Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/jH1x7tCRtg5jN4v24LJl9VjwMwY.roa
File: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (raw, json)
Hash identifier: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=
Subject key identifier: 8C:7D:71:EE:D0:91:B6:0E:63:37:8B:F6:E0:B2:65:F5:58:F0:33:06
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 01941FFA56895F2E49D0E96DA4657A8424F1
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/jH1x7tCRtg5jN4v24LJl9VjwMwY.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214147
IP address blocks: 2001:67c:f9c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:89:5f:2e:49:d0:e9:6d:a4:65:7a:84:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7d71eed091b60e63378bf6e0b265f558f03306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:06:7c:ef:25:25:16:a1:41:51:a0:7e:55:
c9:e3:fd:c1:d3:ab:ea:4d:cb:83:46:6a:40:b4:49:
e2:29:87:4e:bf:da:4c:18:17:70:d7:41:99:62:71:
aa:50:86:0a:71:c7:3b:55:31:32:6e:46:7e:7b:4a:
7e:eb:f8:e1:66:a2:c8:45:5b:1f:75:db:b5:09:05:
8b:62:a7:cd:8a:d6:c5:24:f8:1c:0e:c2:e4:51:2a:
a3:e9:fb:c7:b5:11:b6:44:40:8e:b6:77:8e:c9:91:
25:3c:97:2e:65:f7:29:53:9a:a6:81:df:55:cc:d9:
e4:2b:6c:bf:0a:4b:0f:6e:1c:4a:16:fa:af:12:1a:
36:33:07:98:6d:12:87:ae:1e:23:70:ef:78:fd:42:
83:bf:b9:af:60:f0:02:b5:30:3a:67:63:d0:37:98:
b7:d2:63:49:04:e5:dd:da:48:c9:00:ea:fa:1b:67:
7e:bb:cd:91:1f:1c:82:d1:ba:80:84:ea:ca:92:d5:
e1:fe:28:e5:ce:2b:fd:9c:0e:04:a4:45:d4:df:c9:
4e:30:0c:fc:b6:50:e1:ca:1b:0b:77:22:36:94:fc:
a3:4d:cc:db:21:e7:68:48:16:99:73:95:d6:cf:84:
dc:4c:d0:84:58:74:05:09:ab:49:d9:62:6d:39:bd:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:71:EE:D0:91:B6:0E:63:37:8B:F6:E0:B2:65:F5:58:F0:33:06
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/jH1x7tCRtg5jN4v24LJl9VjwMwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f9c::/48
Signature Algorithm: sha256WithRSAEncryption
65:b9:0e:1a:c8:25:b3:4d:75:e2:48:05:e3:19:f3:7f:a1:e1:
80:48:85:22:15:43:30:95:d2:27:23:b6:8a:18:e8:76:cd:14:
0b:9e:48:c4:bf:2b:95:d7:a2:01:ad:da:06:d7:42:cd:d6:12:
c5:e1:c6:07:93:75:23:c1:e6:8b:79:45:15:3f:63:46:19:60:
07:a1:10:77:62:85:67:ad:b2:1b:31:11:c7:03:ec:82:c9:01:
06:b5:35:5a:b1:8d:d1:10:ec:63:0c:e7:65:ff:cc:1b:b6:68:
6f:7b:2c:db:47:1e:5b:24:95:98:95:f2:99:eb:ae:3e:57:e1:
24:0d:20:d4:99:a1:9b:86:4d:5d:ff:7a:58:b7:67:30:c7:5b:
c5:ed:b7:ea:1b:49:12:7f:2c:36:24:cc:6e:f0:32:80:6b:56:
7d:57:bb:fa:0c:8b:22:6d:ff:b4:0c:47:76:68:b3:35:a4:d9:
9b:ff:a9:c0:c0:36:d1:e5:08:49:1d:6a:43:f1:43:0c:84:9b:
4b:dc:3e:06:f7:21:cc:5e:dd:39:69:7d:25:75:c2:a4:e2:03:
fb:d1:0c:e9:7f:e4:78:31:4d:71:21:13:85:31:39:ac:4d:c3:
9a:70:4d:b5:9a:61:dd:07:0d:32:41:28:64:a8:d5:c0:c7:09:
a5:f9:c0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:40 2025 by rpki-client