Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1sgI6JwuqxGMT5EhRmcjagrjhoA.roa
File: 1sgI6JwuqxGMT5EhRmcjagrjhoA.roa (raw, json)
Hash identifier: KvDODEybwP3FmDTIya3wCPglVKHaI29tzKzHOPi+soA=
Subject key identifier: D6:C8:08:E8:9C:2E:AB:11:8C:4F:91:21:46:67:23:6A:0A:E3:86:80
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019175A7474871E7B6F97D512A7577209B9B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1sgI6JwuqxGMT5EhRmcjagrjhoA.roa
Signing time: Wed 21 Aug 2024 15:56:22 +0000
ROA not before: Wed 21 Aug 2024 15:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 2a0f:eb06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:a7:47:48:71:e7:b6:f9:7d:51:2a:75:77:20:9b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 21 15:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c808e89c2eab118c4f91214667236a0ae38680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:2e:5d:dd:c0:9c:12:02:6b:6c:10:75:25:
f4:aa:29:77:48:4e:e7:d0:27:79:96:b8:5c:2c:94:
2b:81:ea:b4:b2:50:90:f1:ec:ab:d8:95:e0:8f:54:
13:43:e2:22:be:00:d0:4d:29:3b:a7:38:cd:e7:86:
83:ca:28:0f:72:5f:45:11:1e:35:6a:12:0b:ad:0c:
5b:d2:91:25:92:8b:c1:8a:0a:b5:01:79:d9:71:b2:
02:66:b1:1b:68:96:d3:49:a1:14:12:c0:dc:b9:50:
fc:b1:f8:0e:b2:6b:35:99:a2:6a:5c:30:51:cb:17:
18:6f:8c:9d:50:67:61:a2:92:18:46:ef:e5:86:15:
da:36:4c:b3:fd:8b:7b:ed:a7:65:8d:38:5d:7c:2a:
1f:7e:f0:8b:e6:21:cd:0a:ab:d4:2a:e6:49:c1:12:
b7:9b:03:80:7f:e9:4d:f2:1b:89:a5:1f:73:6c:60:
ba:ef:09:be:ca:06:37:dc:ce:0a:06:15:39:3a:ec:
cf:9a:f2:a6:b5:17:23:82:7b:a3:2e:3a:21:81:10:
7e:16:3e:88:06:51:e7:94:fd:64:33:38:56:69:db:
29:1e:d3:53:02:51:dc:1d:d8:e6:a1:d5:f0:4b:57:
59:e7:d4:33:90:0d:e3:28:e1:a3:59:0e:a8:6b:30:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:08:E8:9C:2E:AB:11:8C:4F:91:21:46:67:23:6A:0A:E3:86:80
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1sgI6JwuqxGMT5EhRmcjagrjhoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:eb06::/32
Signature Algorithm: sha256WithRSAEncryption
26:90:d7:54:6b:5a:c1:38:db:23:68:d8:ef:4c:3b:04:f8:2e:
2e:0e:c1:93:de:9d:6b:1e:35:e3:e3:1d:15:9f:aa:d5:d0:c9:
79:22:05:3a:56:9d:eb:4e:1f:d6:39:25:dc:d0:e6:6c:db:d8:
59:f9:93:08:cf:6b:31:a8:a0:7a:69:cb:58:f5:4c:bf:f8:c8:
5b:7d:0e:cc:4f:dd:30:e6:62:42:9b:82:62:d5:5a:ec:98:07:
34:68:71:df:af:fb:d0:35:8d:3c:ef:9d:f0:72:73:6c:08:65:
68:9e:f6:3b:b3:d0:19:9c:0e:3f:d5:7c:ea:7f:0a:7e:ee:75:
9f:d1:0c:73:63:25:0d:b5:ac:8a:c7:21:12:be:33:89:3d:f6:
6c:3e:f2:e4:d3:b7:15:11:41:c0:17:4b:7d:96:52:67:26:65:
08:41:0f:49:1e:6e:0c:e3:7d:a6:27:dc:dd:65:c2:86:15:dd:
86:06:ae:51:1d:a5:c8:e9:d6:d8:f0:4b:1f:c2:92:eb:bb:5f:
cd:67:09:3c:6e:b1:f0:1d:2c:b6:d9:f2:c2:87:f9:a4:48:2b:
5e:3e:3b:f0:99:b1:c3:ee:8e:dd:d4:c1:e4:49:5b:8a:0d:de:
b2:35:5b:fe:e3:75:ed:a6:67:df:ca:ca:27:4e:bf:b8:1e:2e:
d5:44:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:23 2025 by rpki-client