Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa
File: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (raw, json)
Hash identifier: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=
Subject key identifier: 8D:E0:8E:A5:15:4E:7F:33:DD:28:70:89:83:95:5A:00:6D:99:53:ED
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0194FF34914D019311C04DF06976C3A40DA7
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa
Signing time: Thu 13 Feb 2025 12:07:02 +0000
ROA not before: Thu 13 Feb 2025 12:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 2a0c:b6c0::/34 maxlen: 34
2a0c:b6c0:4000::/34 maxlen: 34
2a0c:b6c0:8000::/34 maxlen: 34
2a0c:b6c1::/34 maxlen: 34
2a0c:b6c1:4000::/34 maxlen: 34
2a0c:b6c1:8000::/34 maxlen: 34
2a0c:b6c2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:34:91:4d:01:93:11:c0:4d:f0:69:76:c3:a4:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Feb 13 12:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de08ea5154e7f33dd28708983955a006d9953ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:e9:fa:27:bb:a9:a1:b4:cf:a1:57:27:18:
a9:24:4f:2f:97:94:41:b0:19:9e:9d:c9:cc:77:42:
bc:d6:99:8e:d5:56:d8:8d:43:7e:6e:e3:2e:bf:9e:
36:b7:14:10:ee:b5:58:60:73:36:48:e2:f6:f7:29:
0e:69:b9:ed:4c:81:15:0c:9f:7c:18:ef:a9:37:1d:
bc:fd:03:0c:a5:b1:0c:f4:3d:6d:37:0e:23:b5:f4:
43:e8:d9:1b:5d:d2:0f:30:74:43:93:85:28:2b:b6:
23:ab:9d:79:59:a2:96:82:a3:f7:f8:4b:2e:61:b0:
58:04:5a:c7:0b:d3:9b:f7:93:ac:b3:ca:43:00:25:
51:7c:c0:32:82:20:13:66:d2:b9:9a:e5:b3:ba:f0:
79:67:f2:c9:b1:b5:dd:17:aa:8c:01:b7:a1:c8:59:
33:ae:f6:05:ab:f0:51:f3:44:33:dc:07:fa:f3:6d:
1f:b3:db:e7:28:37:5a:93:fc:4f:0f:b8:cc:70:64:
fd:07:b4:ec:cc:8c:58:4c:17:a0:50:c5:f4:72:b5:
7e:5c:a4:88:32:d0:3e:cb:a2:6b:60:e1:5b:dd:21:
0e:f4:06:1f:1b:5f:e3:9f:b5:e4:1e:b4:01:f2:b2:
63:2f:cd:f8:c0:13:08:6f:e6:bd:1b:d5:3d:40:4b:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:8E:A5:15:4E:7F:33:DD:28:70:89:83:95:5A:00:6D:99:53:ED
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c0::-2a0c:b6c0:bfff:ffff:ffff:ffff:ffff:ffff
2a0c:b6c1::-2a0c:b6c1:bfff:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2::/32
Signature Algorithm: sha256WithRSAEncryption
40:b3:67:48:8b:ae:3d:e3:bf:d9:d3:33:ab:cb:ac:42:ed:b4:
c9:28:d5:e0:28:19:43:66:d2:48:af:d3:9d:3b:70:ed:6c:29:
0d:8c:fe:5c:d7:e8:78:cb:2b:54:87:6a:8a:15:26:0d:82:07:
eb:79:8b:48:8d:a8:48:2b:1e:67:fd:a5:75:86:f3:bb:63:79:
5a:35:79:7d:9e:7a:14:90:57:93:c4:80:d7:33:88:3f:31:6d:
51:d4:58:06:a6:41:6c:fb:5d:03:6a:12:f1:b7:b6:32:4b:5c:
d1:c4:c1:fc:9f:3d:b5:70:f9:2b:04:3b:76:3c:21:52:ce:0f:
28:0e:56:c1:72:90:da:4b:8d:8a:ff:76:9e:70:9b:fb:d2:ba:
a8:e3:ef:87:2a:d8:35:34:db:a9:42:00:43:b0:84:ca:70:28:
f7:15:e0:0f:65:e4:84:28:9b:d0:75:3a:af:05:b0:2b:30:d2:
fc:ea:9b:19:1a:18:6e:46:5a:0d:50:b6:30:87:da:d0:9e:8a:
9a:b7:8f:1a:4d:f0:b2:f6:1e:7d:bb:1e:45:63:e5:86:f3:f0:
89:96:c8:e2:5e:6b:98:da:83:f7:bd:a3:d9:9a:0b:a2:20:bc:
ca:47:00:c8:54:02:43:66:44:ec:bd:8e:b8:82:92:62:bf:b6:
08:f7:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:34:43 2025 by rpki-client