Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/CbRY4qO4S-WijK05eY2wCnYoQJU.roa
File: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (raw, json)
Hash identifier: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=
Subject key identifier: 09:B4:58:E2:A3:B8:4B:E5:A2:8C:AD:39:79:8D:B0:0A:76:28:40:95
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0194258FB9F798E4B04D2061595FA4F7806E
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/CbRY4qO4S-WijK05eY2wCnYoQJU.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196960
IP address blocks: 2001:67c:268::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:f7:98:e4:b0:4d:20:61:59:5f:a4:f7:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b458e2a3b84be5a28cad39798db00a76284095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:09:06:11:6e:2d:24:46:39:b9:60:4f:df:
24:c3:e7:0a:23:29:e4:28:d9:e6:d4:9e:b2:6d:b0:
01:5d:80:6b:b8:ef:c6:da:ca:22:87:88:dc:22:97:
ff:30:5d:df:36:e1:08:77:a8:f5:5b:e8:ea:c3:6b:
28:c5:bf:22:05:13:00:5a:75:84:a3:fb:e9:7a:02:
7c:67:d8:02:4b:e9:f2:78:4a:c9:a1:7a:c6:56:49:
4d:7d:e9:a3:08:fc:17:19:24:70:3f:0c:d6:f0:8a:
69:4b:0a:55:ee:72:84:05:f0:2c:e4:3a:b6:19:d4:
9c:37:14:10:51:79:11:51:75:cb:67:1d:84:b6:32:
08:a8:71:2d:82:52:b7:95:bd:ca:72:bb:7f:71:64:
f6:84:6b:1d:d7:d2:b0:23:dc:be:f6:f8:e4:5c:fc:
49:11:eb:f6:bb:b1:21:00:b4:7f:5f:20:8f:99:a7:
27:fe:ca:62:7a:6c:3e:17:b6:bf:6a:4d:72:7e:fd:
0f:48:94:d3:93:e1:5d:99:42:c2:b3:40:2f:a8:3c:
e6:de:d3:3d:3c:6d:80:14:b9:0b:6f:a1:d1:4e:7b:
c0:f3:ea:37:ff:9f:47:20:53:a5:5a:12:c9:17:43:
af:a2:94:8b:b6:0a:ee:03:d9:7d:e0:83:c3:8e:d6:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:58:E2:A3:B8:4B:E5:A2:8C:AD:39:79:8D:B0:0A:76:28:40:95
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/CbRY4qO4S-WijK05eY2wCnYoQJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:268::/48
Signature Algorithm: sha256WithRSAEncryption
26:fc:3e:31:d9:d6:97:7f:db:93:58:86:6d:4d:82:9f:c2:49:
ba:cb:33:ee:8d:4f:77:db:9b:1c:7b:27:3b:5e:64:f6:38:5c:
b2:d6:51:33:b0:0c:42:ee:dc:0f:aa:70:5a:6a:9c:a8:35:1f:
1c:d6:b6:d5:ed:ed:87:ef:5f:6d:57:e5:15:e5:ed:8b:b6:77:
2d:cc:48:e5:cf:2e:11:ee:02:bf:06:b1:9a:f2:a3:1f:94:b6:
fc:72:11:35:92:fe:7a:33:71:4c:bb:30:d2:f3:e1:b4:91:cb:
12:b7:88:ee:ac:85:e9:f1:d8:6a:15:33:67:01:78:af:2b:e8:
d1:47:37:fc:93:aa:4a:20:23:06:c2:18:38:ea:13:8f:69:c3:
80:87:73:0a:68:5a:2a:7b:03:32:6f:9c:69:96:41:7e:c0:8f:
70:bb:9e:6b:f8:5e:d2:26:5c:02:e1:76:70:2d:8f:b6:f8:30:
a4:f6:0a:c2:77:71:34:3d:f5:a7:10:53:52:95:22:04:14:48:
2e:d1:9d:46:6d:21:e0:ab:d1:59:9b:db:38:90:67:ae:f0:d9:
40:ef:d8:24:09:a9:86:65:36:39:3e:10:8c:6e:89:3d:f8:9d:
a0:74:c8:19:e8:3f:b1:1d:85:7d:2a:e3:59:61:18:b8:27:8f:
f8:29:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:02 2025 by rpki-client