Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/547580-38fa-47c5-9a6c-4baf0c85fbdf/1/0v4aFLZj_na4puTaW3j0EhbZeRA.roa
File: 0v4aFLZj_na4puTaW3j0EhbZeRA.roa (raw, json)
Hash identifier: l6pUYXrfy2sZraPYA1CJpnsEmgr+4DBn9JFoVfcZ5H0=
Subject key identifier: D2:FE:1A:14:B6:63:FE:76:B8:A6:E4:DA:5B:78:F4:12:16:D9:79:10
Certificate issuer: /CN=3d361ba1d6be589f9a69d5d06274caba7897b24f
Certificate serial: 018570153016C5B143E706E2A7FD1877D8FF
Authority key identifier: 3D:36:1B:A1:D6:BE:58:9F:9A:69:D5:D0:62:74:CA:BA:78:97:B2:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PTYboda-WJ-aadXQYnTKuniXsk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/547580-38fa-47c5-9a6c-4baf0c85fbdf/1/0v4aFLZj_na4puTaW3j0EhbZeRA.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210623
IP address blocks: 2001:67c:9e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:30:16:c5:b1:43:e7:06:e2:a7:fd:18:77:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d361ba1d6be589f9a69d5d06274caba7897b24f
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2fe1a14b663fe76b8a6e4da5b78f41216d97910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:83:5b:9b:82:75:ef:a2:e7:92:e5:8e:93:
b8:a2:b2:c9:6b:9a:15:51:b6:6a:f2:d7:5c:0c:2c:
7e:d3:a4:46:97:15:53:67:7c:5b:13:2f:e5:fb:b9:
10:dd:69:fc:16:c3:86:bd:dc:77:dd:40:dd:c9:88:
e6:16:1d:c8:fc:89:19:be:5b:3c:d3:97:c1:13:d7:
8b:e8:9a:37:2c:bf:2f:79:6d:70:5e:32:58:ba:56:
c6:ce:c6:1d:32:1b:ac:c1:83:a4:39:ac:d3:20:f7:
a6:59:bd:9b:fc:13:a8:30:8e:3b:cf:22:f4:6d:72:
7d:39:81:15:41:74:3b:3f:12:10:36:4d:ed:8c:61:
99:60:5c:28:e6:9a:01:ac:b6:a8:11:64:a8:82:9f:
f7:b7:cb:96:26:66:dd:de:fd:26:42:44:f3:3c:40:
1a:a8:4b:4e:10:94:5e:d2:2f:c1:86:a5:b8:7c:12:
d1:ca:ba:09:8a:d9:08:83:ad:dc:02:89:5e:1e:27:
dc:b0:01:5f:c8:69:bf:0d:15:75:86:19:9d:e1:f5:
85:60:be:a3:95:4d:05:7c:e6:8a:11:00:f6:c1:7a:
3e:91:ce:0e:86:1e:97:48:a8:85:6a:a1:4d:12:7b:
fd:bc:9c:81:f5:76:3e:ac:8f:7f:59:3d:b1:13:59:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:1A:14:B6:63:FE:76:B8:A6:E4:DA:5B:78:F4:12:16:D9:79:10
X509v3 Authority Key Identifier:
keyid:3D:36:1B:A1:D6:BE:58:9F:9A:69:D5:D0:62:74:CA:BA:78:97:B2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PTYboda-WJ-aadXQYnTKuniXsk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/547580-38fa-47c5-9a6c-4baf0c85fbdf/1/0v4aFLZj_na4puTaW3j0EhbZeRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/547580-38fa-47c5-9a6c-4baf0c85fbdf/1/PTYboda-WJ-aadXQYnTKuniXsk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9e4::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ee:b8:19:21:17:2a:4a:52:a9:6d:14:dc:a8:dc:71:ba:72:
27:db:2a:35:ee:21:01:a3:1c:9a:56:f0:e1:f1:5c:b2:24:b7:
af:f9:fa:19:a9:4d:b4:52:96:1b:93:fc:ff:34:d1:ad:e8:86:
7f:1b:a2:2a:29:23:fa:7a:8d:24:8c:b5:ea:01:80:f7:33:b0:
84:24:17:23:41:db:c8:d2:03:46:c8:d8:a2:67:cc:b2:32:3f:
ea:bd:1d:e1:36:fd:b8:0f:ab:44:8e:55:5a:eb:cd:2e:c2:e5:
c8:fd:a8:4c:9e:49:4f:92:21:75:fc:f8:42:9f:7a:d1:2f:1f:
be:ec:b8:6b:39:60:8c:aa:14:a4:1b:13:bb:1e:f9:25:e8:0d:
b0:1f:c8:35:39:52:ea:a2:c0:e2:bc:b5:f5:81:f0:33:5b:da:
f2:fd:a3:25:68:3b:b3:74:6f:eb:f0:2b:20:59:b9:65:74:ad:
a7:af:6d:04:63:e4:47:f6:60:36:c4:4f:0d:17:66:53:68:09:
27:63:d2:e5:1b:53:08:5c:97:5b:40:50:52:b0:2f:f0:aa:f1:
0d:dc:a5:b9:54:c3:70:f1:81:fe:0f:6b:b3:48:5b:31:31:79:
f9:fe:ad:82:2c:58:65:f7:5b:c3:97:92:fe:f8:d2:0e:9c:90:
86:72:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:01 2025 by rpki-client