Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa
File: fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa (raw, json)
Hash identifier: F961OPeN83Q4oeLbeSX16UHheJXeQx/W41IFU7IXOlA=
Subject key identifier: 7D:25:D6:5D:06:42:DC:EB:24:EC:99:25:ED:58:8E:A2:78:92:9F:F2
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018A630B129D9D5D7F3286358746B5303DE5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa
Signing time: Tue 05 Sep 2023 01:53:04 +0000
ROA not before: Tue 05 Sep 2023 01:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51714
IP address blocks: 2a09:ff00:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:0b:12:9d:9d:5d:7f:32:86:35:87:46:b5:30:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 5 01:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d25d65d0642dceb24ec9925ed588ea278929ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:d8:e6:eb:56:97:ab:9f:48:f8:bc:9b:75:
96:e9:96:65:98:e7:34:b8:0d:0d:80:c4:57:2b:8c:
08:7c:17:90:8f:88:f9:83:6a:cc:9b:52:8d:e0:ff:
f2:fd:e2:af:17:f6:88:02:5f:b1:d3:65:bb:6e:22:
96:86:32:2b:02:8e:dd:58:70:8f:f2:6d:0f:30:bf:
de:41:d1:07:dc:29:b1:9d:16:16:6a:81:3c:8e:3f:
85:f2:4c:59:ac:be:45:46:24:cd:18:1b:7a:55:3d:
18:9d:a2:ec:c3:55:d0:27:15:7f:5b:02:21:0f:04:
8a:8c:6c:7c:bc:33:df:1d:2a:c2:86:25:00:64:df:
97:71:a2:06:db:a8:e9:80:1f:8b:b9:2c:e2:b3:2c:
cc:8f:3a:4f:0e:8d:c4:e8:a7:4b:5e:cb:c0:82:11:
24:7f:18:ec:e3:82:93:5f:9a:c6:a7:e3:01:b2:1e:
9e:a4:a5:bd:86:d8:72:30:2f:7f:78:cd:bb:ea:51:
bb:7e:ba:4f:9c:ab:9d:5c:98:11:bb:9c:6d:dc:51:
1b:1d:e3:f1:2f:09:f0:cb:3f:ca:ea:a1:05:e9:70:
5d:79:ae:65:74:6f:af:3f:d4:86:7c:5b:e2:37:94:
32:d2:2b:4b:7e:1a:4b:35:ba:5b:7f:50:62:ad:53:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:D6:5D:06:42:DC:EB:24:EC:99:25:ED:58:8E:A2:78:92:9F:F2
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
33:81:10:2d:ba:ad:af:e1:87:72:05:2f:ac:dc:3a:5a:ca:c2:
ff:61:48:98:80:c8:7e:8b:4e:b8:f5:e8:c1:c0:d3:a7:51:b2:
7a:37:21:48:89:f0:2a:e7:d8:4d:1c:cb:f0:ff:e3:b2:d2:93:
a6:8f:da:8e:50:67:73:db:4a:ec:aa:4f:95:02:e0:8b:a2:19:
90:ec:17:65:c8:bb:57:7f:27:c0:82:ab:3b:82:cd:34:c7:e6:
c8:6e:06:98:7f:66:6f:97:0b:fc:9b:df:11:77:bc:1d:5d:11:
75:38:0e:89:bd:bf:ed:dc:3b:5d:d4:2d:24:b4:e7:1f:2b:0c:
c3:38:10:38:10:0d:ed:cc:6a:c4:33:60:fd:9e:d8:df:76:ad:
95:52:b6:aa:b5:48:8a:0d:c2:d6:3a:f1:37:75:4d:29:38:bf:
de:21:76:6f:ae:a3:8d:0d:42:87:ac:4c:0e:55:d2:78:16:a5:
fc:1e:52:49:6d:f8:6a:13:cd:3b:97:c8:eb:99:ad:ba:47:a8:
36:c3:79:9e:de:f6:e0:ae:8e:62:f4:01:87:08:ff:2e:62:a8:
ba:87:d6:19:f9:38:bf:17:c9:ff:dd:52:92:7c:05:5f:aa:6e:
61:7b:68:29:31:31:36:60:85:af:4f:75:57:77:59:6e:41:5d:
f1:f0:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:16 2025 by rpki-client