Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa
File: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (raw, json)
Hash identifier: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=
Subject key identifier: 37:20:A8:29:D5:6C:65:A4:3A:1F:B4:77:76:D6:99:B4:6D:8E:C1:14
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 01942521AD487BA952D7E5A5BC5D3D101B1D
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47368
IP address blocks: 2001:67c:9f0::/48 maxlen: 48
2001:67c:9f4::/48 maxlen: 48
2001:67c:9f8::/48 maxlen: 48
2001:67c:9fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ad:48:7b:a9:52:d7:e5:a5:bc:5d:3d:10:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3720a829d56c65a43a1fb47776d699b46d8ec114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:b5:b3:75:24:4a:29:84:83:63:55:46:fb:
f5:91:72:5f:04:ae:be:70:f6:7f:e5:8f:bf:e0:79:
07:c4:1b:d4:6b:4e:18:da:c2:27:b1:e4:ce:a7:48:
18:06:4e:79:a0:24:95:5d:0e:40:7c:96:8f:e4:7a:
44:9e:21:5f:2a:2d:50:95:d8:c3:fd:e9:01:0f:77:
3f:35:c5:06:45:a0:7b:bf:25:5b:14:7f:9c:77:97:
f1:27:10:a9:86:1c:f7:4d:db:cb:b3:43:d2:7d:a7:
f3:14:14:51:77:a8:ff:b7:ad:81:62:35:1d:be:f9:
26:b2:6e:ea:ec:fa:87:30:8e:2e:d7:51:34:4b:87:
43:50:91:b2:4a:a3:8c:44:8d:04:bc:7f:d2:37:78:
68:7e:ff:fb:d7:bc:9e:b1:04:28:62:94:43:34:51:
1c:72:d6:14:2b:51:75:4e:fb:76:29:c1:c9:b2:95:
50:df:d6:99:35:0e:35:05:50:d3:69:f9:0f:a4:f9:
52:0b:9f:5d:d8:e2:ce:44:84:39:c4:c3:da:a0:da:
3d:da:e3:4b:30:6a:9b:3d:5a:9a:65:0c:81:52:af:
fc:0e:ce:2a:53:24:00:18:df:dd:9c:d0:91:0c:44:
09:2d:20:59:b4:25:29:9d:8a:19:1a:d2:16:fe:f1:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:A8:29:D5:6C:65:A4:3A:1F:B4:77:76:D6:99:B4:6D:8E:C1:14
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9f0::/48
2001:67c:9f4::/48
2001:67c:9f8::/48
2001:67c:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
33:40:f0:1f:7c:0e:f6:ae:48:37:7a:00:38:f9:ef:97:64:c1:
95:8c:50:52:96:de:85:d1:25:47:ce:55:86:c8:59:af:68:69:
10:43:c6:7f:a2:2d:81:d1:e4:ef:11:df:76:67:40:df:d1:22:
62:0a:68:1c:f1:2f:47:5c:c3:f5:a9:55:0d:05:0b:84:b4:86:
aa:2c:29:4b:4b:09:d1:5d:ce:4d:7e:d5:ca:45:8a:00:35:24:
fa:4c:7b:73:ca:65:ab:ab:f3:f4:9d:26:1c:d8:cb:59:9c:a3:
60:16:18:0e:6a:30:5b:05:bb:f6:1b:44:af:9d:81:8b:1b:50:
a2:ab:72:14:30:23:14:56:71:fa:e9:65:17:5c:86:5b:50:17:
82:9d:be:ff:3b:71:33:5b:85:d5:3e:8b:18:8b:58:30:41:04:
89:7b:dd:d2:62:04:c9:6f:73:69:30:19:63:d9:42:f5:b2:db:
14:54:c4:82:ec:88:42:44:92:d7:3e:75:ff:90:bc:57:29:1e:
2e:20:7c:b4:fe:d1:0d:92:1e:9b:fc:93:03:85:53:ed:f5:c7:
87:9f:cb:7c:d6:be:5c:c3:db:0e:0d:d2:9b:9d:04:e7:8a:e2:
da:15:ff:fa:32:a8:52:3d:83:47:88:ec:f4:ae:96:23:b7:3d:
c4:20:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net