Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa
File: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (raw, json)
Hash identifier: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=
Subject key identifier: 1F:B3:79:DF:35:44:1D:E1:45:E1:8A:67:AF:82:8D:C6:9C:3B:63:B0
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0194228DD2801855C8CACA6969B44BA25566
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34087
IP address blocks: 2001:678:464::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:80:18:55:c8:ca:ca:69:69:b4:4b:a2:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb379df35441de145e18a67af828dc69c3b63b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:13:c2:3e:a3:3f:86:45:15:9b:50:94:a0:
dd:1f:fd:87:2e:c1:f7:3b:b0:51:56:13:5b:ae:d1:
8d:2d:9d:78:bf:0a:13:63:06:d5:11:0f:47:fa:7a:
57:fa:89:42:ff:ad:70:e9:21:76:b9:c3:7b:30:0e:
2d:b1:86:84:2f:82:2e:89:0b:fd:52:4b:33:28:54:
c7:84:4e:0d:b7:ee:8d:39:72:5c:cb:e0:6f:ee:7b:
b9:b4:7f:88:f0:b4:5f:06:bb:38:ef:53:a5:19:10:
84:5f:f3:bf:1d:79:80:1d:c9:29:4e:2d:c9:ee:a3:
66:43:b0:7a:42:cc:07:f6:d7:9c:0b:7f:86:12:6f:
da:66:d2:02:09:2b:52:7a:0c:a6:4b:68:f5:b4:2c:
46:85:8d:52:e8:bb:bb:b8:b9:66:ae:30:f3:c3:44:
27:75:af:7f:e8:88:8a:4c:78:56:4e:42:8e:b5:ce:
ab:69:68:81:a3:b2:75:a5:35:08:e9:46:58:e7:18:
82:c0:82:cc:ed:5e:41:bd:c9:96:0c:7d:5f:10:64:
72:dd:f1:41:f8:79:0f:bf:a7:59:f5:68:42:48:89:
d6:49:09:c9:d0:37:34:f4:d4:44:ae:61:c8:65:e1:
b6:cd:17:b3:1a:f8:c6:77:32:96:11:99:2c:91:37:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:79:DF:35:44:1D:E1:45:E1:8A:67:AF:82:8D:C6:9C:3B:63:B0
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:464::/48
Signature Algorithm: sha256WithRSAEncryption
3a:15:1c:91:5d:31:0c:76:a1:a9:f0:42:b3:c3:67:48:25:50:
1e:f7:b5:e0:5d:77:4b:ae:22:e5:7a:74:3d:a8:49:61:51:87:
47:6f:88:66:53:f9:d8:98:b2:fa:aa:0e:e9:1d:d6:4c:33:00:
a4:01:ae:de:53:b1:66:c3:ad:79:38:07:4d:5f:cb:b6:67:3d:
67:5d:93:36:b2:aa:01:7d:f7:bf:bc:16:fd:6a:92:e1:2f:63:
65:e7:a5:82:7d:96:52:8f:2f:85:f6:95:76:20:53:61:af:78:
e1:0e:36:4f:16:54:83:94:87:57:95:4b:ac:19:e3:0b:55:c1:
58:1b:51:20:d6:a1:65:31:8d:de:28:64:8b:7b:8c:a1:56:36:
82:7b:8e:46:53:0a:fe:b4:bb:4b:a2:51:a8:f3:23:d1:dd:d2:
44:e9:be:87:56:67:21:4e:ae:14:82:fe:2a:2d:bf:22:50:40:
dd:1d:cb:f8:28:fa:90:4f:3e:a4:4c:c2:e3:af:0c:f8:a8:36:
e9:76:be:81:65:ba:73:90:f9:91:79:8f:b1:13:c0:04:81:d2:
6a:84:2f:5c:94:e5:68:e0:dc:95:2e:47:d2:95:9c:25:7b:e1:
f0:64:45:c5:a9:5b:20:c4:53:eb:0b:2a:8d:f6:27:b4:db:5f:
9d:7a:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:34 2025 by rpki-client