Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa
File: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (raw, json)
Hash identifier: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=
Subject key identifier: 85:42:8B:71:66:BD:38:70:B9:1B:19:95:AB:A2:91:E4:F2:2C:07:AA
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019420D60FD3378599C533BB3E6D3F1C39B7
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202351
IP address blocks: 2001:67c:ae0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0f:d3:37:85:99:c5:33:bb:3e:6d:3f:1c:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85428b7166bd3870b91b1995aba291e4f22c07aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:54:b4:e9:bd:dd:50:5b:31:8d:c2:83:25:
4d:fa:08:e8:19:d1:ab:74:f5:78:ac:1f:01:25:d1:
08:30:8f:02:07:3f:8b:b9:88:40:2a:bc:64:c3:ea:
00:d7:c4:f8:a4:ff:d4:e9:c8:65:8d:75:54:ef:c4:
53:3e:61:69:34:66:3d:05:b8:29:3f:5a:c6:9b:8c:
74:2e:0f:ec:58:bb:b2:7e:95:ce:9d:49:ee:a1:13:
37:1d:16:17:f9:65:9f:72:63:b2:e1:93:fb:08:85:
77:a6:50:a3:eb:df:22:d5:b7:aa:0d:7f:b0:de:f0:
d4:82:ec:af:30:9b:ad:19:6d:43:13:b5:3b:8c:5d:
61:54:18:bd:62:b0:fd:65:8f:2a:53:e4:4f:af:16:
ee:20:9b:da:02:0c:91:aa:90:07:dc:8d:e3:5a:13:
6a:b6:d7:59:ac:9a:88:dc:97:99:9e:be:ed:f1:7e:
19:ce:ff:72:93:c7:3c:3d:d1:a0:df:46:95:0b:25:
85:b9:c5:56:88:dd:39:e6:38:cc:32:7a:61:5e:9e:
99:24:34:7e:0f:d5:42:b8:97:6c:34:a2:80:e4:85:
13:6b:0f:e6:27:00:95:c5:d2:36:1c:b9:54:fd:47:
d8:d1:29:e7:08:b1:c3:cf:08:0f:90:10:e1:9e:0f:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:8B:71:66:BD:38:70:B9:1B:19:95:AB:A2:91:E4:F2:2C:07:AA
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ae0::/48
Signature Algorithm: sha256WithRSAEncryption
02:76:ff:28:4f:24:c6:d4:2f:45:c2:14:da:1d:6e:1d:ec:25:
35:81:6a:27:6e:bc:43:7f:b9:3e:a4:fe:7c:da:e2:5c:dd:b1:
93:dc:cf:c7:03:56:a4:54:5a:b0:99:b3:9b:f3:1f:d4:1d:5f:
63:db:45:07:bd:5b:d5:fe:76:5f:6b:4e:f4:cf:d0:c7:88:7a:
30:73:d4:59:de:6b:87:0f:bc:0b:96:02:06:e0:b2:4b:17:8b:
f0:28:c7:7a:ff:71:7a:96:17:f0:fb:92:2a:a1:93:54:e2:15:
ea:03:59:9b:0e:26:76:25:58:e6:6e:d7:a2:c0:8c:6d:0e:5f:
f7:67:aa:3d:6f:51:4d:36:e6:d4:69:18:15:7c:49:86:3d:43:
60:eb:5b:e9:87:5d:e2:a9:7d:9c:83:f5:51:7e:a7:d9:46:68:
6e:1c:43:ff:bb:f2:a6:70:af:8d:87:1b:88:30:26:6d:5f:f8:
ee:5e:dd:6d:63:2b:7d:66:30:ae:fc:44:23:65:74:51:00:b2:
42:0d:9f:a8:ec:4d:b7:f4:2e:84:30:2d:8b:02:49:ca:c6:7e:
87:20:72:8e:db:8c:53:27:12:22:e7:66:fd:f1:69:68:53:70:
0e:7f:21:e1:2b:a3:47:87:5a:ce:8d:bb:ce:d6:e1:23:99:54:
d0:5c:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:15 2025 by rpki-client