Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/CFavrYEYGlc2V9V8V1XC2gHJCt4.roa
File: CFavrYEYGlc2V9V8V1XC2gHJCt4.roa (raw, json)
Hash identifier: oG3l2iwgFkgag7uy4inGEI3YimakcRJ0LVEQRCdhGGI=
Subject key identifier: 08:56:AF:AD:81:18:1A:57:36:57:D5:7C:57:55:C2:DA:01:C9:0A:DE
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01878A37BDC0FD884FE4C2B9ED07A8FE4CE8
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/CFavrYEYGlc2V9V8V1XC2gHJCt4.roa
Signing time: Sun 16 Apr 2023 13:18:41 +0000
ROA not before: Sun 16 Apr 2023 13:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 2a0e:1c80:d::/48 maxlen: 48
2a0e:1c80:b::/48 maxlen: 48
2a0e:1c80:1b::/48 maxlen: 48
2a0e:1c80:4::/48 maxlen: 48
2a0e:1c80:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:37:bd:c0:fd:88:4f:e4:c2:b9:ed:07:a8:fe:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Apr 16 13:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0856afad81181a573657d57c5755c2da01c90ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:3d:f4:cc:b2:f7:6f:00:38:7c:56:f8:a0:
48:e6:6c:de:d3:ac:bd:4c:a1:23:96:3a:17:6e:82:
a3:e6:63:f5:4b:76:eb:57:f6:3b:23:f4:5e:52:8e:
6d:0e:12:1b:b7:e9:09:b8:1f:3a:ea:cd:a7:dd:dc:
fa:37:5b:20:ca:76:aa:74:96:95:96:d3:59:55:87:
be:f4:8d:2e:05:51:c0:a8:39:a7:9a:35:cb:ed:31:
54:ff:a7:6a:74:72:c9:12:2b:90:29:c5:bf:72:a2:
8a:7b:71:c8:01:99:89:6c:48:9d:f3:e4:c9:39:4f:
42:aa:ab:fa:30:23:57:20:b2:7e:fb:d7:05:c6:b0:
b2:c5:3c:d5:0a:69:31:38:3b:89:9d:4b:0d:ac:12:
5c:dd:ad:18:d1:76:fa:aa:6a:e4:7a:56:de:4d:52:
44:72:11:56:25:88:f2:8d:bd:54:c1:21:90:78:00:
c2:7c:4c:83:fc:eb:73:99:b9:9b:9d:85:a1:9e:e1:
c4:f6:f7:a2:7d:43:14:6a:40:7b:33:72:1b:56:fb:
ed:21:99:6d:cc:c8:d3:e6:45:2b:81:b2:5a:23:7b:
b5:52:f5:10:83:f7:10:92:05:75:da:ed:29:4c:b3:
2f:5c:46:e1:1e:ba:a0:82:34:37:ed:cb:bf:51:67:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:AF:AD:81:18:1A:57:36:57:D5:7C:57:55:C2:DA:01:C9:0A:DE
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/CFavrYEYGlc2V9V8V1XC2gHJCt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:4::/48
2a0e:1c80:b::-2a0e:1c80:d:ffff:ffff:ffff:ffff:ffff
2a0e:1c80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
3e:26:21:1f:4d:72:ea:84:c0:6f:96:52:75:c7:9a:a1:48:6a:
a6:c0:48:b0:41:00:f0:e2:e0:43:91:b5:39:8a:84:18:aa:d7:
1c:13:ed:b9:ce:b5:f4:e8:9c:eb:ff:10:36:d8:71:a2:3b:78:
30:1f:3a:a1:35:7f:9f:d2:50:ce:70:b6:f4:9a:1f:63:d3:e6:
43:da:67:2d:6d:88:f7:56:47:30:88:38:7d:f4:dd:ba:19:80:
be:eb:af:6b:a3:11:34:b9:ad:d1:a6:f3:7e:0f:9d:37:0c:01:
a9:90:f8:4b:cb:dd:5d:3a:98:5d:ed:ce:1b:ba:55:2d:f9:8d:
df:6c:b2:2a:6f:78:a1:c2:da:9d:fd:4b:05:66:a8:01:34:98:
41:1b:16:d1:02:e5:94:11:67:79:fe:13:fa:e5:ad:81:93:e7:
37:91:3b:dc:3b:c4:3e:bf:1a:b5:04:fd:2f:e8:1b:1d:a2:26:
0a:19:c5:ce:46:76:48:1e:cd:06:6e:5f:b3:a8:9e:64:28:1f:
7d:2b:62:a5:d6:e8:d3:ec:b7:cf:d8:92:4c:83:3a:33:40:62:
0b:d8:fc:ad:75:9a:43:26:c6:3e:b0:3a:cd:82:1a:e0:b8:78:
2f:96:c9:1c:68:6a:32:96:95:bc:57:d1:0f:74:1e:b9:30:b6:
2b:2a:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:34:15 2025 by rpki-client