Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/tg3tt4CcvJitXQEqVPxg5ttt9Eo.roa
File: tg3tt4CcvJitXQEqVPxg5ttt9Eo.roa (raw, json)
Hash identifier: yGdPxHiy2/23FGq/l1RQJi2bmwu/aMnyVmTI18Ildio=
Subject key identifier: B6:0D:ED:B7:80:9C:BC:98:AD:5D:01:2A:54:FC:60:E6:DB:6D:F4:4A
Certificate issuer: /CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Certificate serial: 0194266C20000F2B5B10F1E54FC71D2B995C
Authority key identifier: C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/tg3tt4CcvJitXQEqVPxg5ttt9Eo.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48635
IP address blocks: 2001:678:3a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:20:00:0f:2b:5b:10:f1:e5:4f:c7:1d:2b:99:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b60dedb7809cbc98ad5d012a54fc60e6db6df44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:64:1f:cd:03:7d:3d:ec:74:d2:8b:51:dc:
e8:7c:78:e8:89:a7:b5:14:07:71:47:70:37:7c:bd:
ac:50:20:82:5d:32:13:4a:38:d0:70:1d:be:e3:eb:
d2:4d:95:92:c3:0c:54:3a:8f:3d:cd:1d:a9:c5:97:
76:cd:75:9c:2e:e3:4a:69:9d:c9:7d:9f:0f:54:7c:
87:f9:0c:fa:a9:c6:59:8b:80:c8:26:b2:2b:3c:c6:
3e:f5:4b:ca:d0:fb:43:f1:80:82:f8:dc:f4:5d:0e:
ab:82:bc:c4:9f:f8:8c:f1:75:e1:9f:3d:09:f8:8d:
37:9c:29:4b:78:1d:87:a8:75:87:45:c6:38:71:d3:
84:a0:2e:3f:af:5a:1d:57:d7:8d:46:24:cf:5c:61:
20:12:c7:b5:d8:2f:0a:88:b7:ce:35:38:f4:77:a0:
6d:2a:1e:e2:32:d9:5e:7c:95:15:83:fc:c7:a5:c5:
af:62:31:2f:36:e7:47:e1:75:0b:f8:36:d2:b1:83:
ee:67:08:27:75:ef:e0:56:8f:90:12:34:3c:a0:8e:
63:59:9e:22:07:5b:f4:2e:30:1c:5a:e1:81:0e:73:
a0:89:54:68:c5:ca:fd:15:93:b2:da:13:28:61:6a:
8d:7f:96:89:13:97:d5:76:2b:b1:86:c0:2f:69:26:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:ED:B7:80:9C:BC:98:AD:5D:01:2A:54:FC:60:E6:DB:6D:F4:4A
X509v3 Authority Key Identifier:
keyid:C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/tg3tt4CcvJitXQEqVPxg5ttt9Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3a4::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c9:10:2b:d9:e4:ca:99:8c:ec:34:50:de:0e:e6:0c:4d:35:
fe:c0:b8:a0:1f:de:ff:51:a2:82:ec:be:a2:fc:73:9f:85:f3:
d3:00:2f:0c:1a:cd:15:74:18:61:11:de:90:41:11:09:93:62:
30:2a:3e:dc:9d:6c:49:bc:fa:8c:b4:0c:94:a5:64:ca:17:59:
7c:8e:cf:0a:08:0f:85:cb:ee:6e:4c:05:64:e3:97:52:1a:2b:
26:f9:d7:3f:2a:1e:33:6e:53:f2:b4:8f:60:dc:4d:0d:94:8d:
f0:56:50:86:91:2f:5c:07:7a:cc:eb:e1:98:86:58:65:cb:4b:
71:71:c3:01:02:63:c7:e8:3b:73:81:dc:59:e4:4b:d2:dd:9b:
c7:79:7b:3f:ce:78:94:b1:df:91:76:5f:78:a9:69:5d:09:ff:
c7:73:4b:02:42:d2:bc:ba:ed:bf:15:b4:11:b2:fd:da:d1:14:
89:df:86:3d:e4:58:cd:e9:dc:99:89:f8:88:58:2a:57:22:d4:
76:1a:63:7c:cc:9f:35:8b:36:15:4f:e6:e4:7c:45:28:87:bf:
f0:45:93:c2:45:f7:3b:66:e1:a6:8e:dd:18:e2:68:54:8b:09:
2e:44:38:25:69:ca:cd:2c:25:f8:fe:dd:ab:2e:90:71:30:f6:
fa:f8:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:00 2025 by rpki-client