Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa
File: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (raw, json)
Hash identifier: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=
Subject key identifier: F1:C2:F1:C2:18:B0:67:5E:68:E7:62:06:D2:52:1C:06:6F:01:7C:84
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019427474BA60B00636E06C5676DA17EB9DC
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa
Signing time: Thu 02 Jan 2025 13:49:31 +0000
ROA not before: Thu 02 Jan 2025 13:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201513
IP address blocks: 2a00:5da0:8010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4b:a6:0b:00:63:6e:06:c5:67:6d:a1:7e:b9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 2 13:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c2f1c218b0675e68e76206d2521c066f017c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:12:f8:ec:d2:24:53:79:ac:5e:7b:1d:bc:
45:22:18:5f:c1:a1:08:bf:ef:5d:12:05:b9:97:21:
dd:77:56:a5:2d:24:73:aa:65:1c:b3:3b:37:55:d7:
2b:a3:4a:f2:c1:9f:a3:30:16:73:99:30:56:2f:49:
64:86:79:5b:a6:8f:4e:86:a4:4c:4e:f4:19:40:0e:
33:ae:e0:0b:57:b8:f4:0c:0c:06:b9:41:b9:e8:55:
39:87:ca:ec:0a:3a:7a:ad:46:97:66:95:3e:c1:e8:
a3:37:0c:0f:84:80:ae:8d:c6:2f:12:ff:ff:a1:47:
6e:3c:f7:da:a5:90:fe:5b:cd:c3:d8:ce:3f:b3:f8:
3a:75:ad:fd:1d:b9:72:44:ee:49:54:7a:df:36:01:
16:f0:99:33:7a:d3:50:35:82:5c:1b:f2:dd:96:7a:
5b:bd:8f:29:fd:f1:f0:65:5c:b1:77:49:8b:42:c5:
16:51:c2:3a:15:6a:ba:8c:79:9a:0d:a2:89:7c:55:
68:2e:8b:fe:96:38:53:74:0c:cb:cd:17:0e:39:e8:
08:08:80:9e:47:a0:d2:6a:d4:ce:24:37:a3:cd:c4:
17:d4:d5:aa:e8:c6:43:34:ce:8f:9c:5c:f6:4f:d2:
64:eb:e3:43:7f:b4:71:46:f7:67:8b:f7:fe:c6:6d:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:F1:C2:18:B0:67:5E:68:E7:62:06:D2:52:1C:06:6F:01:7C:84
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:5da0:8010::/48
Signature Algorithm: sha256WithRSAEncryption
32:cf:f5:9c:66:d6:b8:61:c8:bc:96:f1:fa:45:b2:b5:12:b4:
af:59:d8:25:2b:32:73:cc:83:a1:ba:99:4f:4c:cf:15:bc:c5:
f5:6d:35:6a:45:cd:62:c9:3d:32:61:85:f4:44:b5:9d:17:b5:
f7:1b:03:a2:a6:44:29:c8:af:c9:92:f3:12:a0:9f:19:7f:94:
58:94:e4:44:ab:78:18:eb:e1:99:7a:34:cb:d2:3d:bf:e7:3f:
5e:63:58:30:4e:2c:72:1a:fd:37:e2:0c:b3:63:14:2d:a3:30:
16:c3:dc:eb:ca:ec:11:e6:8e:ec:71:87:b7:15:3e:23:e5:eb:
78:8d:ef:5d:4b:e9:b4:6a:2e:44:de:f7:7b:c6:80:15:06:a0:
ca:df:b7:1b:44:8c:9f:f2:e8:88:50:03:90:a9:42:ba:e1:76:
3d:05:89:ef:63:ee:03:65:2d:18:13:0d:f7:a6:95:ad:fa:9a:
4f:2e:14:1b:94:25:f9:43:ad:06:67:ef:7d:6f:7d:29:fb:f4:
e3:1c:27:76:9c:38:f8:45:96:1d:96:54:54:0f:ad:5d:6f:85:
b8:81:93:3a:05:2e:68:4f:72:a5:56:29:3e:e4:56:d9:de:8f:
41:82:77:f9:e3:69:b1:8f:a1:0b:ed:69:b6:76:db:c8:f6:f0:
d6:71:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:51 2025 by rpki-client