Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/99na7wV0wOq68_7vIbCrL9gfxjs.roa
File: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (raw, json)
Hash identifier: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=
Subject key identifier: F7:D9:DA:EF:05:74:C0:EA:BA:F3:FE:EF:21:B0:AB:2F:D8:1F:C6:3B
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01946133C99C852C02A94F093E7FFFC395F4
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/99na7wV0wOq68_7vIbCrL9gfxjs.roa
Signing time: Mon 13 Jan 2025 19:46:11 +0000
ROA not before: Mon 13 Jan 2025 19:46:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395747
IP address blocks: 2a06:98c0:1c00::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0b::/48 maxlen: 48
2a06:98c0:1c4a::/48 maxlen: 48
2a06:98c0:1c59::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:33:c9:9c:85:2c:02:a9:4f:09:3e:7f:ff:c3:95:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 13 19:46:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7d9daef0574c0eabaf3feef21b0ab2fd81fc63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:55:b5:e6:9c:f9:82:c8:b1:f1:63:f3:ab:
1d:75:81:4c:f2:c4:52:6c:aa:41:66:9a:6c:21:f7:
a3:f2:55:9a:91:18:29:dc:9c:fa:24:1b:c2:4e:ae:
e4:cb:df:e8:a3:b6:a5:63:7a:bb:29:76:3e:06:4e:
79:41:a5:76:27:3d:02:68:a3:c2:b9:69:37:5a:df:
66:0a:be:1c:45:f0:0a:3b:24:af:53:87:e5:af:92:
4d:85:4a:4d:4c:6e:20:51:e2:49:d6:05:d5:7f:98:
4e:b2:48:69:1b:8e:2a:4c:20:70:46:a2:f8:82:26:
c0:f2:d5:9e:bf:f7:6a:96:0a:0a:31:ff:14:36:ad:
d1:82:4d:10:69:cb:09:e3:36:1a:f7:cf:f3:0e:ac:
ec:f7:be:65:63:9b:80:2d:97:04:3d:2d:72:2f:cf:
74:c8:31:2c:13:f7:12:7c:52:8f:d4:b6:76:84:bb:
0a:2c:ef:6f:63:b8:5a:a4:7f:d1:fa:d5:38:a5:99:
81:cb:a0:72:fe:43:6b:1e:c8:6a:e5:ce:a1:d1:d5:
90:18:d1:08:b8:52:02:fc:d1:6d:c9:c5:39:6c:b5:
71:a7:aa:9f:2c:ff:83:c1:6e:0e:a0:18:31:49:fe:
9a:17:80:e5:e6:2d:8f:9e:0b:1c:65:10:b0:89:5a:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:DA:EF:05:74:C0:EA:BA:F3:FE:EF:21:B0:AB:2F:D8:1F:C6:3B
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/99na7wV0wOq68_7vIbCrL9gfxjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1c00::/47
2a06:98c0:1c0b::/48
2a06:98c0:1c4a::/48
2a06:98c0:1c59::/48
Signature Algorithm: sha256WithRSAEncryption
1a:18:52:51:0b:90:9f:d5:fd:e8:7a:8f:0d:fc:00:51:af:e9:
61:16:f7:36:05:4d:28:12:8e:b3:e6:da:8d:e2:bb:5a:c2:cb:
40:9a:9c:89:41:73:1d:19:76:48:38:0a:45:85:0f:24:56:4b:
e5:a6:9b:8f:d8:20:2a:85:1c:d3:4e:30:20:7a:51:4b:79:ac:
3b:53:6c:a3:e8:98:c0:72:b9:28:8c:0b:c1:02:52:7c:2d:ac:
03:11:92:82:80:66:40:e4:7d:26:8b:30:a2:28:84:a8:0e:95:
68:b3:70:de:67:47:e0:d2:65:7e:85:d1:26:91:6b:7e:69:83:
b3:4d:4c:13:c6:0c:b2:5d:53:42:2b:69:2d:d2:58:c0:9a:e5:
c3:1b:94:ea:76:ec:4e:39:11:0c:60:29:ad:2c:07:9d:14:64:
51:6f:6b:06:c0:3a:af:e0:7b:86:96:b1:b2:5e:90:e3:44:ba:
2e:32:97:d7:23:39:b0:76:3e:99:d8:8c:aa:bd:f2:eb:28:dd:
b8:f8:10:7b:33:dd:ec:5e:70:95:f9:ce:ac:63:a8:6e:c0:9a:
2c:47:84:21:b0:65:fe:7e:c3:68:6d:56:f5:e9:8b:92:34:c2:
a0:75:52:ce:aa:bf:3c:80:57:ad:c9:19:ef:0e:b5:d3:db:d2:
d9:d5:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:28 2025 by rpki-client