Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa
File: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (raw, json)
Hash identifier: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=
Subject key identifier: 81:6C:6D:C3:86:56:95:C9:6C:14:3A:0A:F7:FC:FC:63:3B:EC:44:13
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 019425FDEEF5920B9F615FA423469758DAE9
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34359
IP address blocks: 2001:678:ebc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ee:f5:92:0b:9f:61:5f:a4:23:46:97:58:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816c6dc3865695c96c143a0af7fcfc633bec4413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:40:44:aa:2d:65:b5:50:ce:70:8e:e4:46:
9d:cd:ed:e6:e9:4c:c0:f4:6b:ff:15:cd:9b:eb:80:
b4:8b:6c:ed:3f:73:55:1c:10:d8:33:7e:22:3c:b5:
09:06:01:46:35:24:e6:8d:d8:66:40:e7:13:8b:a0:
44:2d:ea:16:c2:a2:12:b2:c7:00:6e:6c:90:1b:b9:
a9:90:75:50:dd:6d:b5:65:5a:75:71:14:b3:e0:a1:
ad:8d:6a:63:cb:90:b2:d7:27:cb:15:66:25:98:07:
58:e7:23:77:f4:9b:8d:95:1e:e4:09:8a:a7:d1:32:
9c:ac:56:98:e7:66:76:cd:6c:98:89:21:fe:e3:76:
2f:f2:05:67:ff:c6:11:76:69:db:a1:19:21:cf:94:
6c:45:84:e6:ba:17:91:5d:1f:b0:8d:9c:ad:c7:5e:
75:c7:93:61:27:12:4e:e7:92:66:ba:97:a6:d4:f5:
9d:f9:47:9a:0f:af:b5:a2:2b:bc:d3:45:42:2b:94:
70:70:5d:cd:14:b1:1a:8c:48:18:0e:a4:57:bf:4b:
70:c4:ec:30:0c:0f:21:6f:b0:f8:29:d4:b8:39:94:
af:04:28:28:1e:dd:ec:4d:09:69:36:d8:aa:38:e0:
bb:22:04:4d:11:e7:25:d5:ef:48:59:4e:8c:32:c6:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:6D:C3:86:56:95:C9:6C:14:3A:0A:F7:FC:FC:63:3B:EC:44:13
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ebc::/48
Signature Algorithm: sha256WithRSAEncryption
7d:1a:78:e9:75:a2:4e:b0:88:55:4c:96:12:9e:79:4e:ae:eb:
f4:fc:5d:29:de:ba:8a:49:36:e8:9b:6d:a2:0c:fd:14:03:99:
4a:af:56:f8:03:a6:a3:93:35:09:4d:92:e3:91:a2:e2:41:b6:
24:78:84:57:44:38:ad:a6:c4:0a:47:f5:f4:99:cf:1f:38:03:
93:30:01:5f:d5:e7:dd:47:2f:e2:56:ad:37:7b:2e:65:13:7a:
a9:21:6b:51:c4:05:07:5d:b7:cf:8a:28:61:7c:6a:67:2a:07:
73:48:d3:40:8b:7b:35:5e:71:39:d0:7b:be:ce:67:23:a4:b6:
ca:2c:e4:5b:66:90:55:bd:62:21:6c:fa:a2:b3:e4:d9:c5:f0:
94:c9:72:da:b9:ae:40:72:f1:c3:cd:22:36:33:50:67:7e:f3:
cc:73:e0:89:05:42:69:6b:23:f5:45:5d:92:17:a6:b1:e9:6a:
2f:5e:5c:e2:bf:d5:d8:f5:07:10:a3:d4:21:b1:7b:00:30:f7:
e1:0d:f6:3f:bc:47:0c:bc:2b:02:81:03:c2:90:40:4a:de:e3:
c4:90:93:b4:b0:6d:14:ab:dc:4a:b9:24:92:f7:2a:47:2c:76:
e8:cb:51:f2:6e:f5:32:c5:bc:23:44:16:00:43:d3:0a:66:28:
07:f4:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:47 2025 by rpki-client