Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/iGuoIDuFYJHLs6PM369PXxowez8.roa
File: iGuoIDuFYJHLs6PM369PXxowez8.roa (raw, json)
Hash identifier: gfeWvN13B8AjcnkZeLxgAPZ79/8/4yk/VJ41t6OIbNU=
Subject key identifier: 88:6B:A8:20:3B:85:60:91:CB:B3:A3:CC:DF:AF:4F:5F:1A:30:7B:3F
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 0187B26D02A76F56F64328AEA80E5D9FAD97
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/iGuoIDuFYJHLs6PM369PXxowez8.roa
Signing time: Mon 24 Apr 2023 08:41:41 +0000
ROA not before: Mon 24 Apr 2023 08:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a07:3f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:6d:02:a7:6f:56:f6:43:28:ae:a8:0e:5d:9f:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Apr 24 08:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=886ba8203b856091cbb3a3ccdfaf4f5f1a307b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:c6:2f:f0:91:de:37:75:c7:ab:1c:c2:3d:
e2:4f:f2:fc:48:ec:89:d5:be:2d:46:d8:28:f9:03:
ba:45:c9:9e:48:d2:c6:06:23:83:2c:e1:54:14:32:
95:21:64:c6:42:1a:ec:0e:c4:d9:86:8b:06:89:33:
91:95:da:e4:d4:e2:6f:09:0a:7e:32:03:5f:43:66:
c9:b1:1e:11:bb:fa:bf:95:3d:0e:73:08:2d:eb:71:
13:72:83:85:77:36:9f:64:d2:76:c8:15:7c:a6:d0:
78:b9:6a:cb:ed:d3:c2:4a:bb:8f:80:36:c7:d5:36:
41:36:63:18:5d:15:e9:35:64:43:5c:ca:63:ed:df:
5e:9c:1e:66:cd:15:44:c3:44:15:f8:d2:0c:d6:07:
be:47:36:99:5d:57:1f:f8:e9:26:cb:bd:ad:c8:cc:
8f:39:13:ae:f5:7a:8c:49:24:c1:2b:dc:07:ec:91:
d7:8e:f0:f8:16:6d:30:35:1f:3c:8d:bb:7d:08:64:
9c:f6:9c:7b:39:64:ee:83:5a:ab:64:8c:8c:e1:9e:
ec:4d:16:fd:f6:ee:6d:e8:d6:cc:21:04:d2:85:d4:
80:f4:57:19:da:00:d2:26:0e:5b:cb:81:34:9a:a1:
25:ec:75:8e:23:a0:75:a1:a2:e2:19:a8:e5:74:3b:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:A8:20:3B:85:60:91:CB:B3:A3:CC:DF:AF:4F:5F:1A:30:7B:3F
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/iGuoIDuFYJHLs6PM369PXxowez8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
78:c4:f5:73:46:d1:c7:bf:e3:51:86:35:11:a3:4b:71:52:99:
64:03:ad:bb:07:8c:20:65:9a:87:0a:a0:73:9f:87:8c:66:64:
51:cc:8c:33:4a:b7:58:5b:d1:5d:dd:72:f8:66:91:d1:4b:ee:
6c:78:0a:37:24:8f:5a:f3:61:e8:d6:79:d8:0f:21:42:fb:ea:
72:c4:0c:e6:37:01:68:1d:83:49:a5:6e:5b:b2:37:6d:06:44:
b0:30:39:d3:d7:83:38:a9:bb:45:84:ad:98:75:c1:86:3e:fc:
b1:73:3c:df:67:4f:a3:20:53:ea:16:67:7b:d0:d4:74:e5:d6:
04:b7:28:16:d8:78:47:df:ce:ac:58:86:6d:85:a9:54:60:c7:
cd:a1:47:dc:d5:bb:36:75:d9:27:9d:aa:33:a6:b3:b5:d7:92:
ea:7a:d3:57:dd:07:58:c8:5d:3e:b6:f9:a2:67:4a:71:1a:9b:
14:ab:c0:e5:f8:08:79:86:35:d2:16:d8:ee:14:f8:9f:f1:4e:
0d:17:de:74:3b:69:21:5f:d8:17:3e:03:51:57:ad:7b:b1:b9:
2f:ed:80:b7:5c:d3:28:93:81:8c:69:88:ea:81:aa:f8:ee:b6:
22:6a:4a:0f:8d:c8:05:35:41:c5:60:7e:0a:27:e2:64:8c:60:
14:9a:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:11:02 2025 by rpki-client