Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1fqtAZZ6J1GIlzu_LVwiDhRXzWY.roa
File: 1fqtAZZ6J1GIlzu_LVwiDhRXzWY.roa (raw, json)
Hash identifier: v4db6d8NjUkT8rxwD26PTcEojH4fvTUqxqpO2rDgWRw=
Subject key identifier: D5:FA:AD:01:96:7A:27:51:88:97:3B:BF:2D:5C:22:0E:14:57:CD:66
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0194274848B756C149957576F971F64929A5
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1fqtAZZ6J1GIlzu_LVwiDhRXzWY.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:5a40::/32 maxlen: 32
2a11:5a42::/32 maxlen: 32
2a12:7304::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:48:b7:56:c1:49:95:75:76:f9:71:f6:49:29:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5faad01967a275188973bbf2d5c220e1457cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:24:15:e3:7b:0b:d4:fd:c4:f3:26:04:d9:
fe:9b:19:f0:96:64:12:7a:15:b9:3b:ed:2f:43:67:
68:6d:e0:44:1a:25:b7:46:fd:9f:48:31:1b:06:8e:
a0:9c:8b:4c:18:e8:8a:9e:e8:8b:6a:be:a1:d4:32:
ca:d8:49:9a:a9:be:ee:59:2d:2e:c5:5a:64:ba:d0:
30:da:c6:5a:af:2a:ca:e1:18:ff:e8:5d:0c:4b:05:
ab:3a:a2:09:cf:40:84:d7:83:31:86:be:62:24:7f:
2f:a7:8e:9b:20:98:ae:8e:76:1b:70:15:3a:ee:ba:
76:43:11:81:dc:59:85:b1:66:a5:88:43:07:d1:0f:
33:12:b4:1b:bb:a3:ce:ae:9c:82:a2:39:5e:5f:f5:
98:e6:5b:9c:dc:2a:13:fb:87:7c:2e:8e:8f:3f:cd:
52:d3:1b:96:50:fc:45:06:b9:6f:7d:d8:f3:7c:ed:
a5:43:a6:f8:2d:7c:88:99:48:4c:c0:74:97:a2:8a:
08:b7:aa:7c:ae:2d:80:26:d4:ac:e2:6d:58:90:b4:
27:63:b4:cc:f5:4a:da:fc:93:22:d2:12:c5:fe:e5:
30:21:ce:0c:98:a5:bd:d7:d2:e5:7c:11:bb:8f:d7:
37:34:f5:0f:a3:12:a9:2f:c9:90:d3:c1:90:60:c0:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:AD:01:96:7A:27:51:88:97:3B:BF:2D:5C:22:0E:14:57:CD:66
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1fqtAZZ6J1GIlzu_LVwiDhRXzWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a40::/32
2a11:5a42::/32
2a12:7304::/32
Signature Algorithm: sha256WithRSAEncryption
2c:9d:41:5c:b4:d6:9c:59:bd:98:44:74:f4:49:16:6d:39:18:
29:81:9f:43:80:df:2c:1a:98:b7:96:23:41:3a:92:45:80:8c:
6d:94:2e:b9:09:fc:86:cf:65:5b:96:05:65:3f:f6:f9:52:29:
30:03:14:72:60:f6:07:eb:62:b7:fb:75:10:66:ba:e8:51:27:
10:35:dc:04:6b:18:4d:ed:14:7b:5c:b4:ff:24:f3:40:e9:28:
84:50:ee:6f:23:fd:f4:50:4a:66:b7:83:a5:12:d7:c7:32:f1:
55:f7:25:74:d9:08:bd:86:b1:c3:e8:15:a8:f7:4a:6e:75:5b:
5e:a9:82:30:70:35:51:a9:0e:ed:d9:fe:45:5e:6a:b9:31:8c:
75:0b:a3:e0:5c:7d:b6:ae:51:ea:22:f3:9b:fc:1a:6a:f9:9a:
f2:74:39:35:4d:64:76:ac:c7:09:20:ab:b8:14:8a:d0:f2:33:
0c:05:a8:a7:de:e1:b5:5c:ce:ae:33:f8:fd:1f:f4:c5:cd:76:
54:d6:2f:6c:33:76:71:fc:40:45:e6:b5:28:7d:7c:21:33:86:
e4:ce:46:64:db:bb:78:24:22:5b:2a:39:a3:48:6a:f2:b7:d4:
16:99:0d:64:1e:c0:a4:81:aa:2b:2d:2f:36:71:34:9b:62:f0:
6b:16:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:11 2025 by rpki-client