Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVyj-gDoAt0hd8-Yy4wXNfA1UGI.roa
File: CVyj-gDoAt0hd8-Yy4wXNfA1UGI.roa (raw, json)
Hash identifier: y6YbL7nOkQ4tGRYuxbGQ1MSCNR/XpOV5ql3Oi9KtLdA=
Subject key identifier: 09:5C:A3:FA:00:E8:02:DD:21:77:CF:98:CB:8C:17:35:F0:35:50:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 5E3A8E68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVyj-gDoAt0hd8-Yy4wXNfA1UGI.roa
Signing time: Sat 01 Jan 2022 06:06:09 +0000
ROA not before: Sat 01 Jan 2022 06:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 123456
IP address blocks: 2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580895848 (0x5e3a8e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 06:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=095ca3fa00e802dd2177cf98cb8c1735f0355062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:63:4b:5c:2b:4f:29:16:8e:44:af:41:72:
73:b1:ac:2a:bc:bd:f2:f1:87:8b:be:16:83:1f:b7:
9f:f8:b7:8e:ac:a3:4a:b9:39:8f:5d:26:ac:7e:7c:
e7:d3:92:26:2b:8d:09:c2:c6:48:e7:88:4e:5d:13:
8f:0d:59:90:e8:88:07:f0:07:37:e5:bc:9d:50:bc:
13:61:fd:61:57:23:53:d4:be:8b:fa:c9:26:71:d7:
5e:46:07:cf:cb:54:ba:6d:4b:ca:ec:e0:d4:36:45:
3a:fc:71:e5:89:c3:d3:f8:68:2a:16:b3:4d:be:56:
d1:19:d2:6d:7a:68:6b:cf:99:26:62:b7:0f:9f:4e:
71:fb:c7:f7:b6:88:02:55:40:83:54:21:68:c8:6d:
9f:8c:ca:9a:a7:cc:c1:58:f2:ea:f2:d7:b6:07:4d:
bc:b9:24:7d:76:aa:7a:1e:65:48:b8:bf:f9:ba:49:
37:73:c2:06:e8:65:fe:16:6e:c9:d8:46:3b:35:13:
e5:a3:0e:43:20:92:8b:2c:e7:91:e5:3f:69:f4:7f:
6d:0c:4e:4a:e9:58:3e:66:7c:27:1b:29:70:8a:2f:
60:fd:41:b1:11:df:4f:de:2e:63:40:eb:13:e6:bb:
b0:02:8e:98:70:54:13:a0:cb:c7:cb:25:03:cb:1c:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:A3:FA:00:E8:02:DD:21:77:CF:98:CB:8C:17:35:F0:35:50:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVyj-gDoAt0hd8-Yy4wXNfA1UGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:9b:c6:8c:cd:c7:4b:f8:33:73:fa:56:db:f0:1e:0a:ce:5a:
61:3c:69:25:8a:83:44:fb:c9:ca:cf:38:a8:ea:17:e3:b9:a4:
0b:b2:b9:af:6b:30:e5:0a:10:4e:8e:e9:97:41:7e:cf:ea:82:
95:8a:10:18:c0:4a:6f:ad:c6:74:36:4f:84:e6:e7:ee:21:3d:
25:fa:92:9c:85:ff:d6:2b:d6:4a:24:92:5c:2f:de:f5:74:d4:
cb:41:5b:54:49:a2:f9:8c:8a:c3:c2:48:20:43:ea:07:19:df:
98:3b:2d:23:78:25:50:d6:e6:33:bc:63:42:c3:20:8b:19:81:
99:24:c9:e4:76:5d:56:07:96:4e:35:e1:43:0b:e0:71:81:f6:
7d:32:d5:d8:bd:87:ba:77:11:59:73:ae:2d:0b:48:5b:8b:79:
b6:9a:49:32:10:40:20:07:cb:cf:4d:fe:9c:35:3b:45:4d:27:
97:be:14:48:8b:2a:ba:e3:f3:e8:3d:9b:22:d4:ac:80:37:ab:
1f:dd:98:57:5d:e2:65:5a:f7:1b:4a:28:d7:52:03:ae:3a:60:
0f:5c:bc:ff:4f:09:d6:ca:52:05:3d:4b:01:7f:9b:29:7a:e3:
9b:eb:f5:40:b7:0c:22:0f:c6:f8:27:e3:00:6d:22:65:6d:a8:
d0:13:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:34:03 2025 by rpki-client