Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/e1fv_JFrpt1x7MDDR5admPMZ7XI.roa
File: e1fv_JFrpt1x7MDDR5admPMZ7XI.roa (raw, json)
Hash identifier: fi8n75p34OSllpxcf+95I9NtqtTkVG4m6ZzdZXmJV0A=
Subject key identifier: 7B:57:EF:FC:91:6B:A6:DD:71:EC:C0:C3:47:96:9D:98:F3:19:ED:72
Certificate issuer: /CN=f4de891474b4befd3eb2150b54759d6bed664196
Certificate serial: 019421B1DEFEC5DF4C8E88D88D8E978349C6
Authority key identifier: F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/e1fv_JFrpt1x7MDDR5admPMZ7XI.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202798
IP address blocks: 2001:67c:db8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:de:fe:c5:df:4c:8e:88:d8:8d:8e:97:83:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4de891474b4befd3eb2150b54759d6bed664196
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b57effc916ba6dd71ecc0c347969d98f319ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:cf:35:96:7c:ba:30:dd:90:b7:f6:8d:9c:
54:9a:f0:8b:ac:ef:6a:1e:82:09:1f:dc:52:60:22:
b9:93:6a:eb:c5:67:44:d7:ec:4a:d6:6f:f8:1e:58:
53:61:58:5f:a5:fa:be:1c:a3:61:f5:e1:d2:72:7e:
1d:6e:8b:97:e7:8e:b0:54:91:54:a3:dc:41:5a:a0:
d7:b2:e4:56:51:73:cc:54:ff:fc:70:d6:38:9e:ee:
40:e7:cb:01:e3:25:28:61:46:7e:dc:86:39:ea:92:
4e:20:e0:40:37:d3:aa:c2:cb:a3:eb:5b:40:48:4b:
c7:ba:65:53:08:9f:08:59:69:c1:5a:3d:1d:e2:59:
dc:f1:bf:69:74:bf:95:63:d5:94:e5:38:ab:d6:a4:
48:6f:39:05:aa:96:19:2d:92:d4:c2:04:0e:d7:50:
d7:1a:71:27:08:14:fa:50:f6:70:41:ab:8a:69:23:
96:fc:a7:44:bb:3d:d4:b6:1c:99:a7:21:c7:dd:62:
50:e2:99:74:e4:ff:f8:ff:5d:60:0c:eb:eb:04:08:
c0:dc:c9:1d:7d:cf:8e:38:4c:e3:84:52:af:fb:9e:
f8:59:28:d5:c9:11:31:b2:d2:5c:3a:3f:2a:00:7c:
d1:d6:ae:7f:1c:80:e0:7d:88:26:f7:c5:e3:d0:a5:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:EF:FC:91:6B:A6:DD:71:EC:C0:C3:47:96:9D:98:F3:19:ED:72
X509v3 Authority Key Identifier:
keyid:F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/e1fv_JFrpt1x7MDDR5admPMZ7XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:db8::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9f:08:7c:c3:32:cd:44:b1:f8:f5:3b:db:00:ba:67:8d:ea:
61:3b:8d:25:71:6e:19:bc:79:0b:7b:3c:29:23:27:5c:96:69:
67:ca:a6:5f:cc:02:b6:51:84:0f:1e:41:1e:7b:c4:63:5d:6b:
ab:54:62:a8:72:2f:35:92:b3:06:01:5c:16:85:1d:ed:ef:ec:
44:c3:ab:a6:fa:3f:b8:8a:83:94:9f:61:58:02:00:fb:96:a6:
ab:df:6e:44:74:97:5c:e1:ea:59:80:74:3d:ea:36:64:08:91:
a0:a9:ff:2b:bb:71:7f:a6:2e:a5:60:b3:40:75:f5:79:9e:1a:
a8:d3:9b:23:d7:c6:3d:f8:b8:92:01:c8:4c:6a:9a:87:73:51:
e8:97:16:c4:f2:3e:4f:b9:94:8f:3d:ae:d6:7d:4e:2d:94:7e:
2d:16:ed:ba:2b:aa:90:2c:88:7d:44:77:e0:c8:5f:e5:dc:72:
85:eb:4d:71:a8:9d:34:f1:2f:63:7e:7c:6d:d2:b5:13:aa:48:
f0:97:05:c6:39:07:98:ba:7e:4a:f8:7a:35:ef:68:9d:f6:43:
0a:57:d2:81:cd:9e:ec:9c:3e:1e:17:cc:49:c8:f2:de:84:4c:
7c:30:e1:94:b0:cf:2f:d2:ba:97:7b:d2:d4:f5:7b:69:29:a8:
a2:0d:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:27:59 2025 by rpki-client