP address blocks: 2a01:8ae0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:5f:ee:6e:58:28:c3:e2:18:1f:dc:de:16:e9:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Nov 30 11:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf47d526058f7c076f63a0e704e34ea8c266065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:a8:65:98:13:3f:0e:d0:11:5e:8f:33:b2:
1c:cc:a9:b6:58:aa:da:b9:33:42:cd:13:85:f1:d6:
5b:bb:ff:1f:56:57:6a:20:b2:66:13:3a:ac:9d:9c:
3f:37:35:74:fd:cd:bc:3a:9d:62:19:cc:c5:99:c8:
bb:e9:e6:49:2d:db:3d:33:82:4e:08:0b:3f:70:e9:
e8:d3:99:36:6a:cb:37:fd:b0:88:0f:6c:c2:d8:02:
9e:98:cc:62:d3:0e:b4:7d:a9:65:02:3e:4c:38:34:
55:b3:16:0e:0c:4d:e0:33:45:f3:4c:a9:eb:70:8f:
ca:b2:70:8b:db:b9:05:77:30:1a:3a:5c:03:76:00:
b9:1f:12:d0:a2:76:81:0d:fb:62:12:a3:6c:15:4b:
ea:84:a3:48:29:5e:06:d8:9a:5e:b3:26:22:c1:78:
71:91:b2:f6:a9:21:dd:2e:41:db:ef:c9:f1:25:5c:
d8:0b:06:93:c1:98:69:8b:89:1b:62:e8:a1:27:ee:
94:31:83:e8:75:dd:09:a5:fd:0d:2a:c6:62:7b:d6:
8c:52:22:91:14:12:e2:51:fb:62:be:a7:39:df:d4:
30:7b:dc:17:da:1c:6c:15:61:97:c1:ea:df:34:47:
6e:b9:90:9b:fe:81:a9:22:fc:15:71:df:aa:0b:de:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:47:D5:26:05:8F:7C:07:6F:63:A0:E7:04:E3:4E:A8:C2:66:06:5C
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/v0fVJgWPfAdvY6DnBONOqMJmBlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:17:aa:0f:b1:3a:32:cc:c1:e7:6c:6e:3f:c7:69:8f:f4:07:
9a:40:09:b9:06:5a:a9:c6:ea:28:8f:20:53:67:68:22:bf:4d:
84:79:5d:11:b4:68:53:e3:4a:8e:eb:96:e3:91:1d:83:95:f5:
4a:2b:e5:89:16:8c:56:e3:da:e7:1d:dc:02:e5:77:76:b7:1f:
cb:56:0f:5b:97:f4:9c:9d:b4:ad:ec:0d:a9:9e:3d:2f:56:c8:
8a:3e:4a:f0:46:ea:c9:8f:67:c2:13:8e:7a:7a:03:83:f3:80:
9b:c8:eb:5a:c0:fa:8a:e5:5c:2f:b9:4e:ce:5e:49:71:0b:e4:
5b:29:72:33:bf:0c:ea:63:06:6e:ef:c5:a0:a0:59:0a:07:47:
a3:67:43:42:c2:2f:60:d7:55:7e:fa:2b:2d:9c:1e:c2:3a:6f:
14:0b:7f:a0:06:33:4d:a3:7f:1e:ca:3b:44:8f:6a:e0:88:b6:
fb:39:b3:60:9f:fb:23:60:1d:d9:d4:4f:c4:d4:a6:98:6f:38:
45:88:aa:3e:cd:4e:39:b4:59:1f:0f:eb:df:65:f3:20:a1:82:
cd:dd:3d:bd:db:22:4b:02:db:f0:77:88:09:3b:33:67:ca:6a:
f4:bd:fb:33:6a:db:5e:a5:f0:1d:0f:da:ad:4d:cd:a0:a4:63:
78:c2:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:39 2025 by rpki-client