Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa
File: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (raw, json)
Hash identifier: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=
Subject key identifier: 8E:37:68:69:96:79:67:44:CB:39:80:44:62:84:EB:24:5E:69:93:C8
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B26047FBE3EF1621705BE8F3587162
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11831
IP address blocks: 2a11:840:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:60:47:fb:e3:ef:16:21:70:5b:e8:f3:58:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e37686996796744cb3980446284eb245e6993c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:97:ac:2b:1d:3f:a7:1f:18:c5:c5:d0:20:
d8:44:fb:bc:ef:b6:de:f6:28:75:ee:09:72:ca:cc:
0c:05:6c:4c:55:64:23:d9:4e:a1:a4:ae:1f:90:7f:
8d:88:05:4b:a3:cb:e4:19:7f:3e:4b:ac:83:cb:67:
36:fb:4c:3f:79:05:48:11:db:89:06:a7:93:a0:33:
0a:f1:d2:e6:f7:cf:15:1a:95:34:0e:35:9d:0d:cf:
61:3c:64:4f:80:36:bf:4a:49:0b:22:69:83:ff:13:
6c:59:06:b1:a9:65:4d:7f:c2:c1:db:13:ce:65:90:
a7:7c:3d:fe:9d:75:52:50:18:52:38:46:58:83:2c:
79:f7:26:92:aa:77:b8:9c:8b:54:68:18:7f:65:a7:
d9:a5:e9:d6:26:32:18:5c:2e:c4:08:b5:d5:97:cc:
b0:ce:10:98:a6:bb:7c:34:61:62:5b:a4:71:73:4d:
df:7d:8c:b1:4d:a9:8a:9c:1b:89:c8:a5:e4:e1:51:
d0:d2:fd:27:e1:42:06:dd:26:07:5a:d8:d2:4f:75:
11:d8:ed:87:d6:7c:4d:55:b2:e0:9c:84:0f:25:22:
c8:54:50:49:ec:f4:3f:c9:8d:88:f6:a2:3a:0f:34:
1f:72:d1:52:be:e7:f3:a6:b4:b5:d6:4b:d5:4f:c0:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:68:69:96:79:67:44:CB:39:80:44:62:84:EB:24:5E:69:93:C8
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:31::/48
Signature Algorithm: sha256WithRSAEncryption
87:df:c8:aa:91:be:81:14:d0:30:75:9d:61:6a:72:72:b5:a0:
60:80:98:bc:29:05:b6:fb:f5:0b:b4:95:74:41:48:eb:6e:4e:
27:8b:4e:b4:31:75:e9:9f:83:21:bb:96:23:56:d1:21:14:24:
4d:f8:24:ae:70:ff:9c:00:1b:51:f6:26:2d:9a:74:d9:fe:c9:
7a:fe:84:f7:b0:7e:c4:60:4f:97:51:f4:b4:13:c8:ea:2c:0f:
bc:0f:5b:8a:5a:a8:0e:7a:33:ff:1c:3f:22:e6:2f:d1:c0:df:
1e:4a:cb:f6:10:56:0c:a7:c7:2f:b7:ef:7c:82:b2:b9:1d:b7:
7c:e1:3f:d8:34:cb:62:7e:de:55:6c:13:bb:23:5a:a9:5f:51:
02:41:b5:4c:10:85:69:4e:81:c3:ff:03:d4:58:67:f5:c4:78:
2a:0e:5e:a6:9e:76:05:7a:be:1b:a3:19:b0:3c:7a:dc:c0:05:
9a:72:b5:b9:38:21:87:ac:c3:ca:22:5c:13:15:59:0b:76:61:
ee:18:90:cd:db:1d:f6:79:6d:70:b8:05:e2:f9:b3:61:8b:94:
52:06:fa:85:d4:e0:d7:ce:43:b0:bd:a3:3d:38:d0:4d:3a:78:
f7:d8:d5:35:f5:de:d7:c1:d3:ff:45:9c:04:84:c4:e3:3f:51:
69:73:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:01 2025 by rpki-client