Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/S1mOlwugMCoblmLTA7QyBzMrk4I.roa
File: S1mOlwugMCoblmLTA7QyBzMrk4I.roa (raw, json)
Hash identifier: WJlDzYaaB/kmTopD/6aBdFnM1ajbtA+J3jdCtvpEnTM=
Subject key identifier: 4B:59:8E:97:0B:A0:30:2A:1B:96:62:D3:03:B4:32:07:33:2B:93:82
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01939304DE47A7FD92037CB79FE47EAB4128
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/S1mOlwugMCoblmLTA7QyBzMrk4I.roa
Signing time: Wed 04 Dec 2024 18:53:09 +0000
ROA not before: Wed 04 Dec 2024 18:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:dfc3::/32 maxlen: 32
2a0e:dfc4::/32 maxlen: 32
2a0e:dfc5::/32 maxlen: 32
2a0e:dfc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:04:de:47:a7:fd:92:03:7c:b7:9f:e4:7e:ab:41:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Dec 4 18:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b598e970ba0302a1b9662d303b43207332b9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:6d:b6:87:2d:4e:f6:e5:e9:3b:5e:42:a9:
a9:ff:5d:dc:0b:43:3e:1f:c0:9e:ec:09:f3:52:0b:
83:87:79:82:d0:8a:45:24:53:62:96:98:3a:aa:79:
ab:1b:95:df:07:0d:80:2e:eb:d7:ba:6a:5e:ef:a8:
88:80:ce:15:cd:51:02:80:11:c7:62:3d:16:30:06:
d8:63:90:ef:c0:e1:62:7d:50:3c:ca:a0:2a:32:ee:
31:65:77:ab:ea:58:9e:b5:ad:d8:e7:46:2a:46:05:
dc:c0:08:2a:a0:c6:86:c5:96:68:5d:c7:aa:42:58:
a8:3a:06:a4:91:94:1f:77:b7:f2:f2:d6:24:21:b7:
dd:3d:f3:16:31:1d:c6:bd:dd:3e:0d:19:ea:99:43:
88:ec:b0:27:da:8d:11:ba:e2:87:a1:83:66:68:84:
39:ec:42:a9:0a:5e:d9:71:57:a4:cc:ea:f9:68:d3:
4a:58:ed:1c:cd:2b:fe:90:58:ea:e5:20:1c:f8:9e:
78:c9:02:e1:03:45:b2:df:15:ba:89:98:b4:35:4e:
0d:96:17:5b:05:d3:c4:23:91:49:c5:80:4a:74:fd:
83:b8:63:06:03:43:b5:cf:61:1c:9c:27:17:bb:9b:
fe:87:70:ab:6a:31:5a:95:70:c5:f2:40:8b:16:fe:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:8E:97:0B:A0:30:2A:1B:96:62:D3:03:B4:32:07:33:2B:93:82
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/S1mOlwugMCoblmLTA7QyBzMrk4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc3::-2a0e:dfc6:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c8:be:d3:b4:a5:f9:2e:e0:ba:bf:84:55:4d:bd:26:30:e6:06:
e2:12:d2:43:f9:8a:55:79:5e:a8:67:28:da:c2:af:aa:ad:63:
92:83:28:db:29:ee:ec:16:fa:dd:e3:30:84:b6:d6:6c:4f:a7:
6d:12:f0:19:dd:65:04:0b:9e:71:a5:6c:5f:35:d3:2d:83:f5:
2f:2a:18:a4:dc:b5:19:c8:9e:34:77:ea:51:ce:58:84:92:f1:
b8:7c:0c:e8:8d:32:fc:65:68:21:eb:63:44:bf:8c:e3:76:cb:
0f:a5:00:03:3f:7c:3c:3c:ab:73:de:0c:1b:87:25:43:21:f1:
60:cc:99:f5:d9:c4:55:2c:cb:db:be:01:73:24:30:5e:5a:95:
69:c2:9b:0d:8f:dd:ac:42:56:66:74:ff:ca:74:aa:03:7f:14:
35:05:9d:f2:22:58:ed:8b:19:13:6c:af:7d:5b:d7:62:f4:91:
2b:a5:54:94:28:35:4d:7f:4e:50:84:46:ad:8b:15:8b:bb:96:
be:14:c9:03:06:17:72:dd:15:e2:e8:91:3f:80:4e:7a:d0:12:
6e:ca:39:67:2c:1f:1b:e7:14:9b:6b:3c:b7:ae:ac:0d:05:6a:
ac:5b:cc:b4:a1:72:f3:cc:bd:72:c1:c6:ca:58:0a:21:71:ea:
d5:a9:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:35 2025 by rpki-client