Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v7KWNN4Xqn70Ih0Y7vKH2FbxLKk.roa
File: v7KWNN4Xqn70Ih0Y7vKH2FbxLKk.roa (raw, json)
Hash identifier: cFWwmI27rnCd6WBxVUsWmtOa6mbVTs/dKhfjXK6C5EE=
Subject key identifier: BF:B2:96:34:DE:17:AA:7E:F4:22:1D:18:EE:F2:87:D8:56:F1:2C:A9
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018FC078079CCA236D8AD30ECC4578DEA7B2
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v7KWNN4Xqn70Ih0Y7vKH2FbxLKk.roa
Signing time: Tue 28 May 2024 18:30:42 +0000
ROA not before: Tue 28 May 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151331
IP address blocks: 2a0f:7802:e100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:78:07:9c:ca:23:6d:8a:d3:0e:cc:45:78:de:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: May 28 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb29634de17aa7ef4221d18eef287d856f12ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:c5:d6:8b:12:d9:4c:7b:34:a7:73:8d:aa:
5d:7a:7e:04:2a:c5:74:84:cc:06:f7:d8:65:c6:50:
1c:89:25:81:0c:ef:aa:3c:07:b0:b7:d4:bc:9d:db:
79:b2:6a:56:0f:3e:44:fc:22:87:9d:46:20:ba:b7:
29:76:70:fb:27:1a:b6:80:37:af:04:1a:5d:75:aa:
7e:c1:d6:a8:7b:95:f7:6e:1b:5f:e2:a0:2b:ae:80:
39:e9:fe:3f:ba:a5:db:b3:d5:2c:bb:9d:51:24:24:
af:21:79:65:27:78:1d:5a:48:98:52:e8:bf:53:0e:
5c:2f:12:49:a3:63:f3:83:c3:df:95:31:ef:7d:3d:
88:87:a9:89:7d:d0:e3:e5:b2:1e:e6:7b:3f:cf:e7:
4b:e5:20:ff:99:b4:ef:25:a0:d1:3f:87:e1:a1:07:
6b:d1:e6:22:e2:eb:6c:16:09:5c:22:f7:05:4b:f1:
4d:b4:d8:76:33:03:c4:62:ed:4b:56:fe:0f:b8:45:
8c:cb:d4:0f:29:5f:54:23:9b:0e:d8:b3:20:6e:03:
67:bb:d1:8a:e9:48:30:bb:38:59:5e:a7:b6:a4:a3:
09:d9:da:72:80:e1:8e:72:ee:ff:ac:cb:c7:c9:49:
53:93:03:01:e5:20:57:8f:80:00:54:b2:2d:23:82:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B2:96:34:DE:17:AA:7E:F4:22:1D:18:EE:F2:87:D8:56:F1:2C:A9
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/v7KWNN4Xqn70Ih0Y7vKH2FbxLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e100::/40
Signature Algorithm: sha256WithRSAEncryption
6e:c3:6a:ee:ef:7a:8e:8c:c4:de:f3:13:3a:ad:8a:89:8f:1d:
39:1f:b2:f8:35:8d:c6:b8:4e:21:81:ad:d8:f1:68:24:8c:9f:
18:2e:62:63:a0:d4:39:da:16:1e:1a:5b:72:1a:f7:94:94:21:
48:e5:ab:e2:4a:97:27:5f:9b:c0:bf:1a:64:58:ac:e6:57:1e:
a9:2e:fd:f8:58:b9:27:7e:7a:21:10:de:8e:41:1f:e8:14:1d:
a8:7b:38:28:97:ca:d0:32:44:0a:01:f2:0e:2c:30:c2:0d:4d:
92:48:d9:91:e6:56:3b:f0:8f:3f:44:12:60:f5:c7:c9:da:71:
e4:57:ae:b8:bd:ff:02:d4:a2:ab:d0:b2:1f:8b:9f:4e:d8:a0:
d5:25:ea:54:35:d7:a0:36:76:92:0d:63:6f:ba:b9:ad:03:d3:
6c:fe:d9:a4:7a:1b:da:80:2a:61:11:3b:6b:22:be:2d:7b:46:
e6:07:a0:6e:3c:2d:c1:c3:dd:0b:59:48:4c:ea:6a:13:2c:51:
14:9a:67:47:fb:e7:0e:b5:e1:bf:81:5d:96:12:ff:ba:e8:ae:
0e:47:6f:d4:7d:29:61:19:7f:5f:43:15:1d:b2:ee:2f:be:9e:
f1:66:ad:e8:8e:98:f3:b6:50:5c:5a:a1:bb:42:08:1e:1f:ff:
7c:e2:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:44 2025 by rpki-client