Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/8poDM9iKWSd1IQxcid5crleipe0.roa
File: 8poDM9iKWSd1IQxcid5crleipe0.roa (raw, json)
Hash identifier: LgjW/amhnItKLxeqesq7HWRFDLOhY5fA3nvw0pn2iVs=
Subject key identifier: F2:9A:03:33:D8:8A:59:27:75:21:0C:5C:89:DE:5C:AE:57:A2:A5:ED
Certificate issuer: /CN=839e07e5116a5daf5578e5fd6a18c7ef349ef044
Certificate serial: 0193F371128E21CACF3F6E90777189376BFA
Authority key identifier: 83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/8poDM9iKWSd1IQxcid5crleipe0.roa
Signing time: Mon 23 Dec 2024 12:14:54 +0000
ROA not before: Mon 23 Dec 2024 12:14:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42963
IP address blocks: 2001:67c:21dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:71:12:8e:21:ca:cf:3f:6e:90:77:71:89:37:6b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839e07e5116a5daf5578e5fd6a18c7ef349ef044
Validity
Not Before: Dec 23 12:14:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f29a0333d88a592775210c5c89de5cae57a2a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:85:8f:7b:cc:6f:ac:2b:e1:86:61:8d:45:
a2:95:e7:0e:03:49:52:40:aa:49:05:3d:73:6b:75:
d1:33:ec:a5:ab:51:eb:bb:c0:72:6a:88:2c:de:31:
72:9b:28:47:03:b3:94:70:ff:d7:e1:72:c8:71:72:
c3:e2:86:10:71:d7:94:b2:25:ed:4e:ed:85:51:94:
a5:e8:f2:07:f6:d7:53:f8:33:6f:c7:91:36:7e:6e:
83:fe:f2:02:89:ee:23:f7:1c:b5:1a:b7:c1:b2:30:
0f:c0:73:c1:45:e5:4a:5e:ca:5e:95:72:4c:6b:5a:
9f:3e:c4:ee:d3:66:a7:aa:27:34:5f:b2:73:de:e2:
db:67:6e:23:3b:67:86:78:87:44:57:c1:68:55:f2:
df:95:0d:48:c2:df:f6:68:c9:0a:6a:d5:62:da:62:
52:05:31:c4:e1:92:bd:9f:ac:2e:29:37:98:d4:a7:
46:62:96:08:d3:ab:9d:91:1a:9a:3b:a5:e4:6b:a3:
54:e3:fc:62:6c:22:5f:29:e0:d1:fb:77:8a:90:6e:
8d:fa:f9:f9:83:18:2e:e6:e9:cf:1f:af:60:9a:ac:
6c:b0:59:37:4f:32:e9:cc:cc:1f:9b:7d:80:e2:ef:
cc:7c:d4:d4:83:57:81:4e:af:f5:08:83:7c:90:c6:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:03:33:D8:8A:59:27:75:21:0C:5C:89:DE:5C:AE:57:A2:A5:ED
X509v3 Authority Key Identifier:
keyid:83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/8poDM9iKWSd1IQxcid5crleipe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21dc::/48
Signature Algorithm: sha256WithRSAEncryption
83:96:14:b0:44:ea:a6:76:ef:05:77:b9:5c:72:56:4b:ee:2b:
5d:f4:e0:4a:0a:ff:ee:2e:5e:93:0b:39:f7:81:88:9b:a2:a3:
fe:dc:da:26:21:20:8c:7e:5d:af:e5:1b:7f:ad:f5:49:d5:f1:
1d:a9:e4:51:2e:6c:f9:e0:71:0d:a9:d8:e5:e5:44:79:8f:ce:
02:f8:51:9d:b3:80:82:47:4b:1d:0e:be:64:d0:23:88:1a:60:
d3:27:f6:9f:10:f1:18:d0:94:56:36:a6:eb:f9:74:60:ca:89:
93:99:7e:29:10:6b:aa:32:d6:80:f9:f6:4f:5d:ca:b1:06:1c:
b1:67:c1:83:67:af:1c:e8:20:d6:19:ee:7b:9c:91:b2:b9:6c:
af:44:50:70:73:b5:e9:5e:93:d3:9a:7a:24:17:c9:f7:ba:93:
2c:d2:9f:c9:5d:e7:5c:46:a3:bc:b1:9a:d6:e9:52:02:86:59:
23:a3:e0:c5:d4:3d:8e:99:be:d7:dc:db:a9:78:d1:2c:8c:82:
f4:e3:1d:b4:9c:e9:62:2f:6a:a5:85:06:c8:98:0e:a9:9e:5a:
80:b7:b7:81:7c:59:97:52:69:b4:46:2e:d6:bd:54:e2:c0:c5:
ce:07:d3:ee:51:fb:1f:72:d5:a0:ff:8f:7f:b4:88:70:2f:5a:
ee:6d:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:16:17 2025 by rpki-client