Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/kqS1kxIqwyXTVFCbFsKTeJNAmaY.roa
File: kqS1kxIqwyXTVFCbFsKTeJNAmaY.roa (raw, json)
Hash identifier: eTc/8EeUr/jpmtO1ti+g4W5F+YkpgMvGHBKE7ArC6Q8=
Subject key identifier: 92:A4:B5:93:12:2A:C3:25:D3:54:50:9B:16:C2:93:78:93:40:99:A6
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01936417AD4A1940389DB95FEBC28487F64B
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/kqS1kxIqwyXTVFCbFsKTeJNAmaY.roa
Signing time: Mon 25 Nov 2024 16:11:33 +0000
ROA not before: Mon 25 Nov 2024 16:11:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:9440::/32 maxlen: 32
2a09:9442::/32 maxlen: 32
2a09:9443::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:17:ad:4a:19:40:38:9d:b9:5f:eb:c2:84:87:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Nov 25 16:11:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92a4b593122ac325d354509b16c29378934099a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:0f:9a:b0:94:88:b5:08:65:29:f5:55:1f:
6a:19:3d:36:43:7c:22:fb:20:4f:64:a6:36:ef:68:
29:96:4c:c8:e6:af:7f:fb:dd:2c:d1:f2:37:13:a8:
e2:01:1a:0c:6a:20:ab:d4:84:2a:e3:76:41:66:f0:
2c:13:24:46:e7:b3:aa:cf:5c:d0:42:e5:f8:da:3f:
4e:b9:ab:97:07:80:b3:fc:02:e3:c7:ea:98:c4:d7:
2e:1d:5e:43:65:9b:b1:c7:49:e9:39:68:58:01:53:
e2:1e:10:7b:05:9d:8e:f7:45:bd:d8:c1:b3:8c:02:
7c:bf:a6:a8:50:36:1c:3e:ac:06:1f:78:e5:52:67:
e7:a0:8c:d2:ff:1b:5b:99:55:1c:96:51:ea:ae:6c:
2a:2a:dc:9a:0f:69:4d:18:e3:63:81:f2:98:67:ee:
ba:06:40:3e:12:80:14:f3:39:87:07:c1:8a:29:c1:
9c:56:62:05:21:d6:e3:27:18:5d:45:38:5c:8c:93:
a2:fa:14:46:84:1d:c5:68:72:bc:8e:23:d0:42:12:
a4:01:19:e0:81:1e:f4:4f:1e:f6:cb:59:30:bd:cf:
92:d0:7b:47:2b:90:44:cd:6f:8d:b7:3a:f9:5d:58:
dd:3f:01:e2:15:87:97:27:3a:fa:de:1a:03:02:53:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:B5:93:12:2A:C3:25:D3:54:50:9B:16:C2:93:78:93:40:99:A6
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/kqS1kxIqwyXTVFCbFsKTeJNAmaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9440::/32
2a09:9442::/31
Signature Algorithm: sha256WithRSAEncryption
30:59:15:86:e7:f4:b4:a5:fb:e0:36:45:58:c5:1b:31:f1:56:
e6:a2:0f:10:74:12:98:22:c1:eb:2b:54:2f:d8:a6:6a:8a:44:
8b:53:b6:02:88:75:ed:fe:01:da:92:19:c8:8b:57:10:ed:eb:
2d:e6:34:b2:74:58:f1:dc:8f:a5:f4:1f:8f:6a:24:01:f0:b3:
2e:90:4c:7c:04:e1:b8:25:19:2f:a2:a9:74:70:fb:81:b0:c4:
bd:60:e7:91:f8:77:ca:a6:13:1a:18:74:0a:e0:57:94:e0:0d:
e4:a0:2e:14:a8:89:b4:fd:c2:19:a8:aa:6a:0f:e1:37:a7:31:
93:4e:8b:b7:3d:6c:e9:52:86:16:31:71:80:07:56:cf:b1:57:
47:31:7c:9f:5d:32:39:e6:f9:66:1a:6f:54:85:11:f1:c9:fb:
b0:d9:6a:43:6c:f1:ba:68:2f:5e:65:c0:ce:8a:78:42:8b:53:
c8:f8:bb:33:38:2d:55:06:8a:0b:26:6e:b8:37:ca:f2:26:10:
f6:fc:1e:d1:22:3f:05:51:b9:fb:87:0e:34:bc:74:cc:c8:88:
3e:e8:0f:70:bf:66:57:6b:d8:b2:2b:ae:7e:f8:ff:bf:bb:34:
22:02:09:5b:df:d7:1e:cc:cf:60:9e:79:f8:fd:da:2a:f7:34:
34:be:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:23:51 2025 by rpki-client