Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/7vWonm9bF5IcZc4b_JwarXdqm9s.roa
File: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (raw, json)
Hash identifier: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=
Subject key identifier: EE:F5:A8:9E:6F:5B:17:92:1C:65:CE:1B:FC:9C:1A:AD:77:6A:9B:DB
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019421B1C65A26930D88BBBC837920CC5D82
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/7vWonm9bF5IcZc4b_JwarXdqm9s.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204896
IP address blocks: 2001:67c:17c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:5a:26:93:0d:88:bb:bc:83:79:20:cc:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef5a89e6f5b17921c65ce1bfc9c1aad776a9bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:d5:3f:a3:f1:58:5f:06:13:e1:47:28:94:
2d:b4:57:42:bd:7b:fb:fa:e5:cd:e3:34:ca:29:fb:
04:47:f4:af:0d:7f:1d:df:a8:5c:b8:ac:47:2a:c3:
6d:02:6f:b8:68:6a:54:40:29:b8:00:78:84:94:5c:
24:09:b6:25:b0:e4:8c:5a:a6:54:eb:4b:04:f3:c7:
a3:9a:42:9a:64:e0:43:73:73:a2:1d:ea:5f:3c:5b:
e5:9e:5a:a9:3c:46:9b:e2:b6:3c:17:27:26:25:f8:
05:90:af:90:47:a8:52:61:fb:ec:0c:0d:dc:8f:01:
40:ba:c3:58:b6:81:67:d5:3f:91:77:e3:07:7c:4e:
fa:c2:5d:63:e4:d4:a4:93:cd:55:7f:46:0d:f7:69:
84:87:3a:9e:f2:79:22:14:a8:e2:57:4e:76:a7:7d:
4a:4d:bd:9f:d9:f5:fc:d3:50:c2:00:ba:1c:ce:58:
ab:db:ef:ad:84:4f:80:13:30:cd:81:23:7e:31:c9:
d5:a9:8e:da:22:39:53:fc:80:a6:b0:d0:42:46:2c:
e8:10:fe:98:1a:d0:c5:d7:a4:61:47:43:af:f1:b7:
75:9e:31:06:e9:e7:38:95:32:dc:6d:f6:97:ad:b8:
8e:51:95:53:b6:c6:4b:b9:08:60:5a:64:23:8e:5a:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:A8:9E:6F:5B:17:92:1C:65:CE:1B:FC:9C:1A:AD:77:6A:9B:DB
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/7vWonm9bF5IcZc4b_JwarXdqm9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:29:b2:4c:1a:29:b3:a8:c4:3c:1a:18:b2:5d:be:35:24:ee:
21:25:7b:ef:19:3e:4a:45:de:9e:4c:e7:90:cd:27:8f:40:48:
58:cb:2d:b3:79:b4:c3:f8:13:4e:c7:b3:37:d6:92:a2:c0:a5:
2a:4e:87:02:5e:27:9e:6d:c7:b8:4a:76:0e:65:80:79:d3:87:
a7:2d:8c:49:73:7a:d1:b7:07:9b:60:d2:90:f2:33:d5:5e:4e:
6e:c7:ae:9b:2c:4b:d4:89:bd:69:ea:f5:f1:c3:50:a0:03:20:
1e:27:b0:c2:c7:42:94:0a:20:5c:cc:60:cb:4f:27:0d:50:7a:
34:a6:fd:bf:b0:8b:42:68:b6:0b:93:5e:67:4b:50:cc:52:72:
58:d5:7b:9a:72:56:23:1d:73:51:3f:36:23:db:a6:7c:d8:4f:
4c:d2:55:70:96:8b:21:1a:bc:e9:9e:1c:08:34:2e:3e:e6:76:
1b:2c:6c:ef:fb:74:2d:42:dc:64:96:99:bc:15:76:48:5d:7d:
aa:5d:ce:a8:3b:23:af:63:88:0c:c5:10:b9:d2:38:90:e8:7e:
89:b1:03:5a:8c:bb:59:6e:e2:e2:8c:4b:cb:fb:c8:42:7d:ca:
5a:c8:a1:0e:b1:4e:b8:bc:9b:40:9a:c1:db:ff:59:f7:fb:fd:
da:94:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:41 2025 by rpki-client