Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/6D5PRo12iwOTTVNhXfbjKf53_eY.roa
File: 6D5PRo12iwOTTVNhXfbjKf53_eY.roa (raw, json)
Hash identifier: Gy6L7Sw5kY2P0cxQ1XBiAeubfA3wJhkWmRRTY82h/nA=
Subject key identifier: E8:3E:4F:46:8D:76:8B:03:93:4D:53:61:5D:F6:E3:29:FE:77:FD:E6
Certificate issuer: /CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
Certificate serial: 0872DCD7
Authority key identifier: 6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/6D5PRo12iwOTTVNhXfbjKf53_eY.roa
Signing time: Sat 01 Jan 2022 15:01:47 +0000
ROA not before: Sat 01 Jan 2022 15:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208812
IP address blocks: 2001:67c:2bbc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141745367 (0x872dcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
Validity
Not Before: Jan 1 15:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83e4f468d768b03934d53615df6e329fe77fde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:90:00:0f:89:e3:a4:cc:c2:a4:18:f4:8b:
2c:ac:9b:6c:28:be:17:40:9b:2e:d2:52:db:ed:f3:
36:d1:af:32:de:7e:fc:64:df:b8:c1:82:2e:03:61:
db:e9:b5:15:12:74:88:4d:1c:4c:01:5b:36:b6:30:
81:db:ac:4a:cd:72:12:8d:7a:2e:7c:2d:c0:db:8a:
04:0b:f7:3a:3b:c0:12:73:a9:c3:5c:01:e6:4a:da:
f5:e4:46:13:32:2e:08:54:27:70:2d:b2:26:e1:3d:
1a:54:f2:6a:a8:89:50:3e:04:0d:a4:38:84:76:16:
8c:4c:e2:6a:b6:c3:55:c6:24:20:90:b0:4a:a8:2d:
82:2d:69:13:95:67:f0:54:e5:54:d0:76:64:67:05:
8a:c5:68:b7:e0:59:b9:bc:ab:fc:3a:28:31:13:93:
2a:27:d9:d4:9c:d8:d7:4b:f7:67:6d:42:53:67:dd:
2c:45:8c:2f:24:22:d8:6e:ce:1c:17:48:cf:3d:bb:
05:11:c0:f6:77:d9:27:f7:db:a5:4e:76:ef:d1:bb:
7e:1b:2a:d5:a5:9b:7c:00:4e:38:88:5e:fb:86:0a:
54:d3:79:b0:f4:d7:78:e2:f2:d3:a9:49:5d:d7:42:
0c:38:db:56:67:e5:1f:f0:d9:6d:1b:b3:6d:86:1f:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:4F:46:8D:76:8B:03:93:4D:53:61:5D:F6:E3:29:FE:77:FD:E6
X509v3 Authority Key Identifier:
keyid:6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/6D5PRo12iwOTTVNhXfbjKf53_eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2bbc::/48
Signature Algorithm: sha256WithRSAEncryption
32:78:5e:3b:78:73:d8:27:ee:9f:62:64:93:a9:bc:d6:ed:3f:
9e:bb:06:c9:68:b3:73:dd:f6:fb:35:a7:9f:7f:c4:28:0c:90:
56:12:35:f6:0f:dc:e5:79:59:90:81:1d:6d:86:4c:44:77:51:
b3:05:f4:1b:c5:fa:c5:76:4e:63:d5:cc:38:5d:5c:b8:8d:bb:
42:84:d1:c4:d8:2f:12:b2:d7:6a:48:4e:b8:ed:15:16:80:ce:
92:db:fc:ba:a2:da:89:cf:7f:1c:31:74:de:69:40:d1:8c:ce:
b4:a4:0d:bc:c3:ff:26:6c:84:ef:01:0e:67:fb:f7:a0:35:53:
bf:3a:55:17:ec:da:4f:3e:ab:51:3e:d7:f1:1b:ed:7f:cb:a7:
71:da:01:bb:89:e5:d6:97:81:b6:5c:ac:8f:c4:28:73:79:27:
7e:44:30:fe:c6:d4:ae:0e:98:77:10:90:88:e3:6a:15:7d:eb:
47:ab:d4:ce:c3:1a:18:f4:56:50:ea:24:6e:c2:df:b9:51:ba:
85:a2:66:c3:77:6c:e7:01:0a:7a:f1:70:ef:13:d2:f5:af:4b:
d3:a8:9b:b8:32:b4:ec:dc:e5:2b:88:a2:78:2a:de:5d:d8:e6:
67:e2:6e:cc:e7:80:a0:bf:eb:a8:be:7c:48:33:54:f2:7b:69:
46:1b:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:36 2025 by rpki-client