Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/0rI9z410pShhJDHbcs-L_eT0rUE.roa
File: 0rI9z410pShhJDHbcs-L_eT0rUE.roa (raw, json)
Hash identifier: D6XO5aU78gvXF2t+2BOnpCVTNburKiek4Rmfi4jWJJA=
Subject key identifier: D2:B2:3D:CF:8D:74:A5:28:61:24:31:DB:72:CF:8B:FD:E4:F4:AD:41
Certificate issuer: /CN=54ee981b1e37c1c49764d92d72344c80793b7fbe
Certificate serial: 04C989B5
Authority key identifier: 54:EE:98:1B:1E:37:C1:C4:97:64:D9:2D:72:34:4C:80:79:3B:7F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VO6YGx43wcSXZNktcjRMgHk7f74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/0rI9z410pShhJDHbcs-L_eT0rUE.roa
Signing time: Sat 01 Jan 2022 01:01:46 +0000
ROA not before: Sat 01 Jan 2022 01:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49271
IP address blocks: 2001:678:dcc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80316853 (0x4c989b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ee981b1e37c1c49764d92d72344c80793b7fbe
Validity
Not Before: Jan 1 01:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b23dcf8d74a528612431db72cf8bfde4f4ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:a0:e5:c4:d5:0a:21:ce:3a:69:08:11:c6:
18:29:1f:3d:1e:7f:ac:01:d6:07:2c:7a:7f:59:b0:
1b:b0:ec:bc:ec:3b:72:dc:ea:06:da:c3:9f:05:80:
bc:49:88:e4:6a:f3:7c:0f:6d:aa:e0:66:4a:af:eb:
af:20:9e:a8:9d:75:b5:c5:6d:ea:d4:08:62:92:91:
89:1a:83:97:b2:1e:52:3a:fe:b7:96:e9:d9:f2:c3:
d4:9d:d6:53:51:da:80:66:df:06:e6:7a:74:b5:20:
2f:58:65:0a:29:8f:b7:6f:83:af:0b:11:fb:09:f3:
3d:cb:81:a3:0e:13:2e:30:97:3f:60:4b:e5:4c:5c:
e8:43:f9:5b:1a:20:9b:7a:60:78:2a:4e:e2:6a:59:
34:5a:7b:c5:cf:41:79:b0:f7:74:58:2c:18:df:27:
05:09:86:25:b7:53:23:b1:fd:e1:bb:4a:44:fd:0a:
19:89:ea:2d:75:9d:62:bb:8c:dc:94:9a:99:ac:f2:
db:e0:81:19:78:bf:d2:e3:1b:cc:7e:80:87:4b:ad:
8a:cd:16:86:63:b0:5e:4b:f2:69:18:7b:dd:d4:69:
54:67:d5:aa:bc:63:87:e3:57:6f:ed:fb:d8:5b:01:
50:c3:1d:d5:bd:c0:b9:ad:1a:fd:19:5f:10:1d:8b:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:3D:CF:8D:74:A5:28:61:24:31:DB:72:CF:8B:FD:E4:F4:AD:41
X509v3 Authority Key Identifier:
keyid:54:EE:98:1B:1E:37:C1:C4:97:64:D9:2D:72:34:4C:80:79:3B:7F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO6YGx43wcSXZNktcjRMgHk7f74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/0rI9z410pShhJDHbcs-L_eT0rUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/83a421-ed90-4bf9-b87c-9a5ddeda0859/1/VO6YGx43wcSXZNktcjRMgHk7f74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dcc::/48
Signature Algorithm: sha256WithRSAEncryption
7c:45:6c:d0:e7:ed:dd:51:76:64:64:d5:09:c4:36:41:88:48:
ca:26:26:54:d8:72:2c:b3:f5:40:b9:0d:33:a1:5f:bf:39:09:
a4:a0:2c:55:8c:85:65:13:5f:f0:a9:8b:7e:81:5f:ee:ec:bd:
b2:27:8c:e7:32:b5:82:8b:83:58:e9:30:bd:5a:f8:c1:cd:0a:
97:b0:b1:be:72:01:fc:04:2d:26:83:f2:d7:1d:ca:2e:8e:af:
96:1c:22:01:88:60:c1:c6:08:ad:cd:f5:18:17:b0:af:8f:9a:
32:b5:82:7c:2b:c5:ef:4b:7b:eb:44:a0:f7:a5:30:37:72:cd:
1b:b9:55:ce:57:17:fa:17:4f:13:00:0e:65:87:4b:7e:fd:4d:
79:c7:05:68:88:7e:58:e5:9a:d0:74:bf:2f:5e:6a:6b:ac:78:
0e:d8:b7:c8:39:f5:e3:1c:cb:1c:ef:52:37:7e:33:c0:c0:9c:
96:0d:2e:a9:27:d0:6d:dc:04:fb:38:e0:d4:09:d7:ea:ba:14:
f4:9a:0a:de:9a:49:3e:ae:e1:35:3d:4d:48:b7:59:30:64:8d:
1b:27:da:3f:d2:66:7f:db:b9:fe:4f:03:ec:cf:59:73:79:98:
c3:f3:03:e4:45:31:b3:0e:73:29:40:f2:13:65:af:8c:1c:73:
9d:cc:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:46 2025 by rpki-client