Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa
File: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (raw, json)
Hash identifier: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=
Subject key identifier: E0:57:3C:0F:28:D5:49:60:84:B1:4F:C4:50:6F:24:C9:95:78:8E:9E
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 0194228DB2C1F0DA75FC104ABF4ACD180629
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205597
IP address blocks: 2001:678:ad0::/48 maxlen: 48
2001:678:ad4::/48 maxlen: 48
2001:67c:2d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b2:c1:f0:da:75:fc:10:4a:bf:4a:cd:18:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0573c0f28d5496084b14fc4506f24c995788e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:28:b1:9e:0f:25:34:c8:d5:52:55:cc:77:
92:9e:7a:c7:19:6d:0b:36:1a:09:ab:0b:87:19:e3:
d7:9d:44:71:0c:f5:13:af:6c:39:1d:11:02:85:97:
6a:fb:f2:40:0b:34:9f:43:81:db:1c:25:49:39:45:
9e:b3:25:ab:73:15:32:84:05:db:16:89:fe:ab:17:
7c:bb:57:e4:66:09:34:6b:82:af:51:e5:8d:09:30:
64:50:95:da:06:f2:3c:29:f6:82:78:14:87:c8:97:
08:22:03:8d:ad:58:03:97:9d:4b:88:0e:03:45:5c:
ba:93:0b:ea:ed:b3:8a:b9:b4:fb:9d:14:b8:15:f8:
dd:58:e0:b7:0c:9d:91:56:82:b9:c2:89:d7:f5:e9:
c3:ff:cf:8c:d3:21:d2:89:25:9c:6d:2c:bb:98:8c:
23:88:dc:46:3b:92:a6:1b:61:85:fd:a4:0e:21:3c:
ef:d0:40:70:1d:ef:4d:0c:e7:43:f5:3c:11:8b:c2:
00:77:dc:b8:bc:32:71:7a:50:a4:ff:c7:4e:2c:fe:
4e:6b:f4:0b:1e:4b:34:9c:3e:6e:ae:ca:1f:e7:7d:
37:a5:a5:e2:9f:26:d9:77:98:64:b1:33:d3:27:ac:
db:6d:38:ea:25:6b:d0:04:9c:ad:60:9a:84:af:f8:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:3C:0F:28:D5:49:60:84:B1:4F:C4:50:6F:24:C9:95:78:8E:9E
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ad0::/48
2001:678:ad4::/48
2001:67c:2d00::/48
Signature Algorithm: sha256WithRSAEncryption
35:99:28:2a:e9:30:d8:f4:31:b9:f4:3f:88:41:b1:37:ed:2e:
cd:80:c9:7e:ec:26:ab:7a:ba:f4:0a:65:72:58:aa:52:8d:8e:
61:fb:b0:f0:ca:f4:3c:0c:25:77:a6:18:9d:d5:17:09:3a:f5:
cb:90:a6:da:f0:de:11:8a:81:5a:e0:3d:24:b6:25:44:0b:99:
9a:b4:8e:b6:e1:ea:ac:be:da:c0:8d:dd:31:06:76:d0:90:5a:
57:06:d9:a9:d7:eb:3d:cb:e6:c9:52:a4:47:a4:6c:83:91:ed:
09:cb:96:1f:bf:be:bd:a7:f5:d8:21:20:14:af:4a:9c:3e:ab:
de:32:f5:a8:cd:88:be:cb:cf:e9:c2:06:8b:ce:97:26:cc:09:
5b:0d:5d:60:4a:eb:45:6c:0f:53:ca:6e:c2:fa:94:a4:85:24:
ae:f4:94:20:2e:3a:14:f6:68:cd:bc:0c:e6:15:60:13:6c:8b:
61:d1:b6:5b:ac:d0:d1:a3:7a:fb:6a:dc:0c:cb:b3:d1:92:2a:
3a:dd:2c:3f:60:c4:0c:0c:6d:fa:38:1f:d7:ce:a9:a2:d9:91:
f7:17:b3:18:01:2d:63:c9:fb:ad:84:3f:6a:40:d2:d7:c1:c1:
ef:89:45:a9:18:17:eb:4c:96:bc:2c:ca:4e:8d:b1:c6:35:1d:
ae:bb:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:28:38 2025 by rpki-client