Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/m7d5O-mEzrcubvS3JW6tnbVNKd4.roa
File: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (raw, json)
Hash identifier: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=
Subject key identifier: 9B:B7:79:3B:E9:84:CE:B7:2E:6E:F4:B7:25:6E:AD:9D:B5:4D:29:DE
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 01942747D8635B75699350C014789502EBF6
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/m7d5O-mEzrcubvS3JW6tnbVNKd4.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:fd80:a03::/48 maxlen: 48
2a0e:fd80:a04::/48 maxlen: 48
2a0e:fd80:a05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d8:63:5b:75:69:93:50:c0:14:78:95:02:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb7793be984ceb72e6ef4b7256ead9db54d29de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:48:33:ba:8e:eb:29:e8:d1:b3:82:2b:3d:
70:c8:17:95:37:f4:da:27:23:75:c8:63:fc:ac:4b:
ed:f1:1b:0d:0b:04:ec:5b:82:ca:81:93:19:4f:15:
38:4b:65:44:6f:a6:d4:c8:01:c7:09:06:06:3c:83:
a2:bf:81:78:32:67:75:85:8f:44:85:37:dc:63:24:
95:13:df:7c:04:b5:85:8b:2a:bb:db:b9:ed:b5:2a:
f4:21:b9:4d:48:df:70:17:cd:40:64:63:f3:94:f9:
d7:21:75:15:9f:20:d8:37:1e:3d:ed:eb:0d:4d:1b:
3f:b5:e5:c6:56:9a:b0:4a:5f:b3:e6:53:09:56:b9:
44:e5:ab:3a:a0:fc:5d:f0:4f:87:e8:15:61:30:aa:
e5:1c:5e:58:20:01:62:34:e9:b6:47:93:e8:11:b8:
ae:38:13:4c:59:f9:dd:b7:47:fd:2a:24:e8:3a:09:
7d:4d:a9:23:1c:78:d9:21:bb:f3:bd:cc:4a:b6:51:
bd:cc:4e:86:20:85:d9:75:2a:4e:fe:97:c0:db:e2:
a2:c2:6f:94:b6:18:a3:b0:2f:3f:26:8a:4e:d1:8c:
8e:5e:57:fb:08:38:8b:22:4f:a3:9a:aa:ee:3c:18:
a7:dc:15:0c:67:25:91:20:d0:51:81:3e:fc:9f:a3:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:79:3B:E9:84:CE:B7:2E:6E:F4:B7:25:6E:AD:9D:B5:4D:29:DE
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/m7d5O-mEzrcubvS3JW6tnbVNKd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd80:a03::-2a0e:fd80:a05:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:b0:cc:68:3e:49:ff:fd:00:87:b9:5b:92:6e:0c:d5:22:6d:
89:f0:d9:09:92:20:70:44:20:35:47:79:2a:e2:59:5f:0b:62:
8f:70:1e:83:82:a2:ab:33:fd:14:7c:18:51:b2:56:f3:fe:b6:
f9:c9:8c:92:19:4d:f8:a9:f9:f2:8d:72:a1:c2:90:79:54:13:
9a:57:c8:05:9e:4c:57:80:01:91:55:3f:bc:9d:9e:8b:fa:30:
a9:78:68:b8:26:7b:66:89:98:60:c7:c1:0e:04:c5:84:04:88:
46:8e:96:5f:e4:6c:25:82:66:74:10:18:4a:f6:15:9f:92:54:
85:ea:2d:b3:ad:a8:06:02:82:33:99:39:9f:e7:5e:56:5f:e1:
f9:f8:a9:80:92:b6:ca:7b:73:93:46:e9:a6:e4:92:af:73:8e:
c2:4a:fd:b3:d2:b6:aa:1f:b9:83:39:07:fb:20:70:3e:c6:32:
ef:50:a1:c2:1a:44:41:a1:47:d5:65:03:85:91:9b:a9:35:ee:
c7:06:4c:f7:10:1d:19:7f:55:a7:b0:b0:b8:f4:c7:1e:b1:75:
2d:b9:59:cb:ce:40:33:75:82:c9:51:e2:27:89:0e:c9:c3:13:
dd:f1:90:f0:69:dc:17:4c:b0:68:68:1d:2c:53:b1:b4:34:a7:
de:86:52:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:20 2025 by rpki-client