Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vJkTbj_xnSVVTTm0EK7hyXFlU48.roa
File: vJkTbj_xnSVVTTm0EK7hyXFlU48.roa (raw, json)
Hash identifier: +L0eyViDN8jvrn/s7GkF7lKEHgx50bnuEIxtvl3TvXo=
Subject key identifier: BC:99:13:6E:3F:F1:9D:25:55:4D:39:B4:10:AE:E1:C9:71:65:53:8F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEA5F48B704F4A321AA9A807B51FE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vJkTbj_xnSVVTTm0EK7hyXFlU48.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212705
IP address blocks: 2a0e:aa07:e019::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ea:5f:48:b7:04:f4:a3:21:aa:9a:80:7b:51:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc99136e3ff19d25554d39b410aee1c97165538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:26:a7:2e:a2:34:49:56:24:c2:ac:92:66:
15:7a:4b:a1:be:8d:7d:91:5e:5e:ee:9f:c5:eb:9b:
8b:95:f7:ca:58:10:90:3e:e5:ff:a2:ef:c7:85:6a:
05:cf:0c:34:7b:d4:9c:a6:3b:86:06:25:b4:2a:c0:
a9:c3:f2:51:3f:3a:92:db:97:b1:5e:c3:ec:32:f6:
0c:a5:cd:57:bc:bc:f4:5b:23:9e:cb:17:9a:99:a2:
4c:26:51:ff:1e:f8:1f:f5:a9:30:4e:df:7f:34:b2:
d7:44:1c:eb:1b:26:9f:48:f9:95:5b:2a:40:0c:da:
9c:d8:60:30:6c:e6:29:8c:7c:77:7c:fb:9a:73:35:
43:40:45:bf:b9:ab:84:ea:e0:6b:50:d3:30:aa:54:
69:f4:9d:e8:52:b3:28:de:42:50:e0:8b:71:c5:5b:
f9:31:83:41:c1:de:be:0d:1a:72:3a:86:8f:e9:51:
7c:6f:2a:e5:8d:6a:2e:e0:2a:46:ba:2a:b8:0e:ae:
e0:23:f8:9a:c4:fb:85:6c:12:93:ff:50:44:a4:62:
0d:33:43:ef:39:a8:9c:35:c2:7a:cb:29:63:30:a2:
3e:da:48:db:da:15:1c:26:67:56:72:d6:c1:83:ef:
b8:3b:ef:b6:05:6a:1f:1c:4a:87:27:97:08:2d:af:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:13:6E:3F:F1:9D:25:55:4D:39:B4:10:AE:E1:C9:71:65:53:8F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vJkTbj_xnSVVTTm0EK7hyXFlU48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e019::/48
Signature Algorithm: sha256WithRSAEncryption
26:e0:ef:ff:f1:ec:13:fa:d2:52:96:c3:17:4e:98:53:2c:d1:
11:67:16:ff:e7:b1:d9:39:21:4d:69:e6:71:56:89:e1:62:03:
e7:e5:25:d3:0b:6f:75:98:25:a6:0e:56:85:54:87:23:50:6c:
c1:03:00:b0:82:53:3a:17:43:cc:32:ac:44:23:76:77:d8:e5:
35:37:10:9b:75:e1:3e:14:59:5b:c1:c1:26:1e:c8:58:9e:46:
76:d0:4b:92:7b:6e:30:be:33:ac:ef:a8:28:a3:aa:a9:02:f4:
d9:4d:59:06:0c:24:19:b5:83:7b:18:9c:8e:ce:1e:7e:f7:7d:
2a:e8:1e:35:c6:aa:0f:4e:66:b6:0d:cc:57:ca:2f:b3:5f:e1:
23:d4:4f:38:9e:e0:4a:f0:8f:52:fd:a8:61:f1:1f:12:7e:a7:
d8:7d:39:d0:6f:28:fa:c7:a0:fe:f3:45:e1:98:4e:71:41:ab:
f4:41:72:a7:3e:93:d2:3d:31:91:3b:e7:f7:7b:5e:a1:a5:a0:
8d:49:15:49:19:a5:d7:46:50:cf:cf:cd:e0:09:70:01:b0:ea:
a1:bc:d0:19:64:87:93:fa:15:29:b3:7f:c8:7e:33:bd:d5:28:
a1:af:a3:0d:b2:81:83:b3:70:c2:1e:3c:36:26:8b:35:a7:08:
bd:b4:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client