Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/V_bFPJiZiN3dn69rtGf2PU2V_7s.roa
File: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (raw, json)
Hash identifier: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=
Subject key identifier: 57:F6:C5:3C:98:99:88:DD:DD:9F:AF:6B:B4:67:F6:3D:4D:95:FF:BB
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 01941F8C32A12FEC35A5843D2429A82633DF
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/V_bFPJiZiN3dn69rtGf2PU2V_7s.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7007
IP address blocks: 2a0c:d2c6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:a1:2f:ec:35:a5:84:3d:24:29:a8:26:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57f6c53c989988dddd9faf6bb467f63d4d95ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:75:6b:ae:34:af:c0:27:4b:2e:2c:e2:d8:
db:c7:32:e8:20:00:97:de:3e:f3:a0:b9:0c:0e:67:
ee:75:48:ad:7b:d5:2d:50:ef:7f:f3:1f:57:df:29:
44:48:bb:bd:ab:2d:55:c7:2f:0d:50:3c:f8:92:35:
7e:b9:1e:79:de:64:27:43:aa:a1:3d:40:75:2b:08:
87:b2:b0:42:19:0c:6f:8d:dc:a7:3f:48:eb:c5:fa:
92:69:30:7d:81:96:0f:b8:6a:79:aa:e8:92:a5:f8:
0a:20:01:f9:a3:9e:4b:96:40:ce:1b:86:f8:46:31:
31:99:48:30:24:35:64:20:c7:4d:2e:6f:11:27:22:
f1:ce:a5:06:bd:26:55:a0:e5:eb:a6:a5:ad:c2:65:
ed:55:46:3d:57:ea:b3:fd:92:82:5f:21:cf:69:d7:
e7:50:2c:66:53:ae:c4:c3:0c:97:44:dc:e3:70:f1:
b0:f3:f4:30:05:50:20:fb:8e:f9:d7:d1:65:1a:34:
08:be:08:16:c1:2b:94:b8:f3:01:13:99:e2:27:f4:
ca:f5:1c:79:36:3a:d4:6f:15:a1:f8:97:fa:a3:0a:
04:9c:44:30:67:16:6c:79:79:48:db:27:84:b1:17:
89:e1:cb:e3:25:ac:8e:4f:71:8f:6c:12:bc:b5:a7:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:C5:3C:98:99:88:DD:DD:9F:AF:6B:B4:67:F6:3D:4D:95:FF:BB
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/V_bFPJiZiN3dn69rtGf2PU2V_7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d2c6::/32
Signature Algorithm: sha256WithRSAEncryption
43:ef:6e:83:9e:5e:8c:2c:ec:06:56:15:52:48:38:ba:e4:ce:
f8:d2:34:19:4b:80:fa:0f:a5:fa:77:52:eb:ad:2b:10:c1:2c:
06:6a:38:7c:49:1e:fa:95:e0:9a:6e:22:74:6a:4f:8b:60:d3:
35:5b:55:1d:f3:7a:f7:59:43:71:b8:58:e6:1e:47:1b:05:82:
dd:66:7b:26:f6:3a:1c:f6:61:bf:e6:bb:34:b2:d8:08:99:71:
53:9f:72:dd:28:c4:c7:ed:1f:91:ed:98:ca:ef:04:26:c6:8a:
09:6e:bf:10:eb:08:6e:85:5b:07:a2:80:ce:39:f0:5e:6f:22:
e8:93:cc:45:1e:29:c6:ae:66:90:60:cb:91:43:2e:de:e8:98:
58:f1:50:42:28:53:13:16:da:05:b2:af:56:f3:d1:75:94:09:
2f:4b:34:18:02:5b:62:fb:70:5e:46:54:ea:f2:00:8a:7a:f5:
b0:49:5a:1b:9c:ef:35:28:44:1b:ad:91:25:48:7c:d7:1e:37:
df:d9:c7:69:a2:c7:46:54:d2:99:f5:1c:0d:81:d6:26:8b:63:
ca:d6:34:56:9a:5e:75:1d:69:b7:2e:89:69:68:cb:f3:03:bb:
80:92:1e:b6:d3:ec:ed:ab:42:03:24:51:1c:7e:b7:e9:5e:08:
7a:be:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:16 2025 by rpki-client