Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/4JbsqghTrIDqYvxRn3KkEBvNEXw.roa
File: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (raw, json)
Hash identifier: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=
Subject key identifier: E0:96:EC:AA:08:53:AC:80:EA:62:FC:51:9F:72:A4:10:1B:CD:11:7C
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 01942368E624A43BB08BF61B7F47218F1411
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/4JbsqghTrIDqYvxRn3KkEBvNEXw.roa
Signing time: Wed 01 Jan 2025 19:47:44 +0000
ROA not before: Wed 01 Jan 2025 19:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215872
IP address blocks: 2001:678:a80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e6:24:a4:3b:b0:8b:f6:1b:7f:47:21:8f:14:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Jan 1 19:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e096ecaa0853ac80ea62fc519f72a4101bcd117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:98:db:9c:de:95:a4:7c:d5:9d:c8:10:c8:
01:a1:ba:85:b1:38:cf:8f:53:24:4d:09:51:04:8c:
34:70:16:26:64:5c:bc:89:5a:db:d7:d4:cc:0f:8f:
32:5d:1a:2d:22:b6:5b:72:74:69:f7:4a:aa:a7:34:
5e:6c:84:4c:ac:54:9b:e8:e6:a4:59:82:20:b3:96:
c5:ea:81:ad:4f:9d:eb:35:1e:14:a7:38:9e:17:29:
c5:96:a9:b4:45:ac:97:e3:eb:af:bf:d1:ba:68:dc:
f1:ef:2c:ec:b7:66:35:f4:ec:ac:80:a2:cc:8f:6c:
e3:6a:1e:fa:67:f7:59:33:d3:c5:6c:30:09:48:e4:
33:18:9f:8c:44:66:dc:30:76:e7:43:8a:08:8a:1c:
11:27:e9:7d:78:0e:18:6c:c9:9a:15:2f:f4:a8:39:
1d:88:31:bd:8b:e6:5b:ce:6a:5c:09:8b:99:8e:ee:
2a:d5:c1:6c:54:8f:fd:ae:f5:16:38:02:3b:38:91:
c1:ef:49:5a:bd:e0:d7:b7:b7:fb:38:d5:88:fa:f3:
55:68:fe:b8:43:e0:ca:21:35:69:7a:f8:fb:17:19:
e1:89:8c:34:14:16:a8:d7:c9:1d:eb:c3:c1:cd:e8:
90:fb:e6:48:0e:2a:e8:4a:44:61:89:19:62:b9:f5:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:EC:AA:08:53:AC:80:EA:62:FC:51:9F:72:A4:10:1B:CD:11:7C
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/4JbsqghTrIDqYvxRn3KkEBvNEXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a80::/48
Signature Algorithm: sha256WithRSAEncryption
33:26:9a:2f:1b:0c:f6:06:01:53:db:48:0d:ab:b4:3a:a1:34:
6c:5a:cb:aa:39:c3:c0:a6:39:bc:69:0a:5c:0d:4c:94:8d:74:
09:a4:11:c0:8c:0a:e3:7b:38:77:b3:97:fc:a8:3a:e8:b3:f9:
0f:8d:7f:d7:5f:87:21:d3:8e:b4:ed:04:3c:44:22:bd:1a:cc:
4e:02:43:66:12:6a:5d:08:d3:56:c8:bb:8b:59:73:7b:cf:61:
c9:b5:16:4c:d8:f5:65:9e:ab:f9:54:7e:24:c4:cb:2d:3b:63:
2d:cf:53:59:8a:af:d9:cf:5c:b4:19:0c:a3:62:6e:d2:42:55:
c0:6e:aa:45:e4:e0:15:16:d8:3d:ce:97:4d:f5:88:ef:a2:b5:
54:25:3d:a2:3c:55:fb:a8:2d:32:de:fc:f3:db:bb:1a:07:93:
ce:67:a5:f6:f3:8e:31:45:91:cc:2f:cd:7d:79:a6:2a:03:23:
d1:17:41:fc:e9:83:3c:70:a4:2d:39:13:67:b3:d3:db:04:91:
e4:d4:b7:9b:9f:b7:2d:81:b8:f3:f3:af:16:2d:81:27:39:fe:
af:41:ec:b0:62:35:be:2f:d9:3d:46:1e:c7:9d:63:cb:94:59:
12:2a:40:70:53:4c:1c:c9:91:94:0f:90:71:81:54:81:91:94:
35:01:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:19 2025 by rpki-client