Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DWmHkoyKEBFflxf1a74mxVCV9uc.roa
File: DWmHkoyKEBFflxf1a74mxVCV9uc.roa (raw, json)
Hash identifier: tJm366nCU8ca4o1lQReN7NMOICfcXFzB+wUA9uMhC7I=
Subject key identifier: 0D:69:87:92:8C:8A:10:11:5F:97:17:F5:6B:BE:26:C5:50:95:F6:E7
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01902B8637DB012E26877BFD1139E8C25AC0
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DWmHkoyKEBFflxf1a74mxVCV9uc.roa
Signing time: Tue 18 Jun 2024 13:25:34 +0000
ROA not before: Tue 18 Jun 2024 13:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215750
IP address blocks: 2a0f:7803:fe40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:86:37:db:01:2e:26:87:7b:fd:11:39:e8:c2:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 18 13:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d6987928c8a10115f9717f56bbe26c55095f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:8a:e5:b6:6f:1e:e7:76:67:fa:d3:77:b8:
a5:b2:f5:a0:34:a5:55:75:08:24:3a:3e:ae:d0:43:
3a:74:16:c4:1b:e7:94:a5:bf:20:21:08:5e:91:59:
68:e7:cf:ff:70:94:2c:9a:29:dd:cc:89:a3:11:36:
56:d4:60:3d:82:e3:94:19:cf:0e:2f:68:fb:11:f9:
39:b4:11:1a:c4:47:f9:a5:21:3b:f2:b3:b5:e5:a2:
6d:64:62:52:85:85:fd:3c:68:50:64:84:6d:9e:25:
38:85:b2:bf:aa:c2:0e:4e:e2:56:c4:63:c4:fe:cf:
c5:6f:e0:36:10:31:ce:ea:28:78:0e:b7:bb:5d:61:
6b:72:69:11:7b:7e:75:3b:3b:51:1f:06:89:95:79:
c7:37:ca:bb:b5:3f:34:c4:8c:3a:f5:2d:bf:b2:e0:
6e:cd:3c:35:79:36:87:d1:40:31:c7:51:9e:e6:e6:
ff:a5:23:fe:33:85:de:ad:fe:d5:be:33:45:b3:39:
2a:4e:a1:c6:55:c3:67:0c:c5:84:fc:cd:b7:a3:75:
67:01:17:f6:be:9f:8c:45:55:57:3d:04:87:9b:a1:
e6:b6:58:56:3f:9e:13:1a:af:fe:a7:14:d4:af:55:
5c:44:1f:ba:06:d5:f9:f2:25:8b:9f:48:dc:e2:2a:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:87:92:8C:8A:10:11:5F:97:17:F5:6B:BE:26:C5:50:95:F6:E7
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/DWmHkoyKEBFflxf1a74mxVCV9uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe40::/44
Signature Algorithm: sha256WithRSAEncryption
b6:ca:a5:59:fe:68:1c:92:f3:f0:ce:b2:b5:93:88:84:73:42:
ec:de:7e:8b:c3:93:db:aa:95:42:77:4a:fa:e0:b3:0c:63:5e:
08:cd:c1:6c:a6:b1:dc:63:4a:5b:66:c6:27:05:3a:f2:ee:cb:
8e:80:4a:c4:2d:e8:62:fc:29:5c:21:28:a7:3d:3f:05:eb:57:
8d:a5:53:20:64:69:bc:de:2a:cf:53:e1:13:ed:8b:f4:c9:2e:
3f:fb:df:a0:cf:38:80:56:7b:2a:c3:43:f9:15:8b:f1:92:68:
30:cc:60:9d:44:66:ed:0b:07:c4:7b:52:78:18:b3:af:08:16:
53:f7:f7:79:e8:f0:f2:e4:d7:82:bd:3c:4b:a0:dd:8c:27:6c:
d1:84:24:af:e6:97:31:ad:3f:94:6f:9e:2b:94:bc:5a:b7:93:
d2:51:b4:fa:7a:fc:de:25:7c:e4:59:e6:ed:d1:1c:a5:34:9b:
ea:fa:58:53:a5:f4:a5:08:d4:e2:5f:92:fa:ce:48:58:20:7c:
0a:9f:dc:d3:3a:91:62:f4:d1:ae:fb:40:83:39:c8:cf:52:55:
05:cd:2b:93:17:72:da:1a:61:2f:64:46:91:0e:fb:ae:bb:26:
64:43:c2:9a:cc:b7:87:a5:fc:af:2f:31:dc:e8:f6:8c:d7:59:
99:1f:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:52 2025 by rpki-client