Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/99tXZ2qE7bTACCQJf2CpTO_MHe8.roa
File: 99tXZ2qE7bTACCQJf2CpTO_MHe8.roa (raw, json)
Hash identifier: SyG2zFWqIeNampm+R0kQgikxR0Om6X4Pnui8QQpzqwo=
Subject key identifier: F7:DB:57:67:6A:84:ED:B4:C0:08:24:09:7F:60:A9:4C:EF:CC:1D:EF
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE5217A33CCBDEB9E423A0FB2A940
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/99tXZ2qE7bTACCQJf2CpTO_MHe8.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210934
IP address blocks: 2a0e:aa07:e024::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:21:7a:33:cc:bd:eb:9e:42:3a:0f:b2:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7db57676a84edb4c00824097f60a94cefcc1def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:d5:08:31:b0:d1:ed:f0:3a:95:9f:72:bf:
ef:aa:02:cb:ec:1d:f8:a1:bb:15:65:a0:ac:6a:af:
0f:7c:3e:d4:09:76:35:dd:f5:31:fb:ab:ea:29:91:
5b:18:3e:a6:de:72:bf:1e:91:60:fe:7d:03:4a:46:
94:29:4c:50:80:56:57:ab:2d:2a:be:5b:6b:f7:f3:
13:74:a6:03:00:65:a7:09:43:ca:1d:91:86:82:06:
ac:cb:dd:6f:81:62:43:3f:31:cb:64:6d:b8:31:5e:
b2:e6:fc:b5:0d:93:48:2a:15:bb:c2:ba:99:1c:4c:
27:12:bd:98:2f:51:4f:13:e9:f8:7d:af:e6:83:62:
21:59:6a:b1:e9:59:e7:94:b1:e0:ed:d2:3e:7a:49:
f6:7a:2b:27:9b:cd:29:4f:d2:88:4e:ae:11:f3:96:
06:1d:63:c8:1d:6d:99:69:e3:42:4c:73:a1:07:5a:
e4:90:75:c8:08:cf:a1:d1:15:fb:e8:8d:42:73:2a:
cd:fd:1b:70:de:b9:8b:13:f7:6f:e2:e0:35:f8:02:
ac:ff:53:f0:83:1e:cb:68:47:7a:29:75:76:84:c1:
e7:00:74:19:e6:b9:ad:e5:31:4d:93:e1:70:a0:50:
db:5e:d7:8e:2b:11:c5:f9:24:47:1f:7b:76:90:8d:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:57:67:6A:84:ED:B4:C0:08:24:09:7F:60:A9:4C:EF:CC:1D:EF
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/99tXZ2qE7bTACCQJf2CpTO_MHe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e024::/48
Signature Algorithm: sha256WithRSAEncryption
05:b1:af:db:70:69:27:8c:1f:dc:8e:06:36:13:9d:7f:4a:c5:
67:c3:5f:e9:7b:51:ae:5d:12:66:ca:dc:a4:f5:35:6a:59:05:
9f:24:88:8f:0b:50:d9:6b:67:47:cb:02:86:ef:a6:c2:50:52:
40:87:15:22:87:3d:c4:1f:87:f5:19:2c:a8:f9:3e:77:00:40:
c7:57:45:be:5f:37:4c:a2:39:21:e0:98:e5:49:c2:14:63:63:
e4:0d:71:9f:58:a2:06:ba:7b:e5:c0:9f:8e:6d:0a:b8:4c:e0:
bf:fe:a7:b6:f7:75:9f:69:95:26:68:52:f4:a7:33:35:c2:39:
a2:dc:04:e7:37:de:0b:2f:43:f1:36:70:e4:bc:ba:db:5e:e2:
52:d0:b3:4b:04:51:7e:1c:58:78:99:01:03:b7:69:22:73:9b:
bf:ea:c0:24:0e:3f:3d:00:a4:03:76:9d:65:f8:4d:0a:2e:14:
5c:bf:c5:89:03:41:7f:87:a8:8e:2b:02:6d:72:55:46:bd:13:
e5:2b:1b:f0:3d:6a:60:39:87:b9:d3:64:a0:cb:3e:6d:32:ce:
33:e2:89:d1:99:d5:25:f0:30:92:fb:83:aa:80:6e:ea:8b:5b:
26:d8:ef:87:b1:75:b3:a4:f6:70:6f:6e:81:27:ce:26:17:b8:
2d:08:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client