Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/RuuQV8FVAOprAh_8jcQjyKszeBc.roa
File: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (raw, json)
Hash identifier: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=
Subject key identifier: 46:EB:90:57:C1:55:00:EA:6B:02:1F:FC:8D:C4:23:C8:AB:33:78:17
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019427471520D16A65440BB9B34F069DCB21
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/RuuQV8FVAOprAh_8jcQjyKszeBc.roa
Signing time: Thu 02 Jan 2025 13:49:17 +0000
ROA not before: Thu 02 Jan 2025 13:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199678
IP address blocks: 2001:67c:12d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:15:20:d1:6a:65:44:0b:b9:b3:4f:06:9d:cb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jan 2 13:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46eb9057c15500ea6b021ffc8dc423c8ab337817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:dc:09:db:b0:59:7f:02:50:9e:25:46:05:
ab:d4:2d:78:19:8f:12:b4:30:4c:6d:f9:8e:16:4c:
12:8b:67:e6:6f:aa:ad:8a:7a:d9:15:71:d8:3e:27:
e2:5d:5c:44:af:0f:cc:b0:5f:1f:26:00:0f:64:d9:
64:ba:60:20:7a:c1:11:1e:5d:f5:9a:f2:ca:4e:1f:
53:f8:ea:b5:71:dd:d2:01:48:fe:03:88:fa:19:29:
af:42:ff:df:39:70:e0:bb:f9:b5:8e:57:bd:09:cf:
d2:97:79:04:86:ba:57:a9:54:6c:d5:52:1c:6e:f8:
54:b5:59:22:05:b9:f8:ba:56:70:6a:51:4a:c6:f4:
61:0f:a6:b3:84:1d:e9:03:3c:90:b8:92:4a:12:df:
f8:00:7a:1b:32:0f:90:db:09:a2:44:d7:55:32:f7:
20:74:3d:a2:4b:ca:2b:07:08:ff:ad:91:19:69:73:
4d:8f:e2:e4:c4:8c:ff:ac:5a:aa:b6:b7:28:76:0b:
87:97:28:d1:4e:5d:ef:3c:cf:a2:07:e8:af:69:82:
95:68:d1:1f:aa:37:21:bb:21:37:47:1e:2f:65:cf:
a2:68:e5:8e:16:62:5f:a5:70:30:85:b9:cb:fa:33:
43:60:05:a5:c7:9d:1d:0d:39:82:51:c7:77:54:44:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:90:57:C1:55:00:EA:6B:02:1F:FC:8D:C4:23:C8:AB:33:78:17
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/RuuQV8FVAOprAh_8jcQjyKszeBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12d4::/48
Signature Algorithm: sha256WithRSAEncryption
5c:59:3c:33:ac:62:60:0f:9e:b0:f6:63:04:ec:74:f3:c9:48:
fe:e1:d4:d0:ac:8b:ec:1a:fb:2e:69:4c:cc:7f:ea:1c:8b:66:
ac:bb:e7:e7:8d:78:02:6d:ce:3c:53:ea:77:5b:fe:40:2d:13:
bf:20:b4:42:b6:16:37:69:05:df:e3:81:8b:4c:1a:fd:e2:20:
ad:ea:50:c1:b4:fd:10:67:43:66:a7:4a:54:67:2e:a3:72:e9:
5f:f3:02:ec:97:07:ba:4a:58:c9:20:f9:51:02:b6:12:40:dd:
01:8f:f4:92:2d:4c:60:14:5b:51:80:67:0a:4d:d3:77:5d:cb:
3d:27:83:4e:39:e3:01:f4:55:db:56:38:46:cf:9a:51:b9:b6:
01:fe:89:2c:4c:ba:d2:a0:2c:7a:fe:f0:6c:a1:8c:59:45:40:
00:f1:2f:41:70:6f:77:6b:6d:ee:1f:a0:64:48:9f:81:72:5b:
74:87:27:53:59:67:dc:68:0e:37:e2:e7:1b:77:6a:7a:16:ab:
0f:d2:df:e1:ff:02:fc:9f:82:1c:05:01:6a:3b:88:2e:e9:35:
af:2c:84:9a:4f:1d:b0:0b:50:e7:a7:09:3d:eb:4e:8c:08:44:
19:57:69:7a:14:c0:a7:38:8c:bf:2e:3f:a8:a2:84:45:bb:68:
65:40:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:47 2025 by rpki-client