Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/sRdbwM2FhT4KZFWByGVh6X9hlas.roa
File: sRdbwM2FhT4KZFWByGVh6X9hlas.roa (raw, json)
Hash identifier: eFMqEnuzY87UNd7fTIk3WGYcFKadCzBIX6G/lJCzbhg=
Subject key identifier: B1:17:5B:C0:CD:85:85:3E:0A:64:55:81:C8:65:61:E9:7F:61:95:AB
Certificate issuer: /CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Certificate serial: 01869809D0BB6668969666347136DC92722A
Authority key identifier: E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/sRdbwM2FhT4KZFWByGVh6X9hlas.roa
Signing time: Tue 28 Feb 2023 12:40:25 +0000
ROA not before: Tue 28 Feb 2023 12:40:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200957
IP address blocks: 2001:67c:be4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:09:d0:bb:66:68:96:96:66:34:71:36:dc:92:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Validity
Not Before: Feb 28 12:40:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1175bc0cd85853e0a645581c86561e97f6195ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:92:6c:9d:46:7f:e5:27:97:54:f0:d2:22:
bf:c8:33:41:00:19:39:fe:00:b8:8a:ea:a8:4e:59:
eb:50:3a:e9:9f:e7:0a:4e:c0:76:6c:5d:be:5b:ff:
3d:4a:a8:99:5f:7d:b7:3d:ba:b8:91:73:8d:8d:31:
a7:a7:3f:b1:2d:bc:61:7b:52:0a:83:17:1d:66:a3:
87:5a:61:66:64:54:c9:0a:6a:ea:7b:1f:66:9e:f2:
49:7b:1a:f7:6e:2c:86:bc:27:7c:fc:c4:cc:22:50:
34:87:61:51:d5:cc:f8:cd:9d:6d:33:a0:90:b3:1b:
09:65:65:0c:52:e7:4f:fc:3a:38:57:11:f6:b5:d2:
6e:93:05:95:4c:2e:92:b0:c4:5b:4f:a1:c5:05:74:
e8:35:5c:87:31:16:10:72:d5:2e:bd:33:0b:79:be:
86:13:78:9b:73:5b:47:c1:e7:ee:c4:c5:19:e6:96:
cd:41:17:84:de:90:ae:5d:99:61:85:12:dc:4e:69:
e9:85:18:73:d2:1b:97:7b:b8:03:21:3e:90:10:28:
72:64:89:41:cf:9e:f9:ce:5e:98:07:8d:a6:6a:fb:
83:c4:b2:39:75:60:06:f1:ea:ea:12:14:48:18:13:
67:62:65:f6:24:71:50:c0:b7:9a:2e:bb:c9:3f:03:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:17:5B:C0:CD:85:85:3E:0A:64:55:81:C8:65:61:E9:7F:61:95:AB
X509v3 Authority Key Identifier:
keyid:E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/sRdbwM2FhT4KZFWByGVh6X9hlas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:be4::/48
Signature Algorithm: sha256WithRSAEncryption
c2:a7:22:81:ca:ed:f9:ab:79:64:f2:cd:ef:4b:53:cc:4c:10:
1a:90:48:ad:df:0c:2d:ee:3e:5b:14:ee:0a:be:ae:ae:6f:33:
0a:4b:25:29:e0:3c:65:85:86:9e:6f:27:eb:a2:3c:13:fb:64:
6e:31:ce:76:b4:b4:be:74:2c:05:22:87:10:3b:0d:0b:ad:a1:
f7:f7:e9:e5:f8:8c:ab:50:d5:74:04:02:2d:16:f9:8f:0a:fb:
28:ec:6c:cb:fb:b6:a7:7a:41:92:25:3b:a3:92:2c:eb:92:5b:
3b:10:b4:e2:f7:b2:3c:da:28:50:dc:08:d1:4b:88:a0:76:9c:
9f:97:c8:b3:49:f0:22:30:af:8c:02:99:bd:23:ae:6a:4c:b8:
79:15:25:5f:5b:cc:16:32:77:ae:43:33:c6:81:00:5b:23:12:
78:13:3b:ec:c5:94:cb:3d:ac:5b:08:e8:3d:53:71:fa:ac:eb:
20:20:c3:1b:44:12:40:8c:b9:3a:b9:00:03:67:33:14:1a:74:
6b:3b:47:c7:3b:57:db:01:3f:13:40:47:4d:16:e9:22:1f:6d:
13:76:fc:93:20:59:53:9c:60:7a:93:ef:e2:61:87:ba:55:33:
6f:6f:46:79:21:cd:90:61:fa:51:56:b6:9a:f5:08:03:d1:62:
05:ae:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:58 2025 by rpki-client