Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aqi2p226PDlgfXjqJXqjvnmX_F8.roa
File: aqi2p226PDlgfXjqJXqjvnmX_F8.roa (raw, json)
Hash identifier: q5Y5a4lGW9qCrf23GRy3AWi5T1FXhG7xbjqtBQGlPYM=
Subject key identifier: 6A:A8:B6:A7:6D:BA:3C:39:60:7D:78:EA:25:7A:A3:BE:79:97:FC:5F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF28DB99C43AA3BEB7946F008CB36
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aqi2p226PDlgfXjqJXqjvnmX_F8.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216405
IP address blocks: 2a0e:aa07:e120::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f2:8d:b9:9c:43:aa:3b:eb:79:46:f0:08:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa8b6a76dba3c39607d78ea257aa3be7997fc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:a9:4d:83:5d:29:61:c8:14:b4:7c:b6:7a:
67:20:8b:5e:56:20:96:45:c5:65:35:fc:f5:18:cf:
79:18:cd:0a:f1:d4:a7:25:ef:77:96:2e:3d:38:53:
1f:d4:0a:8b:b6:43:33:ce:1e:21:bc:e8:bd:3b:4a:
4a:61:39:01:10:c8:d5:ce:8d:02:a7:ac:c2:15:9e:
70:4c:bf:49:fa:cb:63:58:de:46:07:c7:ea:98:32:
9a:52:a1:82:0b:aa:7f:de:5a:03:2f:89:f6:00:65:
59:89:fb:2e:bf:59:be:38:3b:f8:e6:79:75:40:12:
9e:a7:e3:bc:f2:0a:d7:78:4a:9f:48:66:0d:ee:60:
71:11:f6:28:70:9a:ba:06:14:c8:1a:ca:39:91:af:
55:5b:d7:52:9b:04:83:9c:94:75:62:e6:af:06:0c:
09:c9:6c:2b:49:9d:99:45:3e:62:97:43:00:86:92:
ab:8a:79:57:d9:2d:03:1c:94:9c:a6:de:4f:86:3a:
39:84:31:b0:94:d4:80:5b:36:5f:7e:42:07:dc:3c:
a1:2d:f2:b9:d2:30:02:14:1d:4a:18:e6:e7:5f:7b:
4f:b7:f3:ca:f0:31:b3:ee:d4:d2:4a:e5:68:1b:61:
15:76:a2:c9:fa:84:c0:c9:84:53:4d:fa:88:3a:ad:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:B6:A7:6D:BA:3C:39:60:7D:78:EA:25:7A:A3:BE:79:97:FC:5F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/aqi2p226PDlgfXjqJXqjvnmX_F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e120::/44
Signature Algorithm: sha256WithRSAEncryption
24:9b:6c:e9:c6:32:53:ce:82:21:e9:5d:7b:3c:0c:d7:2d:dd:
bb:07:bd:c0:2c:d7:cb:9f:99:cc:98:43:dd:96:47:ba:c8:9b:
f9:68:c1:98:42:e7:93:d7:01:5b:c8:99:a1:15:ae:6f:b7:a8:
6c:49:17:04:6c:a3:d4:25:82:77:0c:a6:cf:ce:18:aa:36:47:
13:f7:33:10:e2:a7:93:f9:15:47:f8:88:c4:f3:45:7a:37:cc:
5c:fc:92:e8:8f:9d:4c:93:2a:ed:f2:db:f7:3d:c0:f8:60:3b:
0a:dd:e8:72:b0:4f:81:32:fc:a1:8c:51:40:76:8e:04:07:ef:
59:32:ed:22:5f:24:8d:15:f8:05:be:13:bc:d7:d0:5d:cf:fb:
5a:2b:82:6f:df:89:c9:fb:1c:1d:4b:f9:fe:a0:a3:3e:67:6b:
ea:0d:bf:fd:ec:16:db:0d:1e:45:18:38:c3:9e:f9:74:12:8c:
37:6e:ee:01:55:d2:5b:c8:17:b7:f5:61:d5:f7:36:17:80:d9:
63:b0:8a:46:e2:3f:9a:ac:a5:c5:8d:e7:78:45:5e:60:d3:3c:
ef:6d:4a:f7:f0:08:7a:a0:fc:7d:03:c6:83:d4:4b:44:a4:84:
d0:eb:c6:c8:b9:6a:96:47:de:16:4b:09:13:85:4b:87:6e:03:
13:b1:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:05 2025 by rpki-client