Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/IZAxEHA5n8YPukULkPEQv7owY4Y.roa
File: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (raw, json)
Hash identifier: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=
Subject key identifier: 21:90:31:10:70:39:9F:C6:0F:BA:45:0B:90:F1:10:BF:BA:30:63:86
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019424B39BA47E72635DD2BD03CCD232626A
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/IZAxEHA5n8YPukULkPEQv7owY4Y.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206835
IP address blocks: 2001:67c:868::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9b:a4:7e:72:63:5d:d2:bd:03:cc:d2:32:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2190311070399fc60fba450b90f110bfba306386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:f0:bc:f4:95:42:87:ab:90:06:62:7f:00:
e6:4e:b7:7d:f4:0b:2a:79:f4:03:ec:2a:2b:9d:d3:
30:ba:49:94:48:65:4e:91:ad:e1:d7:0f:50:10:10:
cb:db:80:1a:37:4d:5f:bf:db:f1:91:52:d7:67:62:
23:85:e9:24:91:10:4e:5e:7c:a4:52:b5:5d:24:ef:
a2:be:16:a2:28:c8:59:04:a1:28:dd:1c:f0:6b:d2:
19:40:ec:1d:17:af:eb:fc:2a:d6:a2:85:8e:67:f2:
cc:0e:ca:55:02:64:91:aa:5a:cf:cb:3c:6f:08:84:
07:74:1e:40:3c:95:96:d0:57:50:07:e5:3a:dd:d4:
6c:ab:6f:80:b8:39:ce:be:8c:14:1a:1b:30:c3:bb:
05:67:e6:e8:93:56:b7:1a:36:d8:c3:59:75:85:de:
7b:71:ab:77:4f:94:46:cc:fb:64:4b:82:48:5a:3d:
0e:17:75:b7:b2:6c:60:08:ce:44:72:8c:30:3e:71:
d3:e1:b1:0b:77:4c:87:e1:aa:f4:2c:30:12:33:25:
e7:f1:d8:05:25:62:41:b5:49:bb:7c:f1:12:1a:27:
33:1c:26:10:23:16:81:b4:f0:2f:3c:49:5e:b3:a9:
b1:8d:f9:72:9f:c4:d3:53:0d:7d:67:fa:3f:15:4f:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:31:10:70:39:9F:C6:0F:BA:45:0B:90:F1:10:BF:BA:30:63:86
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/IZAxEHA5n8YPukULkPEQv7owY4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:868::/48
Signature Algorithm: sha256WithRSAEncryption
5e:bb:01:d5:8f:f3:95:75:92:55:d7:f8:10:95:18:58:03:e3:
57:3b:6a:73:62:1f:7a:71:ea:d1:12:76:1c:d0:69:b8:0d:df:
65:45:1d:35:91:29:a9:9a:68:4d:d4:35:07:b0:55:aa:20:70:
a9:3f:11:17:cb:12:4d:4c:6d:f7:aa:3c:3d:44:b5:82:c9:d6:
b2:0b:45:36:1a:49:c5:c7:83:88:6d:97:04:50:13:5a:47:08:
bc:24:09:6a:fa:92:3d:b8:03:a2:db:32:6a:2e:73:d5:70:10:
73:22:d0:6b:1b:45:09:cb:1e:c0:74:04:a2:2b:c6:36:5b:f2:
40:39:1d:2f:0a:d3:29:d9:87:f1:6c:7f:84:08:07:be:4b:40:
13:b9:9f:3e:47:15:7c:56:33:20:2c:51:18:b7:35:3f:3d:16:
88:f2:1d:26:9e:8b:1e:fd:3d:0d:4e:22:ae:d6:8b:44:59:3b:
d0:a2:c0:bd:bb:31:73:69:18:d5:ee:0a:f3:11:d7:ab:a2:34:
40:93:95:10:ed:eb:a9:0c:d6:42:e5:0a:50:e9:7a:64:ba:16:
ee:7c:cf:29:f2:e0:5e:c8:e4:46:a3:e0:1f:e2:55:ac:bd:4b:
44:b2:9f:0d:cb:32:2f:1b:8c:f7:a3:08:ce:8c:29:e5:0a:f8:
4b:57:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:20 2025 by rpki-client