Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa
File: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (raw, json)
Hash identifier: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=
Subject key identifier: 0B:C3:D1:E1:75:D6:B2:3A:4F:F0:F1:D8:BA:83:7B:F3:3A:04:F6:76
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 0194258FC4FFA3837E023D1B4CCFF3501169
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210729
IP address blocks: 2001:67c:1bc8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c4:ff:a3:83:7e:02:3d:1b:4c:cf:f3:50:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc3d1e175d6b23a4ff0f1d8ba837bf33a04f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:40:96:ce:d4:f3:f4:f8:0b:68:a1:64:67:a7:
e5:fe:c3:d7:67:65:80:49:16:22:22:1f:74:5e:6f:
5a:cc:4b:92:c6:d5:74:fc:ef:5d:1b:8f:45:3a:3f:
55:1a:00:69:e5:d5:43:30:9c:3a:14:cf:46:91:70:
7f:04:ec:82:b4:b3:56:b8:01:ee:e3:91:f1:ca:10:
37:85:a3:3a:fd:28:a2:4b:04:16:08:11:b3:c5:75:
90:93:13:34:23:36:65:d8:47:a2:6f:90:c7:5b:f2:
5b:97:4a:31:e0:8f:c9:53:7a:d3:cd:2c:de:25:a8:
f1:2d:49:4e:4b:2d:2f:4b:11:5b:80:73:36:fe:de:
64:4c:0c:1a:25:42:d1:c5:cb:9f:f8:59:09:6a:b2:
80:3f:e1:f2:23:a4:25:85:e2:3c:a7:a4:e6:c2:8f:
7b:5d:36:ab:8d:4d:9d:04:93:7e:05:f8:fa:7f:83:
c2:36:3b:9b:4f:12:a9:92:22:79:55:9c:8e:31:6b:
94:38:eb:9b:ea:cb:1c:03:90:5b:45:92:e3:b0:b2:
54:c3:76:c4:45:58:7b:c8:c1:6b:d6:11:f0:95:b0:
2d:c8:17:24:7b:24:a4:09:c7:70:11:f9:3b:b1:85:
72:ca:0c:b1:14:0f:2b:ff:54:44:05:05:7a:b7:60:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:D1:E1:75:D6:B2:3A:4F:F0:F1:D8:BA:83:7B:F3:3A:04:F6:76
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bc8::/48
Signature Algorithm: sha256WithRSAEncryption
31:66:cd:15:eb:b7:78:2d:b5:c7:38:03:e7:e1:50:6e:2b:95:
e8:56:e1:ac:b0:ab:8c:e9:19:5f:e7:17:26:3a:1d:82:50:ff:
5b:eb:d5:97:5b:f6:90:42:92:ca:2c:2b:a4:4b:16:c3:36:39:
fc:32:86:9f:b8:45:f7:1a:63:ab:d0:4d:2b:c9:1d:0c:a4:a6:
7a:8a:94:1d:3f:fc:49:ff:16:8c:e9:1d:8b:d2:a4:c6:72:9c:
f8:b5:55:11:38:53:9e:b2:db:f7:9e:56:6f:54:85:95:97:59:
2d:5c:f4:fb:a0:26:37:7f:90:31:c8:4e:08:ff:de:23:09:a4:
9e:1a:d7:76:90:69:84:f4:29:aa:8f:44:dc:43:14:c7:fd:39:
a8:7c:2e:e1:94:01:cd:84:f7:cb:a6:c8:71:ee:31:da:cc:74:
7b:4a:0b:b2:53:80:7b:9f:ec:3f:64:68:22:ec:9a:4d:eb:fa:
7e:44:69:91:66:90:a0:67:2a:1b:aa:05:dc:76:e6:71:96:54:
3a:ef:a7:c2:80:6d:29:90:6c:40:9d:01:e6:dc:d1:67:c9:03:
33:f8:c7:18:9a:2d:99:ff:7c:3a:a5:89:0f:c0:1c:98:86:86:
10:e1:32:20:3e:f1:48:dc:d5:3e:d0:70:fb:5c:ce:a9:30:a7:
88:63:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:14 2025 by rpki-client