Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/BZKsmbKkOgpiNQItA4ToED7-XVE.roa
File: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (raw, json)
Hash identifier: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=
Subject key identifier: 05:92:AC:99:B2:A4:3A:0A:62:35:02:2D:03:84:E8:10:3E:FE:5D:51
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019427481E302CEFCD0468DD4ADC8E728B0E
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/BZKsmbKkOgpiNQItA4ToED7-XVE.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210475
IP address blocks: 2001:67c:2ff8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:30:2c:ef:cd:04:68:dd:4a:dc:8e:72:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0592ac99b2a43a0a6235022d0384e8103efe5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:a1:1a:72:0b:c2:f3:0c:ab:45:b3:4d:e3:
f1:88:f0:a5:d0:03:5c:4c:39:82:89:08:d9:c1:37:
a1:29:ea:ec:ae:d7:cf:70:35:b5:07:22:85:89:94:
8f:c8:03:62:fc:f8:76:41:8b:21:92:4a:60:b2:71:
4e:09:0f:a4:a5:27:d2:92:58:ac:d8:af:6c:75:00:
c0:a9:66:4d:6d:cb:32:f2:01:87:d7:b8:9f:7f:09:
48:47:0c:a1:fe:bc:c0:cc:35:25:bb:88:9a:77:45:
9b:13:be:78:c4:b8:fb:22:f2:16:3b:18:ce:24:c8:
0c:40:7a:09:27:ac:f1:dd:1b:cf:9a:1b:ef:91:af:
9d:0c:9a:64:e5:5d:37:24:f1:a1:c1:45:7b:74:00:
18:f2:f6:bd:42:67:f7:c2:d3:03:8b:6e:5e:ef:d4:
24:f9:04:ec:ed:81:b5:86:f1:14:93:bd:ee:9a:f4:
af:3f:fd:c8:28:0e:ce:66:ea:97:86:df:81:fa:b9:
5f:f2:56:10:b2:9c:d3:c4:20:e3:46:36:3f:9e:e9:
94:aa:c6:fd:e3:18:c3:a2:72:08:20:83:57:ca:ed:
ae:9c:b2:d6:fa:e0:c1:e3:60:3c:ea:4f:5c:b9:bd:
c9:28:e2:81:88:22:09:21:48:de:ac:6e:73:8e:3b:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:AC:99:B2:A4:3A:0A:62:35:02:2D:03:84:E8:10:3E:FE:5D:51
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/BZKsmbKkOgpiNQItA4ToED7-XVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ff8::/48
Signature Algorithm: sha256WithRSAEncryption
24:b9:19:22:61:99:4e:ed:e5:db:5d:8f:50:29:8d:0d:c3:b2:
96:84:d1:a6:00:b7:05:b6:2a:27:0a:6b:31:13:76:9d:04:89:
4d:fd:18:75:57:48:07:6b:d2:81:ae:93:4c:a8:2b:a9:bc:95:
4d:b2:77:f5:46:de:35:f1:46:5d:bd:27:47:53:9c:d2:dd:58:
ba:2e:d1:76:99:3c:43:59:55:f9:10:0a:8e:d1:12:90:17:9b:
88:6a:14:f2:88:f7:07:0c:7e:19:01:14:c1:d1:08:c0:2c:ff:
7d:62:8a:95:6c:89:39:37:ee:a9:71:ab:77:3c:52:05:52:f0:
14:83:f8:6d:16:7b:41:90:06:37:0c:bc:3c:64:31:df:e6:3a:
ac:b6:b8:17:bd:f4:4f:4d:a0:6d:e9:b6:3b:d2:ee:31:cb:8c:
79:d6:63:80:99:b6:5e:9e:b7:0c:31:96:84:ab:cc:c9:fc:8d:
5f:29:27:a6:ac:6b:3f:11:66:93:bb:99:6c:eb:12:51:15:99:
3e:3c:51:0b:3e:15:af:c1:e9:6c:bd:75:b0:41:fd:aa:da:f5:
94:cb:ed:7e:90:e1:23:9c:24:7d:37:2f:32:8a:2b:f6:fa:d4:
d6:97:5f:df:62:de:23:f6:82:9a:ba:38:14:a8:d3:91:33:55:
6a:98:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:11 2025 by rpki-client