Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa
File: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (raw, json)
Hash identifier: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=
Subject key identifier: 0A:9B:8C:56:1E:2E:27:5B:5C:A2:3F:CE:91:0C:A0:69:43:7F:86:1F
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 019427B58BBDE1A759E46A1AE2104A6D3EF4
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199392
IP address blocks: 2001:67c:c28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8b:bd:e1:a7:59:e4:6a:1a:e2:10:4a:6d:3e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a9b8c561e2e275b5ca23fce910ca069437f861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:a3:a0:c1:33:83:c0:71:7b:f2:6b:af:35:
eb:4b:1f:8e:eb:cd:44:ce:98:7e:e8:2f:f7:b5:3f:
35:0b:20:c4:e8:d0:d9:d0:67:7f:b0:3e:bd:8e:51:
7f:91:b8:37:d3:15:7b:e9:c2:25:22:73:9b:89:dc:
ff:3b:07:77:31:06:21:b4:8d:34:30:cf:da:6a:60:
e6:22:c3:dd:45:9d:70:c9:52:bb:bb:dc:85:89:77:
4b:14:7b:f3:75:89:f6:bd:48:88:54:46:c3:84:f0:
23:55:0f:da:b0:0f:ef:d5:26:41:0b:d7:a2:f1:58:
18:e3:32:ec:f7:28:4a:83:66:49:d4:cb:6f:d4:b9:
a6:59:9e:7b:bc:0a:ea:de:7e:87:24:2d:84:5c:61:
ec:01:b0:55:ec:79:f7:f0:66:8b:15:e0:d0:54:f5:
ca:9f:e8:a3:2e:34:8a:52:b0:d6:2b:f0:e4:48:8b:
78:3b:b4:d0:cd:d9:f1:b7:2e:c8:c8:54:80:5e:2d:
27:f2:cf:1d:71:e4:3f:3a:dd:0f:53:8e:86:96:13:
19:6b:e0:72:54:3f:eb:68:0b:42:aa:88:83:fb:b1:
c9:c5:66:52:51:72:ac:f4:30:19:e7:de:fc:46:06:
64:df:8a:d4:db:66:a7:e1:40:bf:4a:56:3b:10:de:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:8C:56:1E:2E:27:5B:5C:A2:3F:CE:91:0C:A0:69:43:7F:86:1F
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c28::/48
Signature Algorithm: sha256WithRSAEncryption
ae:64:6f:2c:57:15:93:9f:c5:cb:5a:53:63:dd:a6:32:74:b8:
13:3c:1e:39:34:0e:55:82:00:3a:c6:6e:ec:34:6c:db:87:52:
f4:57:5c:87:73:88:d2:26:45:9c:75:73:ec:23:a2:1f:7a:7a:
c7:c1:cc:68:51:c6:ed:70:2b:60:58:7f:46:83:e2:f1:25:5d:
de:6c:8b:7f:4b:cb:85:49:ce:fa:82:97:80:71:04:de:ed:1b:
98:40:66:8b:46:26:5b:cd:6e:e3:b7:7e:aa:72:2d:5d:a7:56:
81:bd:8f:56:75:ec:ff:fb:e7:53:31:6e:f4:65:52:8b:76:75:
27:d7:59:9e:ad:ad:d7:1a:cd:d3:38:7f:99:36:29:39:fb:65:
a8:6c:60:4f:ae:e7:9e:8b:5a:5d:de:d6:6a:e8:5f:5b:c7:61:
32:78:50:ed:6a:76:f4:31:d3:db:94:b9:48:e3:ee:91:8a:6e:
37:21:eb:5a:48:92:f8:66:fc:1b:03:22:a6:73:d0:56:ca:81:
44:26:ac:fc:ec:2a:eb:31:84:d2:a7:dc:c2:ec:4b:98:32:e9:
05:8e:91:79:77:10:81:73:82:d9:63:86:b7:c7:27:7c:1b:7b:
8b:e2:bb:e1:94:aa:7c:4b:9f:8f:e7:97:9e:32:6d:46:bf:50:
3a:2f:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:13 2025 by rpki-client