Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/kM09o73dWvN-pIf-j5VVGqnFs3E.roa
File: kM09o73dWvN-pIf-j5VVGqnFs3E.roa (raw, json)
Hash identifier: 1NF2t1HFyA9I2wGXRPo18jluITzSgbYTlyBY51pRw6o=
Subject key identifier: 90:CD:3D:A3:BD:DD:5A:F3:7E:A4:87:FE:8F:95:55:1A:A9:C5:B3:71
Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial: 019427B48C1E172121F5C7DB3A807FFACD25
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/kM09o73dWvN-pIf-j5VVGqnFs3E.roa
Signing time: Thu 02 Jan 2025 15:48:51 +0000
ROA not before: Thu 02 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208391
IP address blocks: 2001:678:aec::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:8c:1e:17:21:21:f5:c7:db:3a:80:7f:fa:cd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Validity
Not Before: Jan 2 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90cd3da3bddd5af37ea487fe8f95551aa9c5b371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:50:3b:15:c7:d9:e1:99:14:d0:db:a0:d5:
2d:48:40:ed:81:9f:78:31:74:8d:d9:a4:a1:18:e4:
0e:ac:1b:95:f9:3e:d0:50:2a:d3:20:3b:93:3d:df:
43:f0:27:dc:b3:96:2d:a4:15:a9:84:53:a5:40:9f:
47:e8:e5:4f:ab:fd:cc:56:bc:9e:de:e8:da:db:e6:
b3:d6:c3:dd:c3:9e:19:aa:ac:09:c0:86:45:1a:23:
02:6b:53:32:a8:63:c9:51:4e:c6:69:de:9a:3b:be:
aa:96:53:9c:11:b0:0f:e3:9b:4f:06:18:69:bc:1d:
d1:47:66:08:11:7b:2f:7f:75:e6:da:5b:57:48:d6:
6a:ca:82:49:ed:9e:35:04:f1:63:60:a1:12:24:62:
65:fa:05:01:93:e3:43:6f:96:56:ac:ac:00:e3:5b:
09:5f:0f:2d:00:cb:2b:f5:15:a6:a7:01:c1:4e:43:
c6:bf:80:1d:8b:1d:19:2d:05:73:f3:da:92:19:f6:
3c:34:50:25:48:56:cb:09:6f:0e:26:6f:d6:49:f9:
ef:14:f6:90:a6:3b:36:9f:b2:e8:9b:f8:b2:32:be:
f4:ad:0b:c7:82:af:41:d9:1e:80:3e:30:5f:2f:92:
a7:54:9f:1f:11:44:d4:35:5e:e8:d7:e2:db:c5:4c:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:3D:A3:BD:DD:5A:F3:7E:A4:87:FE:8F:95:55:1A:A9:C5:B3:71
X509v3 Authority Key Identifier:
keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/kM09o73dWvN-pIf-j5VVGqnFs3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:aec::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ec:67:97:73:05:93:30:81:12:e7:85:56:50:2e:90:a2:8f:
41:01:97:82:4e:ef:c3:84:64:d8:a6:cb:2b:8c:8f:35:2b:37:
51:6e:9c:fa:d3:94:fa:f0:32:96:97:da:c7:0e:06:31:e8:a1:
b4:2e:cb:d8:f6:e3:69:56:23:81:5a:da:f6:d2:6a:44:58:20:
78:05:e2:ee:54:15:a5:17:4d:a5:7f:bb:2b:23:b4:cf:e5:e9:
1e:c2:e3:29:a3:19:0e:43:6c:e4:f3:fb:e0:30:69:91:9d:96:
5f:1f:74:1c:a5:59:fd:1d:b4:ad:5b:e2:5f:c3:7d:2a:91:9d:
35:d8:4c:c5:5c:77:d0:b0:58:a8:d7:e0:f3:bb:b9:cc:22:f8:
65:e7:66:68:56:2b:cf:5f:76:25:16:8e:1d:32:3a:4e:0f:68:
2e:b2:6b:cb:d0:f8:a3:55:d4:88:4a:5f:1a:ae:05:88:d8:3d:
25:e1:d2:82:ec:6f:6a:0f:b7:3a:07:99:24:8d:22:7a:2f:2e:
54:cf:6e:90:51:62:20:b9:ac:c2:bd:74:2a:2c:22:80:cf:bd:
c5:1a:d0:b8:e9:96:fe:3b:ce:93:80:53:36:d3:c8:91:b9:61:
ea:2c:46:af:50:4e:23:90:0b:c2:68:98:3f:23:35:0c:f7:1a:
37:54:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:06 2025 by rpki-client