Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/CLHhdOeMNXgExKSCdON9sy75K9Y.roa
File: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (raw, json)
Hash identifier: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=
Subject key identifier: 08:B1:E1:74:E7:8C:35:78:04:C4:A4:82:74:E3:7D:B3:2E:F9:2B:D6
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 01954303E2A3345EC76C24179F930410F951
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/CLHhdOeMNXgExKSCdON9sy75K9Y.roa
Signing time: Wed 26 Feb 2025 16:08:02 +0000
ROA not before: Wed 26 Feb 2025 16:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:aec3:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:03:e2:a3:34:5e:c7:6c:24:17:9f:93:04:10:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Feb 26 16:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b1e174e78c357804c4a48274e37db32ef92bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:99:7d:f4:ef:c5:fe:ef:bb:3e:3b:0a:75:
d7:72:3e:ef:84:7b:99:b6:eb:36:e8:e7:47:20:0c:
b3:47:09:1b:51:c5:0b:2b:28:8b:3d:44:d8:1c:bc:
3b:2f:e6:9b:bc:84:b3:24:5b:5a:55:7b:3b:e4:96:
b2:2e:fd:4d:5a:c0:82:b9:45:0b:7d:47:98:6c:77:
79:67:97:3b:06:79:02:62:14:c0:ad:65:be:7e:0f:
69:45:a9:61:22:46:db:c8:8a:7d:0c:87:95:c9:ee:
6d:36:d4:c9:78:a0:b5:60:4a:1f:bf:54:1e:ad:9c:
7a:dd:58:6e:d9:ea:26:e4:c4:44:d4:a4:10:01:7f:
89:f8:89:ca:65:f7:63:0e:35:31:ee:19:cd:0b:a0:
1f:6c:f5:19:8e:28:0f:15:62:40:bd:97:8b:71:db:
ed:00:2e:1f:33:6e:dc:61:b6:9c:fc:8d:78:fb:75:
f2:f3:67:c1:11:e6:24:bd:37:2c:a0:a8:01:fa:dd:
46:f7:16:08:7a:e8:a1:ca:b0:45:53:a2:2c:fc:0a:
19:ef:89:17:b7:1b:32:88:fe:a0:c4:35:de:27:48:
85:45:48:90:58:02:30:93:3b:af:c6:fa:13:42:36:
79:e3:78:cf:8b:cf:c7:26:9f:18:7f:ec:29:26:c6:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:E1:74:E7:8C:35:78:04:C4:A4:82:74:E3:7D:B3:2E:F9:2B:D6
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/CLHhdOeMNXgExKSCdON9sy75K9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:aec3:100::/40
Signature Algorithm: sha256WithRSAEncryption
58:b2:5c:c9:31:45:07:a1:62:b2:cb:fd:86:ce:7a:e7:cf:11:
92:5d:74:ec:23:92:06:2c:4b:41:b5:2b:b6:05:a5:05:08:f2:
e9:cd:7a:e6:e6:96:7b:d2:d3:6d:6a:8f:ca:c3:9f:99:69:8b:
db:c6:db:ab:17:24:79:5f:d6:ad:29:4c:83:ac:34:76:f8:0b:
fa:7c:dc:d4:ad:7a:fe:14:23:15:34:98:c5:2b:6a:b7:75:ed:
cd:95:1d:49:26:90:71:4b:2b:7f:b4:44:b3:9c:af:42:f4:4c:
97:b1:22:7f:6e:dd:b5:f6:ab:6f:e3:5b:2f:83:d6:52:6d:14:
02:cb:b8:b3:3b:87:47:28:06:ea:bd:71:f4:3c:84:a0:9a:2a:
fc:7c:84:46:a1:4a:bd:30:87:40:9a:44:a4:3c:70:9a:e4:56:
e4:90:d9:78:b0:13:4b:fd:2c:de:ea:22:80:7c:f8:64:3a:b9:
81:b8:84:d6:4d:0d:a5:73:ba:c1:3c:fd:b0:6f:77:33:e7:10:
63:78:13:33:3f:13:61:66:72:2e:74:75:d4:74:36:9f:ed:06:
56:3a:e5:96:4a:3d:13:3b:4f:db:fe:8f:d6:65:09:f9:55:b2:
e6:90:38:88:9e:16:c9:16:ab:10:d7:27:97:57:b9:c9:ce:54:
f6:fb:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:06 2025 by rpki-client