Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eS091tCd-OVbxs4uZdMyhgO6s10.roa
File: eS091tCd-OVbxs4uZdMyhgO6s10.roa (raw, json)
Hash identifier: BsW4eDBqkOZNaT4plpjOCPZIw3dX9LMw8I+6BluOq78=
Subject key identifier: 79:2D:3D:D6:D0:9D:F8:E5:5B:C6:CE:2E:65:D3:32:86:03:BA:B3:5D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE76A85DD3E860DE1A6CBD63EC815
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eS091tCd-OVbxs4uZdMyhgO6s10.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211647
IP address blocks: 2a0e:aa07:e04a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e7:6a:85:dd:3e:86:0d:e1:a6:cb:d6:3e:c8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=792d3dd6d09df8e55bc6ce2e65d3328603bab35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:36:0d:3e:47:61:2c:c9:81:1f:87:b0:26:
37:68:e8:03:40:2c:5c:ca:19:12:12:d6:4d:4c:3d:
bb:89:a0:f6:d8:1f:5c:dd:e9:f3:85:83:41:58:d4:
ac:18:f0:58:3a:f9:04:d0:c2:32:cd:4f:ee:66:f7:
e5:d1:36:d9:0b:29:d6:43:9a:ae:02:b4:b7:5e:b9:
7a:e9:75:4d:24:3f:1c:0d:50:29:bd:a7:ee:0e:8a:
f0:52:bf:cc:ee:e3:fb:4e:55:70:39:79:82:f1:08:
28:8c:8b:b0:6f:1e:93:52:ae:90:6a:58:f5:89:9a:
03:1d:8b:19:78:61:70:27:d0:a7:19:ea:25:5d:60:
6e:e5:71:3b:73:16:4c:74:32:9a:a2:cb:b6:89:3c:
c1:c8:21:47:05:81:fc:a6:7c:a7:b8:61:88:ff:e0:
eb:36:26:de:ba:d9:55:64:a5:a1:f8:21:24:47:39:
f6:b1:55:73:56:38:5a:cc:f6:fd:0e:bd:62:bd:e5:
65:b2:93:13:7f:49:a9:75:66:17:bc:c2:ce:ee:3a:
92:06:84:b4:1e:32:d0:cc:5f:c1:6c:50:3b:35:2a:
db:b4:4c:9c:fd:ea:45:ad:53:02:04:06:b0:22:b4:
cf:37:14:a8:63:9e:4b:ad:66:a2:f8:24:f8:2c:2e:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:3D:D6:D0:9D:F8:E5:5B:C6:CE:2E:65:D3:32:86:03:BA:B3:5D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eS091tCd-OVbxs4uZdMyhgO6s10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04a::/48
Signature Algorithm: sha256WithRSAEncryption
99:80:0d:e0:f7:bb:5d:65:19:f7:e2:4a:15:e7:c6:c3:fc:73:
2f:cc:e0:bf:bc:fd:10:c0:6d:d0:71:5b:39:c2:12:37:0e:86:
e1:6f:d7:1e:b8:23:ac:85:9e:43:32:d3:20:41:50:df:1a:e4:
a2:1d:b1:24:8f:fa:3f:20:42:3c:45:b7:8b:66:c6:00:10:3d:
9e:a8:70:6b:86:43:43:6f:f1:6b:2a:b3:a3:78:a7:8b:0a:67:
98:5a:61:c6:42:48:b4:26:d0:df:c4:67:37:4c:17:03:9f:a8:
88:96:f1:68:23:b8:d5:23:84:3a:51:25:ee:10:09:73:1c:f4:
f4:18:4c:07:23:e0:80:e8:ed:d1:6a:69:e9:4f:0d:47:66:1d:
b7:15:c2:b5:31:aa:15:0d:8d:96:0e:88:77:58:d4:1b:da:15:
9a:89:4f:be:07:24:b3:6a:4b:e3:96:0b:08:be:b0:6c:5b:72:
2c:3e:c3:cd:81:4a:6d:41:e1:d3:fe:b8:3b:69:7a:65:98:cd:
a9:7c:98:8d:c9:c9:1e:95:c2:98:ee:85:a8:13:41:b2:80:ca:
a7:87:05:8d:64:f5:12:9c:f2:da:76:30:08:e2:b1:d9:4f:92:
fd:2c:d0:03:14:18:31:b9:72:4f:bd:0d:f0:2e:62:ab:ac:e4:
69:61:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client