Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/1-FL3J5HDX1AzUYYBni119Abw4So.roa
File: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (raw, json)
Hash identifier: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=
Subject key identifier: F8:52:F7:27:91:C3:5F:50:33:51:86:01:9E:2D:75:F4:06:F0:E1:2A
Certificate issuer: /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial: 019425218E501CCE5C63EB9B53ABAC0C96D9
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/1-FL3J5HDX1AzUYYBni119Abw4So.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210660
IP address blocks: 2001:678:cdc::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8e:50:1c:ce:5c:63:eb:9b:53:ab:ac:0c:96:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f852f72791c35f50335186019e2d75f406f0e12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:e5:8b:80:3d:1f:85:15:c8:dd:7c:b4:fb:
ff:d6:03:b6:7d:b9:46:b6:5a:56:5c:c8:c9:6e:e3:
b8:87:18:12:36:fa:22:65:9a:19:e5:27:c5:8f:3d:
85:48:85:c7:cb:af:3d:78:da:5c:fe:11:45:d2:ed:
fb:8a:9e:d0:f3:a9:5e:7b:ca:b8:ab:b6:7a:73:92:
ea:6d:4d:79:fd:89:4e:20:cc:81:c8:77:59:7c:73:
02:5a:6d:1b:85:eb:40:a5:2e:56:0d:25:33:0d:17:
a1:c2:90:c8:0f:db:53:7e:1e:ff:e7:dc:8a:db:eb:
61:56:a8:44:12:e6:cb:0e:f0:92:36:a8:bc:7b:34:
85:7b:ef:96:a0:18:72:f2:e0:0c:1b:9f:f4:67:a5:
20:e8:8a:4b:cb:24:a0:21:56:1f:9e:c0:ce:9f:a8:
84:27:d6:96:88:5b:ca:e0:2d:ee:70:e9:ec:c0:33:
f3:84:bb:71:08:ed:68:77:e3:ed:47:e3:94:ea:88:
d9:76:13:6b:af:be:49:b1:6a:bc:fb:53:0c:43:d5:
a0:f9:d3:25:02:e4:95:55:c9:7c:db:3a:c9:f6:af:
21:d8:af:2d:94:62:6e:dd:ad:cd:54:c8:96:ef:c7:
1b:86:50:90:38:09:22:89:2b:9b:fe:5f:64:a3:e8:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:F7:27:91:C3:5F:50:33:51:86:01:9E:2D:75:F4:06:F0:E1:2A
X509v3 Authority Key Identifier:
keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/1-FL3J5HDX1AzUYYBni119Abw4So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cdc::/48
Signature Algorithm: sha256WithRSAEncryption
12:ce:3c:41:ea:e7:5f:07:e9:67:27:66:ab:06:f0:55:c6:48:
01:b9:0a:53:4d:81:a0:8c:7e:61:d3:28:ed:04:fb:17:34:84:
28:23:9f:87:e9:eb:5a:62:73:3d:91:ff:1d:d8:33:0b:8f:91:
56:62:61:cf:7f:ec:20:3b:2e:4f:79:dd:65:cb:85:2b:a0:8e:
a6:cf:ee:95:d9:21:39:0e:d7:27:f1:d8:8e:a8:53:dc:1a:20:
f9:ef:f1:0c:96:e6:b3:8d:00:c6:98:3e:0f:0a:b3:4b:f3:a9:
d0:5f:c1:ba:05:38:f0:af:bf:15:d8:58:3e:fd:57:18:84:f5:
0e:b6:e0:d8:bd:9c:46:eb:9c:ad:00:4a:53:81:73:c8:95:02:
a2:ed:bd:01:7b:ee:f1:70:b3:22:5f:2b:88:cd:a2:4c:7a:fe:
91:d8:85:c4:32:da:1f:27:74:7b:7f:ab:d7:b8:2d:be:8b:f9:
85:d0:e3:d9:67:7b:01:25:37:ab:23:94:9c:8c:5d:06:f5:bb:
4c:9f:1a:da:f3:ff:c8:e0:db:07:ad:0f:37:3e:c9:92:0e:62:
71:7b:44:6c:91:b4:49:23:a0:5d:82:a0:5c:5c:62:19:aa:2a:
7a:30:59:7b:6b:05:7d:01:e0:6d:fe:82:be:a5:78:2e:df:89:
62:8b:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:38 2025 by rpki-client