Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/yi7hisRxs84c_XdbcKi5VC2iE-w.roa
File: yi7hisRxs84c_XdbcKi5VC2iE-w.roa (raw, json)
Hash identifier: RoMnq+S1uhWpfyajywr3RM/WN+7HNVq8D/Ao54tMH1g=
Subject key identifier: CA:2E:E1:8A:C4:71:B3:CE:1C:FD:77:5B:70:A8:B9:54:2D:A2:13:EC
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01899D03EA29C247679A126EA2DE40858B09
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/yi7hisRxs84c_XdbcKi5VC2iE-w.roa
Signing time: Fri 28 Jul 2023 15:00:26 +0000
ROA not before: Fri 28 Jul 2023 15:00:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32748
IP address blocks: 2a0e:1c80:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:03:ea:29:c2:47:67:9a:12:6e:a2:de:40:85:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jul 28 15:00:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca2ee18ac471b3ce1cfd775b70a8b9542da213ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ff:58:62:cc:cf:32:50:6b:e3:34:28:87:a4:
9d:4a:dd:06:b3:66:4d:d9:e1:d6:ce:60:3a:96:e5:
17:41:67:45:be:52:fc:e0:1e:2b:f8:92:b1:ae:fe:
40:e7:b4:62:86:b7:b8:eb:88:fa:ca:07:8a:f7:84:
d0:d4:d2:00:89:ab:13:4b:76:00:89:2b:a1:9b:67:
e4:5e:20:01:e2:17:51:67:02:09:ef:f4:f2:c0:73:
c9:74:31:84:0e:3b:b5:29:7e:66:ea:f5:24:3d:b7:
88:20:00:2f:e9:42:ad:2d:78:fb:74:45:46:1a:c5:
51:95:f7:88:5b:c2:20:2c:6e:26:8d:b0:94:ef:04:
21:1b:65:a0:68:f6:e7:22:0c:9a:a6:bd:29:9d:ef:
9b:bd:ae:98:64:17:be:53:6a:cf:7d:04:9a:48:19:
03:63:49:2a:64:b0:4a:35:e2:72:91:a7:da:34:cd:
ad:16:8d:33:0d:20:eb:e2:95:e1:0b:5c:07:f2:75:
ad:49:95:7b:0b:bf:50:e5:3b:41:10:06:23:5a:e2:
e5:c0:6b:32:b1:00:29:1f:5e:33:fd:54:24:b7:e7:
31:00:ee:e9:ff:a0:7b:d9:ad:36:64:99:ee:22:8c:
5d:b8:3c:99:8a:6b:29:d4:c9:d4:68:64:6a:ce:41:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:E1:8A:C4:71:B3:CE:1C:FD:77:5B:70:A8:B9:54:2D:A2:13:EC
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/yi7hisRxs84c_XdbcKi5VC2iE-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:b::/48
Signature Algorithm: sha256WithRSAEncryption
39:89:30:b4:f6:4b:f0:1c:89:2c:e2:72:7a:2a:af:71:f5:89:
d5:00:7e:51:bb:0c:c5:20:05:bf:59:7a:b3:8b:1c:83:8a:54:
1d:83:50:9a:3a:e2:eb:3e:d5:5b:1c:24:0e:fb:8a:1a:4b:4f:
79:01:e9:00:68:2d:ea:14:1c:6e:6d:cc:0e:36:b6:9c:a5:9a:
ec:9f:1f:bf:f2:14:e3:33:ce:49:49:41:4a:45:51:63:0a:f1:
f8:1d:a8:23:96:c5:d7:eb:34:53:dc:6d:ed:a1:54:75:e7:9e:
b0:71:9f:c5:b2:fc:41:79:59:0c:f4:57:ed:f9:c8:a2:b9:a3:
fe:7e:64:f9:56:35:8f:21:de:7e:ac:d7:12:e3:bb:83:c9:26:
d8:e8:f5:d6:7c:d4:0e:a7:3b:7d:c6:a4:d2:d1:ec:84:39:71:
a5:50:5b:e8:1b:c4:dc:46:ad:6d:00:e1:2b:15:2f:19:e8:1d:
b3:84:84:53:40:6e:12:7b:a4:8b:9a:aa:0a:4b:e8:1f:a7:2c:
c7:ce:ae:52:8f:13:ca:82:ad:da:ff:8c:86:5c:a9:4e:dd:df:
7b:cc:0d:89:f7:9a:5d:48:82:cb:06:6c:64:9b:b2:f9:36:6c:
5d:82:8f:51:80:01:6b:92:28:1a:00:da:a0:83:40:b0:46:01:
8f:09:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:41 2025 by rpki-client