Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/en8nzWGtf10islE8QqdlR4YhdFI.roa
File: en8nzWGtf10islE8QqdlR4YhdFI.roa (raw, json)
Hash identifier: U8OOoKnf7CTO1HtbX3OrrQUalNfVeLzf0c6wknYG0oc=
Subject key identifier: 7A:7F:27:CD:61:AD:7F:5D:22:B2:51:3C:42:A7:65:47:86:21:74:52
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019423D6F850C9C69CA61B0DDC44C0BDDB53
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/en8nzWGtf10islE8QqdlR4YhdFI.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:9441::/32 maxlen: 32
2a11:3c44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:50:c9:c6:9c:a6:1b:0d:dc:44:c0:bd:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a7f27cd61ad7f5d22b2513c42a7654786217452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:64:3c:d5:dc:ee:e2:1a:c4:a5:f7:57:28:
f6:4a:aa:21:71:e6:dd:f5:84:e5:88:0e:06:8c:4e:
fd:41:8e:18:72:5a:5a:01:40:28:82:ea:db:37:a1:
6f:78:df:ff:80:05:2f:9d:d3:95:df:1d:20:6b:77:
3d:3c:46:31:6b:b5:3d:99:6f:b8:fb:2c:75:da:40:
60:02:97:c3:0b:b8:77:11:89:09:ff:2e:1d:84:c0:
b4:f8:17:95:49:70:43:42:b6:94:76:53:cd:8b:78:
f6:76:ca:5f:6d:ec:20:b4:64:1f:6a:3f:e2:f7:89:
2c:70:91:f7:fe:94:4f:34:a9:8c:46:6f:13:74:c7:
ee:d5:f7:39:bd:dd:7b:a4:d2:80:35:2a:4d:84:41:
94:a2:7d:18:45:03:e0:4b:df:f9:63:80:a2:ea:db:
73:20:58:df:60:b3:94:79:9d:fc:da:a1:24:f2:9e:
f4:47:12:dd:e9:10:75:41:95:9e:5a:cd:8d:77:35:
16:12:88:c2:9e:ee:0b:d8:d4:e8:85:cf:b7:37:bd:
ce:a7:c5:47:0c:9b:40:c5:02:68:1e:3d:6e:9f:e5:
3e:2d:69:c9:82:dc:41:7e:ba:2f:6d:5a:fe:d6:67:
98:e8:4e:23:5d:10:8c:99:a3:22:10:5a:70:44:60:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:27:CD:61:AD:7F:5D:22:B2:51:3C:42:A7:65:47:86:21:74:52
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/en8nzWGtf10islE8QqdlR4YhdFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9441::/32
2a11:3c44::/32
Signature Algorithm: sha256WithRSAEncryption
cc:98:92:95:30:fe:7b:b4:31:cd:39:5f:dd:e4:0b:21:f6:fc:
ce:ca:88:e3:66:0b:90:1a:d0:c9:cb:46:fc:15:dd:47:bc:2c:
bb:a7:3a:1d:62:45:5b:50:5b:35:54:6a:0a:ce:6d:39:65:da:
ed:d2:9c:f1:4d:10:ba:14:7c:7c:54:00:1f:70:e1:70:eb:76:
bc:c9:99:26:d0:ca:d2:db:a5:4c:e6:28:07:4c:fa:2e:17:e5:
9c:24:8e:c0:19:c9:42:ed:bb:53:76:ba:5e:6b:e6:39:71:59:
a9:53:94:58:5d:ee:73:56:e6:a7:a8:f7:a9:d6:cb:8f:28:d7:
15:a9:99:bb:60:87:90:c7:e6:53:75:ad:09:da:32:59:a9:dc:
cb:96:c6:2e:1a:16:1d:02:a2:04:a3:e0:6e:38:80:e7:c5:5b:
6c:c3:5a:bc:92:5b:a4:3b:37:e1:4f:8d:92:88:89:4b:27:3c:
54:8c:c6:c2:fb:2c:21:6a:19:59:e8:31:d1:44:5c:b8:48:66:
17:8a:35:8a:27:9c:a0:1a:16:d3:23:87:8c:02:1a:70:a0:1c:
67:76:26:11:ab:15:f4:8f:ed:95:41:eb:a3:f9:62:16:81:c5:
53:60:ad:e1:73:9d:5e:fa:b5:81:c1:10:05:dd:bd:b3:42:40:
3b:44:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:45 2025 by rpki-client