Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_gT6iTmy_rVyRJEGWFPW85kMsPY.roa
File: _gT6iTmy_rVyRJEGWFPW85kMsPY.roa (raw, json)
Hash identifier: XMQiPuHyEFEyyFmM/ydOcBWIpdQvgtjlBH/N3UNmdU4=
Subject key identifier: FE:04:FA:89:39:B2:FE:B5:72:44:91:06:58:53:D6:F3:99:0C:B0:F6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE553824136F6A7C01E6BD8C58EBE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_gT6iTmy_rVyRJEGWFPW85kMsPY.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211035
IP address blocks: 2a0e:aa07:e023::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:53:82:41:36:f6:a7:c0:1e:6b:d8:c5:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe04fa8939b2feb5724491065853d6f3990cb0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:43:27:0d:fa:3e:5e:b7:d2:ed:90:c8:d4:
51:80:85:38:e8:ea:6e:0b:f5:b7:62:1e:17:16:29:
5d:2c:45:2d:c8:c9:69:fa:6c:4a:cb:d2:02:bd:83:
5c:96:71:41:ee:c5:7c:89:ff:b2:ac:7b:17:b9:d0:
68:b2:a3:d3:38:b4:fc:bb:94:14:73:b1:0c:9b:3b:
f0:9d:46:2f:af:c8:20:b6:c0:2e:8f:94:5e:8c:91:
b1:a2:07:7d:39:73:0f:fc:24:18:ae:f4:bc:6f:ba:
3d:49:16:a3:5c:16:0c:9a:2a:46:bd:91:d8:28:3a:
02:1e:04:08:ef:db:00:ae:02:02:d1:61:51:61:02:
88:ee:c8:7a:b5:88:bd:00:89:c3:2c:e9:72:ee:54:
30:42:16:e2:bf:97:4d:7f:50:fa:ad:10:03:59:c9:
c0:e6:f9:b0:2c:22:2c:1c:f7:2b:25:08:e3:25:ca:
e1:fb:8b:6a:69:0d:a6:d5:cc:82:fb:6e:f2:f7:93:
93:df:36:35:6d:17:1c:9c:5b:46:c0:ef:28:19:9d:
82:ac:16:eb:9e:de:78:34:5b:be:28:0b:3e:55:5f:
46:00:44:61:fa:3b:9a:77:e9:23:b5:af:57:6a:8a:
08:93:ae:da:39:f5:05:08:d3:3e:21:9a:7f:b1:36:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:FA:89:39:B2:FE:B5:72:44:91:06:58:53:D6:F3:99:0C:B0:F6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_gT6iTmy_rVyRJEGWFPW85kMsPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e023::/48
Signature Algorithm: sha256WithRSAEncryption
58:14:54:70:0e:a6:99:43:03:83:da:98:6f:f9:87:bd:f6:f7:
ce:6b:9e:ca:6b:05:ac:8f:80:1b:36:67:99:27:e0:51:d0:52:
15:e6:af:34:32:28:66:bb:f0:10:cb:ef:14:66:cd:47:77:be:
29:b8:f2:bd:23:8d:3b:d8:c9:de:c7:a1:fa:dc:20:80:47:90:
3f:a6:45:9b:3b:46:7b:7c:c8:18:5d:e6:6b:a7:0c:85:ae:8a:
45:d9:dd:4a:fd:5d:fe:67:95:8c:c2:c8:d7:36:6b:e9:94:00:
34:3d:2f:56:06:4b:48:1d:4d:0c:90:5b:9d:a5:77:f6:03:55:
64:6e:b1:3d:dc:a5:f7:a6:a5:9c:06:00:41:33:79:c9:e8:af:
c8:35:11:c1:d0:f4:3e:7d:4f:97:8f:1c:94:34:2f:8c:3a:c4:
47:ab:41:47:c9:7f:79:6d:08:70:a8:75:3c:9f:73:9b:a9:48:
ee:f4:a4:ae:f6:30:e1:29:10:1d:5c:d7:01:39:95:55:61:a3:
1f:7b:00:c4:67:a4:8c:ea:a6:19:96:f7:63:fe:3a:43:35:07:
a1:3e:85:0a:61:fe:b2:10:73:9f:65:c1:c2:87:2a:9a:5f:3a:
3c:32:d0:3c:f6:d0:56:58:01:71:4a:70:7c:0d:4c:ec:4a:81:
89:11:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:13 2025 by rpki-client