Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa
File: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (raw, json)
Hash identifier: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=
Subject key identifier: 06:F7:11:DA:5E:FF:62:52:CD:D4:6F:8F:2C:85:38:1C:52:18:0F:39
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 0194221F6047A6B6FE3509DFCB04F05958B0
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12360
IP address blocks: 2001:678:78c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:60:47:a6:b6:fe:35:09:df:cb:04:f0:59:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f711da5eff6252cdd46f8f2c85381c52180f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:03:a9:a2:c3:9f:dd:ed:9a:12:28:15:37:
b8:e8:22:d9:38:a1:46:6b:2e:0d:5e:df:ae:2d:70:
03:e3:ac:f9:a7:17:b8:63:fc:76:e8:8c:01:a4:8f:
67:cb:e9:16:8a:52:62:78:cf:71:33:1a:9e:87:f2:
bc:00:ac:af:b0:1a:79:9d:f7:1c:a0:29:8e:d7:f1:
2f:be:80:8a:2b:61:c2:7b:50:36:06:d4:d0:cf:87:
7a:cd:fa:e6:df:35:01:dd:60:7f:8d:ab:5b:71:c2:
79:c9:06:33:bb:62:05:8c:62:5a:d3:a0:78:47:af:
4c:8f:ad:9d:ed:76:18:d8:45:a8:09:a7:21:9a:d0:
b6:42:c1:a3:50:18:69:82:9d:cd:f0:9f:c3:62:e8:
e5:73:f4:12:94:91:67:14:ac:fd:72:28:f4:d2:7a:
b5:1b:a0:ef:b1:66:b8:be:a6:e7:86:1a:7d:3f:7c:
37:dd:f9:a4:71:97:1f:5f:7a:dc:21:8b:7a:2a:32:
fd:91:96:8b:9a:87:71:4d:3c:0a:b4:fa:b3:78:be:
c7:d0:b5:59:72:7a:d7:d7:9c:a0:1d:63:ca:be:46:
6b:3b:48:cb:00:bc:88:dc:3d:df:87:3e:8e:d4:2c:
0d:38:19:5e:d0:38:72:c1:bf:4d:d1:8c:fa:63:de:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:11:DA:5E:FF:62:52:CD:D4:6F:8F:2C:85:38:1C:52:18:0F:39
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:78c::/48
Signature Algorithm: sha256WithRSAEncryption
c4:18:98:57:da:e4:fa:c6:33:f9:ed:69:f6:00:f1:10:e7:18:
71:4d:58:31:16:29:3e:c3:0b:0e:ae:76:6c:47:38:55:78:d0:
c0:c7:99:a4:12:1a:3c:c3:5d:fe:7c:7d:33:e3:18:3c:ec:c2:
11:3f:d0:87:17:63:75:92:c7:30:4b:4d:5b:12:84:0c:de:54:
99:5d:23:95:f8:38:15:d8:74:0b:02:74:66:5f:c6:c5:2b:22:
d8:0b:9d:3c:7e:7f:36:b6:32:ce:fa:00:9f:c0:bb:4e:3f:3a:
4d:b3:b7:d7:6b:1b:13:c4:df:de:2f:c1:f2:69:5a:fe:d4:55:
f1:0f:82:68:38:85:d8:5c:3f:36:4d:dc:d7:02:df:be:6c:c9:
1b:4f:33:20:7e:19:a5:48:04:85:87:dc:7d:f9:64:59:d5:68:
da:d7:68:56:ab:98:0c:c7:c9:86:9a:e3:24:fc:a9:0a:21:f5:
6e:45:50:25:4d:88:4d:18:7d:96:4e:23:d2:4a:2d:65:39:b6:
78:7b:87:c8:1a:0f:bb:4e:ad:98:63:f2:1c:7a:7a:0c:87:19:
9d:a6:13:47:9c:f2:2b:3a:a4:f4:09:07:b1:8a:f9:fc:73:4a:
1f:3d:67:03:71:8b:c7:b0:27:cb:36:cd:dc:1c:d0:23:b0:d6:
f6:0d:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:17 2025 by rpki-client