Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b1620b-e53f-4d58-a6e5-779ed25ce401/1/CF7lqA6lZ6qrKgdPEsc-L4Baq_U.roa
File: CF7lqA6lZ6qrKgdPEsc-L4Baq_U.roa (raw, json)
Hash identifier: IgNvqzAIyouW+4EpHVw0gKfaiNZpmgZC4RX9FKtBWCc=
Subject key identifier: 08:5E:E5:A8:0E:A5:67:AA:AB:2A:07:4F:12:C7:3E:2F:80:5A:AB:F5
Certificate issuer: /CN=ce7c1caf5818937c5723ee62f74478c43285c15e
Certificate serial: 0186CBFCE77909D18B9A3ADD4B94F6456C80
Authority key identifier: CE:7C:1C:AF:58:18:93:7C:57:23:EE:62:F7:44:78:C4:32:85:C1:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znwcr1gYk3xXI-5i90R4xDKFwV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b1620b-e53f-4d58-a6e5-779ed25ce401/1/CF7lqA6lZ6qrKgdPEsc-L4Baq_U.roa
Signing time: Fri 10 Mar 2023 14:46:34 +0000
ROA not before: Fri 10 Mar 2023 14:46:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202525
IP address blocks: 2001:67c:c00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:fc:e7:79:09:d1:8b:9a:3a:dd:4b:94:f6:45:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7c1caf5818937c5723ee62f74478c43285c15e
Validity
Not Before: Mar 10 14:46:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085ee5a80ea567aaab2a074f12c73e2f805aabf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:2c:3e:de:6e:9f:7c:48:75:1b:55:46:b8:
0b:f5:88:7c:72:6b:b4:ba:47:1f:f6:ac:38:d5:e1:
1d:94:1b:a7:ce:e3:8b:06:8e:1a:32:56:5e:09:c0:
83:9b:ee:c0:59:05:e9:a0:b0:17:ca:ea:04:1c:53:
92:00:d9:1c:d4:72:bc:e4:52:68:3c:9a:ac:4d:a9:
1f:79:d2:50:fc:ff:8c:e7:e3:0a:fd:b3:fc:be:2c:
98:3e:58:be:bd:f3:4a:4c:4f:bc:3e:dc:34:de:28:
fa:01:5b:1c:6e:14:7c:88:1b:1e:0e:1b:40:88:0e:
36:fe:0d:e8:00:4b:f8:00:70:26:f0:8a:de:69:39:
4a:71:a6:fb:7d:1e:c7:3e:66:ce:61:af:52:78:16:
68:2e:b4:cf:95:e9:63:12:15:bc:7c:20:9f:aa:b8:
39:9c:62:7a:9d:5b:2c:16:be:31:a8:a5:99:38:6b:
d9:06:e9:ed:75:7e:00:3e:4e:98:7c:10:36:5b:db:
af:b4:84:89:53:ed:c0:c7:60:9d:17:38:4a:96:f9:
b3:59:56:b2:4f:91:a1:f9:8a:1d:c6:d9:3f:42:37:
4e:83:2e:18:4e:63:c3:99:f5:03:37:ef:e3:55:f1:
b6:4c:6c:bd:f5:9d:71:bc:8e:61:a2:66:4f:8f:66:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:E5:A8:0E:A5:67:AA:AB:2A:07:4F:12:C7:3E:2F:80:5A:AB:F5
X509v3 Authority Key Identifier:
keyid:CE:7C:1C:AF:58:18:93:7C:57:23:EE:62:F7:44:78:C4:32:85:C1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znwcr1gYk3xXI-5i90R4xDKFwV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b1620b-e53f-4d58-a6e5-779ed25ce401/1/CF7lqA6lZ6qrKgdPEsc-L4Baq_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b1620b-e53f-4d58-a6e5-779ed25ce401/1/znwcr1gYk3xXI-5i90R4xDKFwV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c00::/48
Signature Algorithm: sha256WithRSAEncryption
8b:bd:2b:d6:70:e0:19:ec:ea:b4:03:80:43:0a:eb:51:df:1d:
6c:16:cf:33:5a:6f:8d:f4:df:d9:b4:62:d1:89:0d:5f:28:88:
c2:ea:be:ef:06:aa:fc:d5:78:8d:5d:be:c7:92:b0:08:bc:22:
cd:e1:5f:ef:85:df:68:5e:f2:e4:61:29:df:8a:ee:2b:ec:6f:
b4:5a:5a:7a:95:21:19:fe:c9:eb:dc:ac:90:18:79:cc:4f:ee:
a6:2e:60:39:35:74:a6:17:9c:bd:72:3f:83:a0:51:0b:74:7b:
77:6a:8a:0e:d3:65:6d:19:db:fa:cc:a4:8d:1f:ae:e2:72:0a:
cb:37:43:27:de:76:6c:ef:b3:67:b9:fa:a6:65:a0:b1:3c:42:
8f:54:8c:7f:24:b9:c2:b5:34:22:84:81:7a:ea:81:44:eb:af:
ab:49:1b:3f:0e:b3:1e:a9:f9:43:56:55:c9:ec:1b:a5:4d:d8:
52:cb:36:0d:f5:8c:9c:e6:fc:a6:f5:d0:6e:de:41:14:9a:94:
3f:b8:18:06:c2:e7:ae:4f:91:46:a4:81:ad:81:34:3a:5c:78:
e5:0c:7a:b0:69:30:c6:84:8c:65:4f:23:d4:1f:a9:65:d4:40:
96:fc:17:c6:71:2f:e3:dd:dd:c6:22:a6:99:5a:b1:8a:9f:58:
e6:36:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:10 2025 by rpki-client