Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AP6kFa2nGsVzrPa6npeFhwkGYC4.roa
File: AP6kFa2nGsVzrPa6npeFhwkGYC4.roa (raw, json)
Hash identifier: kLdDtk61k1GtwRNYv1oYIJ2qEHxLRfmhmXMWRmtr6yo=
Subject key identifier: 00:FE:A4:15:AD:A7:1A:C5:73:AC:F6:BA:9E:97:85:87:09:06:60:2E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF07E86536067DAAD9460C6243035
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AP6kFa2nGsVzrPa6npeFhwkGYC4.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215007
IP address blocks: 2a0e:aa07:e1a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:7e:86:53:60:67:da:ad:94:60:c6:24:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00fea415ada71ac573acf6ba9e9785870906602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:9e:a2:57:56:f2:d4:0c:79:14:86:de:65:
42:d9:ac:c2:51:f0:dd:09:b6:01:74:f3:b2:a7:30:
2e:e6:1d:29:ea:bf:58:79:50:c8:9f:ce:d9:80:10:
cf:11:a0:6f:cc:28:38:51:3c:1c:54:ad:99:01:3b:
db:e3:48:0c:36:cc:3f:db:ef:8b:8e:dd:39:4b:2f:
b0:af:be:68:19:99:9a:d2:8f:d9:c4:cb:1c:df:b3:
56:f5:c2:84:a3:fa:85:1c:f3:be:eb:9a:78:6f:e7:
a3:7c:79:7a:af:e3:52:92:81:dc:af:be:51:76:e3:
35:92:b8:50:0d:70:c8:dc:15:39:7e:03:a1:9e:77:
e7:49:1f:7c:e9:9c:11:74:c1:37:cc:be:22:12:3f:
7b:9e:4e:62:16:9d:c1:df:c5:77:47:10:83:42:42:
5d:14:cd:d5:0e:2f:4c:48:db:4d:35:06:b3:8e:2d:
28:79:47:0d:88:34:6b:f0:9e:b2:0f:23:ad:fb:09:
6e:4c:3c:af:69:07:aa:9c:f3:b0:24:22:1f:b2:5d:
88:6c:51:84:a9:3f:61:05:17:a6:9f:9e:f1:4e:f9:
ec:15:f0:66:43:14:3b:5f:1a:14:e4:69:2c:a0:c6:
7f:75:27:04:dd:9f:8e:36:36:12:44:da:fb:d5:d8:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:A4:15:AD:A7:1A:C5:73:AC:F6:BA:9E:97:85:87:09:06:60:2E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/AP6kFa2nGsVzrPa6npeFhwkGYC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e1a0::/44
Signature Algorithm: sha256WithRSAEncryption
11:19:73:98:85:a9:6d:3f:0f:a2:d6:8e:e5:45:f8:b4:06:d8:
57:b5:4b:49:88:f4:6b:a9:16:8e:ac:0c:ab:14:18:90:fb:f2:
66:b3:1b:09:9c:93:d7:76:f1:89:17:7e:d9:86:65:a8:2f:e3:
9c:c6:9f:6c:99:a2:66:9b:74:73:38:72:84:6f:b6:9b:35:ad:
d1:46:28:c7:b8:ad:1d:a9:fe:f5:67:7b:bd:e0:3b:70:37:16:
a3:44:c9:b7:0c:ab:02:59:cf:e5:59:2b:fe:2c:18:6a:f3:47:
65:14:4a:d3:3b:6b:aa:ea:cb:71:40:17:bb:92:33:99:4c:a4:
a1:da:64:15:b6:22:ea:05:a6:3e:3b:d3:fa:34:cc:9f:b6:ac:
05:b0:93:54:3c:31:7a:e4:bc:c1:96:57:5c:ab:43:b8:3f:f5:
d4:ea:eb:56:0d:c5:0c:96:73:7d:74:68:66:8c:c0:26:a2:fa:
8f:d6:b4:1b:8b:98:75:3b:84:2f:54:3e:8e:86:1c:f4:d2:51:
3b:93:2b:d1:21:d9:30:39:06:4f:9c:ee:a7:4d:d7:e2:e7:72:
ee:45:64:3d:f7:a4:4d:74:ac:14:1e:1e:b4:5c:cc:ce:99:cf:
32:99:4e:21:29:ca:69:17:80:4e:e6:c9:8b:9e:ec:d4:26:2b:
76:9f:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:58 2025 by rpki-client