Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/ixSljlpAv7VqFqZBManiWIU_IIY.roa
File: ixSljlpAv7VqFqZBManiWIU_IIY.roa (raw, json)
Hash identifier: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=
Subject key identifier: 8B:14:A5:8E:5A:40:BF:B5:6A:16:A6:41:31:A9:E2:58:85:3F:20:86
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBB411ADE5A592B048DD040DD3A2E
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/ixSljlpAv7VqFqZBManiWIU_IIY.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209294
IP address blocks: 2a01:e281:a400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bb:41:1a:de:5a:59:2b:04:8d:d0:40:dd:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b14a58e5a40bfb56a16a64131a9e258853f2086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:2e:d9:a8:04:01:27:ae:9a:b6:d3:ee:34:
f6:92:1c:37:31:21:18:cb:7b:ee:bd:e0:5a:92:d8:
2c:23:32:4d:38:19:3e:30:23:47:5f:c4:7b:31:46:
92:7a:b7:36:16:5d:ba:ae:61:06:c2:d1:c5:1a:ea:
0c:e7:e6:b8:fa:e4:77:3b:98:db:cb:27:73:bb:6d:
9f:b3:a6:7b:76:df:12:3a:b2:61:d5:36:06:90:cb:
d9:d0:58:00:cc:a9:78:33:a9:a3:55:2e:57:a9:ad:
88:de:be:36:9f:04:b4:c5:83:02:44:87:0a:bc:71:
1c:98:6b:28:d7:df:5a:42:56:23:a7:14:20:04:20:
8e:17:8f:7b:22:0a:39:46:74:d1:95:e3:dc:fe:18:
4c:07:4e:c2:b2:cd:fd:10:f5:8c:5c:12:e2:85:3a:
3c:01:db:1e:11:ac:1b:05:66:de:54:5f:a5:3e:c5:
21:c5:e7:c1:f1:49:6c:3a:21:12:62:e4:5f:13:30:
14:59:ad:31:d9:4a:fd:67:6b:9e:c0:05:9d:0d:07:
6d:fc:02:9d:31:eb:dc:d8:a6:c6:3c:06:da:ad:a4:
1f:68:0c:37:a8:10:85:3e:30:e6:79:62:16:fb:bc:
3b:ec:8e:70:c1:d2:a3:92:db:b4:38:68:04:da:5d:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:A5:8E:5A:40:BF:B5:6A:16:A6:41:31:A9:E2:58:85:3F:20:86
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/ixSljlpAv7VqFqZBManiWIU_IIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a400::/40
Signature Algorithm: sha256WithRSAEncryption
a1:de:c0:7f:cf:35:e0:ee:5e:0e:53:60:5c:c2:69:bc:23:a3:
36:72:82:db:70:b7:16:d1:db:82:a5:ed:e2:4f:cd:d8:f8:31:
25:aa:b8:82:83:54:72:c4:ad:ae:12:a0:0a:35:47:de:6c:e9:
2b:96:27:5f:e5:eb:1c:f0:10:20:00:04:e6:23:5f:ef:fd:8b:
d6:c1:67:be:38:fb:a4:a4:27:df:5d:7c:0c:92:bf:12:3f:9a:
95:f0:9c:47:47:47:26:0f:f3:54:d0:95:0b:5b:42:fd:9b:c6:
b5:3d:3f:10:35:2d:9c:fb:2c:8a:2b:45:59:2d:21:14:53:c9:
9c:62:bd:cf:ab:14:61:a3:2e:6d:51:70:9e:4a:39:71:38:ad:
3b:ac:9d:b2:70:db:79:5a:fb:3e:c0:3c:dd:61:e5:5a:ce:35:
c5:d7:76:89:43:d3:70:5e:ce:03:f5:73:98:3f:b7:6d:49:5e:
72:b5:1c:47:3a:83:01:74:72:11:e6:38:75:92:29:54:00:73:
50:f3:47:7d:1a:10:a8:93:51:28:78:54:3d:86:4b:26:75:ac:
6f:f7:21:8f:dc:63:c0:c5:e0:d2:f7:0a:08:b4:ad:09:b5:4a:
40:81:5f:35:a6:6e:87:a0:67:0f:e5:bd:f2:96:1a:94:4a:21:
6b:49:97:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:05 2025 by rpki-client