Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/sAg7shWdYM1vuAKRhjrThfjk2dA.roa
File: sAg7shWdYM1vuAKRhjrThfjk2dA.roa (raw, json)
Hash identifier: x+du9Pejoqn3yMPxQMoABso7DA5a9+oU7QmVJPgdxYo=
Subject key identifier: B0:08:3B:B2:15:9D:60:CD:6F:B8:02:91:86:3A:D3:85:F8:E4:D9:D0
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019426D9A7DF7D8AE4FC77D119EF7A02F0AE
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/sAg7shWdYM1vuAKRhjrThfjk2dA.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:7f8:c5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a7:df:7d:8a:e4:fc:77:d1:19:ef:7a:02:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0083bb2159d60cd6fb80291863ad385f8e4d9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:12:23:61:64:92:73:c4:76:b4:f8:ba:02:
a9:a6:fd:40:8a:9b:96:a1:c9:73:9f:95:4d:46:76:
a6:bd:95:71:36:93:6c:4c:4e:b7:e7:2c:80:e4:39:
45:0e:05:8c:90:2a:77:25:df:0f:ec:c2:d8:b2:23:
5d:36:bd:53:aa:a0:22:fa:6b:c3:9b:fb:e7:a1:9c:
3a:15:83:86:90:bc:8a:41:3d:eb:4d:b6:79:cc:9c:
83:34:65:a2:bc:42:2e:57:25:58:1c:b0:24:2c:a9:
82:a2:48:b2:62:26:34:6b:2e:e3:c4:c1:1c:1c:26:
86:4a:87:bc:39:27:af:4a:7c:ee:08:d2:5f:93:47:
6f:00:89:95:68:55:5f:f9:20:74:b1:7f:96:c4:26:
95:12:f7:b0:b0:5e:71:68:6f:3a:3f:23:94:ba:aa:
58:d5:63:d3:e9:65:56:44:46:98:15:0d:1c:9c:f8:
b6:04:69:9a:71:dd:3b:3e:0a:ac:63:2a:a8:6e:ad:
98:ce:ea:89:2b:1e:fe:9b:00:8f:d6:3d:24:e7:a6:
68:81:ce:26:b8:f7:7b:5b:e1:8b:8c:56:97:9f:46:
a4:0e:be:4c:c2:28:3d:bf:4e:14:2a:0d:55:89:d8:
85:6c:9e:22:39:cc:c0:9a:6c:2a:82:7f:e7:ea:da:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:08:3B:B2:15:9D:60:CD:6F:B8:02:91:86:3A:D3:85:F8:E4:D9:D0
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/sAg7shWdYM1vuAKRhjrThfjk2dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:c5::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9a:86:fc:33:eb:10:26:01:26:f0:2d:6b:b4:24:31:c8:20:
89:9d:05:e0:86:0d:85:fb:e5:73:6d:a7:00:1a:72:e5:4d:b5:
a3:69:fc:aa:60:73:ea:f9:1e:b7:8c:dc:ef:aa:24:d8:63:40:
12:40:48:02:21:56:81:9f:f6:ea:2b:f4:53:34:de:80:2c:a7:
11:dc:70:07:5c:de:df:c6:4d:36:9d:93:5c:7a:ca:ce:7e:b1:
19:6e:af:4f:b2:6e:d7:1f:b0:3d:7a:3a:c0:37:05:6c:d1:af:
86:66:27:0a:85:f2:12:3f:57:fe:19:85:fc:b1:e9:29:12:fb:
ad:06:f0:28:bd:04:d3:ac:54:17:57:d4:4e:a4:51:df:9f:f5:
88:c8:f9:d8:c1:a9:8a:e4:fa:f1:79:07:e8:16:a1:bb:2e:12:
e1:83:f8:5b:32:85:af:1f:fb:26:7e:a7:d2:5e:72:42:74:c0:
53:87:d3:22:38:4b:fd:8a:a5:e1:44:fd:71:78:0d:49:91:67:
32:fc:57:c3:a7:bc:0f:4f:ed:2a:62:df:de:a2:67:e0:d6:74:
d3:f8:37:32:2a:f3:c7:f9:6a:38:0d:d9:4d:4f:e5:f3:ac:31:
35:e5:a5:63:bb:f8:be:12:d8:76:5f:c2:af:f0:b0:d4:26:77:
a2:53:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:58 2025 by rpki-client on console.sobornost.net