Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa
File: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (raw, json)
Hash identifier: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=
Subject key identifier: FA:D6:3A:5E:BA:4B:97:A9:3C:CF:84:84:A6:36:F3:2D:33:67:F9:3B
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 01942444F335F99B88265D7C502559BD6241
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2485
IP address blocks: 2001:67c:1348::/48 maxlen: 48
2001:67c:2218::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f3:35:f9:9b:88:26:5d:7c:50:25:59:bd:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fad63a5eba4b97a93ccf8484a636f32d3367f93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:cf:21:3f:0b:9b:4b:ac:b6:62:b3:ae:00:
ee:40:58:21:17:0b:43:1e:09:51:29:94:51:ce:9d:
16:8c:bf:5f:ca:8b:bc:77:66:02:da:93:83:a3:fd:
91:01:1f:58:5d:47:dc:2f:0f:51:a8:cd:ad:6e:39:
18:83:e7:a7:f5:92:5b:39:c2:e1:87:42:9d:6f:f4:
9f:6d:da:98:98:82:58:3a:66:3c:76:39:35:1d:f4:
8f:7f:04:27:a3:4c:04:d4:c4:9a:28:f0:d5:3c:7e:
99:1a:f1:1a:f4:12:65:f2:de:46:3c:92:70:76:1c:
6e:ff:7c:6e:f2:73:60:2f:25:7e:27:6e:ea:c6:cd:
dc:b7:72:80:8f:23:e3:54:9b:e1:58:60:7e:ca:f1:
1b:8f:f7:20:20:e6:d6:d6:53:26:9e:e3:1a:70:fd:
61:a1:43:7e:b8:0b:9b:32:7f:04:ac:6d:c5:0f:3a:
a8:8d:2e:4c:1c:21:0f:59:e1:de:3d:e6:f1:d0:8d:
bc:00:65:24:5e:2c:06:e7:2a:e1:c4:52:3c:ad:07:
21:cb:5b:b2:dc:4c:f9:fe:8e:48:90:67:22:f4:ef:
69:a9:d7:3b:29:3f:5a:e6:19:ec:8f:52:db:dd:8f:
0d:16:76:f3:3a:e0:58:7c:75:38:fa:1a:e0:7d:58:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:3A:5E:BA:4B:97:A9:3C:CF:84:84:A6:36:F3:2D:33:67:F9:3B
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1348::/48
2001:67c:2218::/47
Signature Algorithm: sha256WithRSAEncryption
88:60:2d:aa:be:6b:c0:9e:5b:22:a0:24:b1:b3:44:ac:4d:80:
9a:70:77:5f:6c:98:37:4a:7d:83:07:16:e2:28:bb:0d:0c:95:
22:fd:a4:45:f6:c8:89:df:cd:ae:4b:55:c5:58:34:49:1f:21:
9e:74:b2:c7:3e:a3:f3:5b:53:fc:cb:08:ba:24:f5:74:0a:2d:
cf:f8:79:14:c2:7e:11:bd:a6:ff:ce:33:b2:ed:89:7b:86:ca:
d9:67:94:fc:ec:31:31:f2:b4:0b:2e:f4:39:d7:c5:2e:62:d9:
ed:27:67:99:27:d9:db:74:fb:79:b1:f9:9e:d8:9e:21:00:16:
51:6f:ca:c4:38:b5:c0:64:57:bd:47:46:82:a7:51:83:19:79:
c6:0e:ca:7f:e0:56:1c:57:30:a2:c0:f2:35:16:86:4a:7a:bd:
fb:d6:2f:2c:86:0e:97:69:11:cc:ea:2e:fb:03:cb:fa:9b:84:
2b:fc:7e:22:d4:87:e1:88:72:fd:57:e7:ea:4e:29:ec:2d:8f:
6c:6a:0d:f2:98:62:ef:e8:77:08:c4:06:09:8f:16:19:35:11:
7e:1b:0a:2d:ab:78:8d:70:23:de:dd:50:29:a6:a0:c4:dc:c2:
0a:5e:65:5d:14:b2:73:fc:43:53:92:57:1f:c1:7d:70:c5:1d:
6a:3c:7f:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:32 2025 by rpki-client