Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/skag_VnN9GBJjb3tko75iVexHSM.roa
File: skag_VnN9GBJjb3tko75iVexHSM.roa (raw, json)
Hash identifier: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=
Subject key identifier: B2:46:A0:FD:59:CD:F4:60:49:8D:BD:ED:92:8E:F9:89:57:B1:1D:23
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019427485B04B1DDDB3972182442DB378C6E
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/skag_VnN9GBJjb3tko75iVexHSM.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59794
IP address blocks: 2001:14e8:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5b:04:b1:dd:db:39:72:18:24:42:db:37:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b246a0fd59cdf460498dbded928ef98957b11d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:9f:d4:96:26:03:2e:d0:8e:46:d0:81:64:
5e:cd:23:ad:b3:fa:88:5e:0e:05:d6:0c:c6:85:e8:
ae:6b:9f:f7:40:36:c3:2c:1f:62:89:d0:a5:0d:1f:
04:5f:dd:c8:c3:50:35:da:54:f8:86:72:d1:61:0a:
9a:6f:2d:89:6a:7e:45:b1:18:6d:27:33:ea:16:ad:
b4:60:e9:2c:ee:83:33:8b:7e:c6:93:b8:a2:6c:ca:
c8:37:d5:a7:6b:56:e2:94:52:2b:0c:f1:38:1d:53:
be:7c:34:e1:d4:7a:c0:dd:f9:ac:11:cc:0f:8d:61:
1c:24:37:df:c2:2c:92:57:94:44:b8:84:f1:b5:ac:
a1:d1:63:bc:17:24:82:2c:3d:c3:4a:13:c0:c5:f1:
7a:a9:8d:13:52:d2:0e:00:f3:b7:a8:7f:79:3d:28:
3c:11:e1:21:b6:c4:90:8f:e9:ec:27:e4:49:d8:71:
78:d1:a6:c5:37:98:63:24:a7:40:13:17:1f:38:cc:
30:34:1f:61:52:5b:a8:da:5a:dd:d8:87:c2:09:87:
7c:7d:8b:55:18:f7:2b:0a:ec:b0:5d:dd:69:48:8b:
29:5e:f3:3c:76:94:20:c2:02:54:3c:85:f8:c3:20:
a9:05:cb:d5:de:22:17:b0:a9:41:e0:22:ff:bb:13:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:A0:FD:59:CD:F4:60:49:8D:BD:ED:92:8E:F9:89:57:B1:1D:23
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/skag_VnN9GBJjb3tko75iVexHSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:14e8:6::/48
Signature Algorithm: sha256WithRSAEncryption
21:ee:6b:22:38:13:70:67:a9:a7:a6:4f:de:d4:03:18:a6:66:
78:8c:91:aa:59:bc:e8:c8:aa:c5:7a:82:cd:ea:57:a5:9e:65:
b5:40:25:c8:7c:d8:e1:fd:3e:4d:7b:1b:83:f1:89:20:0f:b2:
6d:f6:0f:03:3f:83:8b:54:1b:e8:a5:b2:da:7f:ef:75:9a:6e:
ce:d4:2b:27:5d:58:d4:dc:3d:41:e2:b1:e7:22:a7:97:bc:72:
04:51:bd:5c:c5:66:66:b2:50:c7:70:79:99:9f:54:64:6e:37:
d3:c2:2b:35:45:5f:8f:3f:5a:36:e6:f8:e4:8a:b1:be:7b:42:
2b:95:98:16:f1:25:82:8b:7a:76:06:26:68:16:c2:cc:75:9f:
98:a6:4f:2b:b9:a1:59:3d:f5:47:19:f4:0c:fd:d4:ba:22:9e:
7c:a8:98:21:8b:9a:54:c5:29:90:f4:71:81:4f:16:34:a3:72:
98:8b:d8:46:f7:e4:50:64:f2:06:5d:e7:f6:fd:d1:a1:9e:49:
2a:c1:c7:0a:20:61:a4:e6:16:94:e9:8c:59:ef:18:f4:f2:d5:
5f:da:47:30:36:49:b4:f6:f4:3f:bf:46:0e:3d:43:59:08:75:
22:ac:bb:b0:71:c6:41:39:8e:e8:9f:20:fb:52:9c:71:89:eb:
3e:ec:41:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:58 2025 by rpki-client