Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/jS9AN5oD9gr_onzGTzL8xf4_tCg.roa
File: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (raw, json)
Hash identifier: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=
Subject key identifier: 8D:2F:40:37:9A:03:F6:0A:FF:A2:7C:C6:4F:32:FC:C5:FE:3F:B4:28
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FC20C0CA5A00E730E02A41A580C1F
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/jS9AN5oD9gr_onzGTzL8xf4_tCg.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212828
IP address blocks: 2a10:9903:600::/48 maxlen: 48
2a10:9903:601::/48 maxlen: 48
2a10:9903:602::/48 maxlen: 48
2a10:9903:603::/48 maxlen: 48
2a10:9903:604::/48 maxlen: 48
2a10:9903:605::/48 maxlen: 48
2a10:9903:606::/48 maxlen: 48
2a10:9903:607::/48 maxlen: 48
2a10:9903:608::/48 maxlen: 48
2a10:9903:609::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c2:0c:0c:a5:a0:0e:73:0e:02:a4:1a:58:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2f40379a03f60affa27cc64f32fcc5fe3fb428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:38:62:ee:3b:0e:6c:bc:16:69:83:78:c7:
33:61:2d:6f:b9:aa:4e:f0:5b:59:aa:fc:2b:34:91:
66:59:43:25:00:6e:52:dd:cc:d9:7f:66:43:e4:21:
a0:4f:98:76:f9:63:ba:08:b1:0e:92:f5:f9:6e:1a:
51:e1:7e:f2:6b:ec:67:2b:45:55:04:86:03:20:ce:
2f:19:09:d5:c2:f6:01:64:9a:30:b9:75:cb:65:22:
b6:2a:3d:b5:fc:99:24:08:af:ee:d3:af:01:95:1b:
65:23:5d:a7:4b:6d:aa:58:50:9a:98:55:af:03:cf:
13:21:da:b9:2d:61:02:6a:9f:e7:cf:07:02:70:fe:
80:41:ca:66:ad:c9:08:73:36:27:59:fc:22:9d:3d:
a4:56:ab:97:ae:73:99:60:87:fe:61:84:ab:ef:1a:
81:e6:35:f4:44:e0:9c:5d:af:a2:c2:b9:37:ec:63:
3d:60:00:af:e5:e9:85:4b:aa:aa:e8:a3:a0:62:c7:
8d:f1:2f:53:38:27:27:2c:af:78:d0:0e:d3:76:35:
40:5b:8d:e1:7a:c3:c5:34:3c:de:90:ee:c4:35:14:
4c:de:26:b6:ec:c4:f3:e3:59:99:16:36:68:04:81:
24:c5:77:fc:e9:74:55:fc:40:09:d8:17:d3:33:91:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:40:37:9A:03:F6:0A:FF:A2:7C:C6:4F:32:FC:C5:FE:3F:B4:28
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/jS9AN5oD9gr_onzGTzL8xf4_tCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9903:600::-2a10:9903:609:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:45:81:ef:86:d8:22:34:6a:60:92:79:0d:54:fb:07:7d:bb:
0e:17:af:99:3b:63:7c:69:31:f1:b3:b3:94:f9:d6:5e:2f:bc:
18:2a:89:e5:d6:9b:03:91:1f:2c:89:4e:fc:af:57:33:2c:6b:
2f:0d:7e:af:48:be:12:71:4e:86:ab:9e:80:3b:b2:22:95:7d:
a6:6b:59:ac:c2:3c:b3:60:ca:a5:98:3a:bb:c9:44:d8:3f:5e:
d1:91:d4:2b:90:9e:de:37:0b:1f:1c:b3:e9:43:d7:be:4c:f1:
d6:64:4d:ab:9c:35:e1:33:74:1f:f4:c9:8a:85:62:97:bb:04:
85:6e:e8:63:a2:a7:85:e2:e0:6b:da:06:40:7a:00:53:6b:13:
e9:aa:05:99:13:f3:19:37:bd:03:92:78:a4:2b:de:5e:5a:b2:
e0:27:1b:41:57:28:31:40:20:84:4a:c5:51:6c:dc:88:1f:3b:
94:2c:30:99:00:2b:25:5a:fd:30:13:a5:ec:e5:5b:e7:38:89:
05:f9:7e:b5:8f:9a:27:34:29:15:7d:ea:8a:1a:87:da:f3:cc:
21:c3:0d:46:5c:4c:f5:60:dc:35:14:13:3a:7f:3f:24:19:35:
1f:e1:03:f9:d4:f2:a7:5e:35:47:a8:7f:5f:51:97:e4:81:bd:
e9:c0:84:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:45 2025 by rpki-client