Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa
File: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (raw, json)
Hash identifier: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=
Subject key identifier: 22:3B:8E:49:49:3F:EE:27:19:5B:61:4E:B0:39:92:B5:9E:6D:73:46
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019427B5D8E3F87587E83475E5F574822DC0
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214712
IP address blocks: 2001:67c:6e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d8:e3:f8:75:87:e8:34:75:e5:f5:74:82:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=223b8e49493fee27195b614eb03992b59e6d7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:ef:8a:e7:e0:fe:5a:6e:34:10:6f:e9:2c:
4e:d0:da:f1:bb:cb:dc:87:0e:eb:72:31:27:11:f1:
37:0b:93:79:0c:7f:df:e7:e3:c6:f0:4b:34:af:c9:
68:71:9c:e1:95:09:89:0e:8a:64:7e:c9:77:66:db:
a1:05:02:74:97:b8:b1:a8:a3:a5:bf:a6:23:3c:b7:
1b:60:7a:51:fe:13:22:90:3d:e3:6e:89:89:c5:4d:
8a:b8:c5:63:89:f0:63:c9:5c:fd:50:3e:5a:b7:65:
7c:ab:eb:c4:37:2e:d9:74:62:20:c3:c5:2c:69:e3:
73:58:6c:e0:fd:21:4f:17:b6:a6:ff:30:03:ba:9f:
3d:b9:53:84:61:fe:bf:5b:81:44:fe:f7:5a:25:c1:
4a:93:ed:1a:f3:60:28:25:24:3d:42:2b:b0:8d:e0:
0c:1e:39:0c:dd:69:e1:97:67:79:6c:7d:15:01:75:
5a:4a:86:36:7c:f0:db:90:cc:c3:1e:7b:f5:5f:36:
57:41:90:84:50:65:c7:b5:f9:0e:94:14:b1:1d:d1:
54:9d:d6:d9:47:7d:e4:5c:90:2a:78:4b:59:b1:2c:
5c:21:91:40:4b:c4:e5:99:74:75:07:dc:01:f4:c6:
d3:f6:56:31:39:3d:c2:c0:34:9f:a5:bf:cd:fe:c6:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:8E:49:49:3F:EE:27:19:5B:61:4E:B0:39:92:B5:9E:6D:73:46
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:6e4::/48
Signature Algorithm: sha256WithRSAEncryption
12:86:d7:80:c6:3d:43:05:3b:e5:95:9f:58:d2:b2:04:ae:8d:
94:64:e6:c7:72:70:31:39:23:82:90:5b:61:94:5a:06:4e:e4:
a5:a4:c4:ed:8b:51:84:15:49:a2:7a:fb:fc:86:ab:0e:13:8a:
26:f0:2b:c2:89:6d:ff:70:cd:1c:64:d4:44:ed:aa:b5:0d:68:
82:94:57:8d:7c:49:6a:f9:1b:8c:95:e5:40:48:0d:ea:a0:03:
63:2e:74:97:1a:5a:da:4c:f2:a2:bd:29:41:d9:d6:49:32:48:
9c:c6:d9:27:26:0c:4c:56:0b:83:4a:6f:d9:42:c5:e3:11:61:
96:05:68:ce:f2:a8:a9:28:d5:ec:4f:1d:ba:46:72:08:57:84:
8f:0a:7c:ea:2b:94:1c:cf:b9:4d:ef:e6:65:01:46:e1:12:af:
51:7e:3a:d0:63:b4:16:17:01:0a:c9:bf:3b:33:38:b3:f3:ef:
f2:23:10:55:53:f2:22:e9:ab:4a:b2:fb:f0:ef:3d:fb:3e:04:
ca:0e:4c:a8:8c:19:6d:32:ac:9b:eb:91:25:ad:58:69:2a:c4:
dd:f3:71:05:55:a1:f7:3d:57:2a:ab:24:33:5a:6b:95:c8:f7:
67:3f:3b:36:45:ed:bd:bd:27:02:c2:8b:51:27:cd:55:b1:af:
37:6e:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:13 2025 by rpki-client