Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1CvesUS_CmssuPbYHgkYWa29L18.roa
File: 1CvesUS_CmssuPbYHgkYWa29L18.roa (raw, json)
Hash identifier: dMi055LQrOrVBwYEz3J+ZeqoZVkqB5/9FQU9ve+kENg=
Subject key identifier: D4:2B:DE:B1:44:BF:0A:6B:2C:B8:F6:D8:1E:09:18:59:AD:BD:2F:5F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019428257ACF828415EE0D29A3766DD3DB01
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1CvesUS_CmssuPbYHgkYWa29L18.roa
Signing time: Thu 02 Jan 2025 17:52:12 +0000
ROA not before: Thu 02 Jan 2025 17:52:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215810
IP address blocks: 2a0f:b241:56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:7a:cf:82:84:15:ee:0d:29:a3:76:6d:d3:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42bdeb144bf0a6b2cb8f6d81e091859adbd2f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:17:29:5d:56:08:c4:4b:89:e1:b5:2d:50:
ec:ed:46:d8:d3:e9:39:f5:bc:b0:35:e6:9a:f9:d3:
70:3a:1e:9b:41:a3:1e:82:11:26:0c:ac:11:f2:03:
c1:13:33:4e:75:4f:4b:22:ce:fb:a9:a3:31:2c:26:
35:84:76:fe:4e:f3:f3:b1:2b:52:05:e8:c7:38:64:
0c:2e:09:5e:79:2d:9a:e9:8b:bf:31:24:d8:b0:33:
95:6c:e3:49:07:ac:b7:5f:2e:7a:4a:cf:57:9a:c8:
33:fd:5d:fc:bc:21:36:c0:e9:0a:79:74:50:a7:2e:
1a:f5:03:e9:aa:0e:31:2c:f4:55:dc:cf:04:94:02:
fe:71:e1:d5:98:f7:aa:ff:5c:15:f3:9e:03:98:71:
e5:bb:cd:28:ba:ce:71:5f:32:68:9c:83:96:df:4a:
f7:0c:0f:00:e5:a5:37:84:a9:78:19:05:5c:2a:aa:
78:b4:91:d8:c0:d0:fb:a2:47:29:e1:3a:7f:93:b2:
f6:9e:5f:a0:72:f3:d1:99:cf:1b:58:b7:76:ac:15:
64:4f:6e:dd:d1:28:5e:c3:69:5b:ac:c5:9a:42:69:
d8:60:bc:d6:24:ca:4a:f7:b9:87:b9:69:d0:74:7f:
c9:8e:74:a4:a3:54:3b:5e:c8:28:46:18:10:a6:ab:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:DE:B1:44:BF:0A:6B:2C:B8:F6:D8:1E:09:18:59:AD:BD:2F:5F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1CvesUS_CmssuPbYHgkYWa29L18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:56::/48
Signature Algorithm: sha256WithRSAEncryption
81:47:7b:66:0e:3e:6e:0d:67:10:38:ed:89:40:75:df:ea:6d:
89:a4:39:73:b3:f3:fa:bb:02:fb:3c:fb:72:2a:d3:4d:40:26:
b8:d3:a5:cd:41:7d:5c:d5:2f:e0:08:7d:78:f6:9b:5a:49:32:
4f:e4:f8:e0:3d:df:79:2b:9e:6b:11:2d:45:10:d7:ae:37:56:
b5:e6:63:44:5e:59:f8:4d:8a:a1:2a:1f:b9:a0:a9:72:80:29:
ad:47:f4:b9:e5:6d:88:9b:ca:b9:9e:a2:5f:a8:c3:63:23:6a:
22:17:be:88:e6:ba:11:58:c0:dd:21:3a:7d:2f:d6:7c:af:89:
ee:78:0d:e7:66:ea:71:08:56:60:5a:04:60:c0:3f:c6:fe:86:
61:0d:cf:57:61:e4:93:e7:e5:1d:ef:5a:f1:ba:36:14:62:cd:
d9:a1:1e:92:5f:62:21:d9:01:47:79:36:38:81:25:ab:76:90:
56:7a:22:bf:26:c4:41:03:25:50:e5:97:f2:fc:33:a5:d8:bf:
c9:7f:23:ba:36:bd:24:0e:5b:4f:50:f6:9a:20:eb:5e:f3:55:
50:e8:19:1b:c8:e9:e1:37:fe:e6:71:eb:65:3e:77:f3:90:06:
ef:53:33:77:fc:58:e9:c0:c4:da:73:30:24:18:d0:fd:c4:c9:
11:b2:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:31:39 2025 by rpki-client