Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6NZdnRm1smBGWlVk7wGPxMZ8ccQ.roa
File: 6NZdnRm1smBGWlVk7wGPxMZ8ccQ.roa (raw, json)
Hash identifier: 8lQhSG2FPy0Vz/9AYR/to5Di8I8PFNhsy+v0Ei1xP5E=
Subject key identifier: E8:D6:5D:9D:19:B5:B2:60:46:5A:55:64:EF:01:8F:C4:C6:7C:71:C4
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE935FAD5770902CBCFA07E3B9DF3
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6NZdnRm1smBGWlVk7wGPxMZ8ccQ.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212371
IP address blocks: 2a0e:aa07:e047::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e9:35:fa:d5:77:09:02:cb:cf:a0:7e:3b:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d65d9d19b5b260465a5564ef018fc4c67c71c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:40:97:88:19:0d:5b:00:3b:aa:8d:3b:eb:
21:19:23:97:df:0f:c5:50:4d:96:5a:db:48:65:dc:
e9:fb:7a:9d:23:4b:e9:2d:18:23:be:ef:64:b5:01:
eb:e0:d7:42:c6:8e:4d:87:83:da:bc:a7:33:1c:54:
d4:59:80:84:14:9b:2c:ce:39:3b:3a:64:7f:1a:46:
af:e1:31:6a:08:c6:8f:e2:75:f1:f1:66:2d:08:f6:
cc:55:c6:e0:9c:11:2b:62:c0:2d:50:d8:3f:74:7a:
ea:09:f3:fe:ed:19:9b:54:61:1e:08:da:60:f0:d6:
cb:25:05:f9:28:19:93:4d:51:25:62:31:53:1e:d3:
43:14:a2:60:e5:f5:47:8d:77:12:e5:24:56:0e:12:
a0:34:12:a1:16:29:3a:6f:7d:aa:46:e7:3e:3e:34:
5b:73:67:9f:5c:ed:bf:94:42:e8:a6:7f:c8:3b:01:
2a:8c:61:3d:ac:37:fe:92:eb:e9:4b:b3:39:84:d8:
99:27:18:f5:bb:99:0f:50:2e:eb:8d:6c:7b:37:41:
a9:81:ac:47:eb:1f:cf:7f:71:2e:06:02:af:74:32:
aa:f5:25:3e:88:f5:8e:4f:6c:bc:7a:40:b3:d7:ee:
80:67:79:90:7f:62:41:b8:8e:79:6c:da:51:d2:e8:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:5D:9D:19:B5:B2:60:46:5A:55:64:EF:01:8F:C4:C6:7C:71:C4
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6NZdnRm1smBGWlVk7wGPxMZ8ccQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e047::/48
Signature Algorithm: sha256WithRSAEncryption
63:13:f7:48:c8:b9:c2:07:0e:f3:60:98:c8:69:a4:ae:8c:84:
8e:09:ec:1c:9d:e8:d1:03:c1:17:70:b8:ef:ab:b4:f8:52:29:
a8:c8:3c:52:b7:e2:bd:7d:c4:ce:3d:e3:3a:1e:a2:26:3e:60:
54:1c:91:60:6e:4b:19:74:e6:8d:90:db:63:4e:55:c3:d3:fb:
25:39:e5:de:37:7f:b7:9c:c9:10:44:a2:19:e0:bc:fd:86:51:
f3:59:e6:08:ea:ae:32:39:9f:f3:71:49:40:2c:4e:c0:7b:43:
65:b1:e6:59:55:95:c5:31:f7:5d:6f:32:25:87:4e:92:5b:c6:
02:9f:18:c5:b2:ff:d6:d0:fe:c9:ed:df:62:d3:65:d6:26:20:
fa:0c:c3:90:16:c7:2b:3c:a1:58:68:6f:91:c3:5f:09:cc:2b:
ce:03:82:41:8d:41:61:09:9e:d5:37:e4:31:00:4b:64:6e:5b:
97:a7:4c:b6:ff:65:11:ee:e3:e1:df:c6:eb:47:3e:c0:5d:eb:
da:5c:85:e8:03:e6:88:83:58:15:0f:36:68:f7:1b:21:93:88:
bd:a1:96:6b:26:75:28:f9:5b:5d:86:ce:de:e3:eb:de:09:fb:
27:41:87:11:60:04:83:fc:a7:47:a9:49:ad:82:63:c6:65:36:
c5:36:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:05:57 2025 by rpki-client