Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J4eDOx5SJHSihuh2E2EdDHS1FZg.roa
File: J4eDOx5SJHSihuh2E2EdDHS1FZg.roa (raw, json)
Hash identifier: AX1DVLfXHqcPxw4MGiaVf7TNJa9XXou7rNBSUIsHkkI=
Subject key identifier: 27:87:83:3B:1E:52:24:74:A2:86:E8:76:13:61:1D:0C:74:B5:15:98
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 01942444FCA652D5A5911F1C7E0B0CFDDA6B
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J4eDOx5SJHSihuh2E2EdDHS1FZg.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205272
IP address blocks: 2a06:bcc0:6::/48 maxlen: 48
2a06:bcc0:7::/48 maxlen: 48
2a06:bcc0:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fc:a6:52:d5:a5:91:1f:1c:7e:0b:0c:fd:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2787833b1e522474a286e87613611d0c74b51598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:95:29:09:9e:30:7a:f8:6f:85:14:71:36:
2b:53:79:4f:7f:1b:6a:e8:fe:c9:16:f6:94:7a:66:
94:ae:17:c5:ab:90:90:08:fd:a8:d3:0e:8c:1d:87:
ae:73:eb:2e:90:57:35:fd:b9:4f:8b:97:00:b4:98:
3f:3b:86:7e:7d:b4:58:62:50:a2:67:4e:00:2d:5a:
8a:aa:a1:be:42:ec:23:df:9a:e0:da:86:52:3f:d7:
08:71:35:a2:96:ba:3f:70:4d:b0:b1:5b:02:dd:e1:
53:3c:61:39:57:86:e6:49:0c:08:10:25:e1:71:b9:
c6:d9:e2:c7:d9:60:fd:8b:cd:ad:9a:6e:6d:78:89:
eb:29:ad:64:ab:08:cc:af:99:7d:eb:f1:01:e3:4c:
05:72:73:b9:69:04:4f:29:d3:c3:f8:a6:15:b7:30:
4d:53:88:1c:7d:b6:71:e3:f0:a5:f7:12:da:45:5c:
b8:1c:92:95:d5:9e:b6:7e:0d:e1:d3:82:a5:bd:5c:
ee:f5:bb:8c:c2:3d:6e:2d:f4:e3:09:05:ac:40:c7:
a4:30:21:38:80:e2:30:be:25:d9:6e:77:cf:bd:22:
cb:f4:cf:bd:f7:cd:22:ad:e0:4b:c6:f8:9b:e7:19:
f9:52:f7:5e:da:e5:3f:df:0a:e5:fa:c3:82:ca:06:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:83:3B:1E:52:24:74:A2:86:E8:76:13:61:1D:0C:74:B5:15:98
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/J4eDOx5SJHSihuh2E2EdDHS1FZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:bcc0:6::-2a06:bcc0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:7d:2f:81:a3:e4:8a:f5:ec:83:aa:0d:16:9f:21:29:d5:01:
f8:42:28:21:b6:f2:29:31:34:da:d7:e3:03:e8:89:a7:4e:f1:
f7:e2:c7:6e:e1:ca:8e:8e:93:c4:e9:bf:bb:3c:18:36:58:64:
e4:b1:6b:eb:19:9c:69:b8:d2:82:0c:d9:29:b6:82:08:68:f0:
84:17:70:3a:ca:f7:90:8a:27:45:8b:11:aa:a9:86:d7:20:6f:
8d:3c:58:66:f7:20:4a:7b:cb:40:bf:a2:a3:20:02:9d:86:22:
87:f8:1a:14:70:c8:29:c1:ab:33:61:55:49:a4:a8:54:68:f8:
3f:b4:78:d7:b6:4e:82:34:24:45:b6:a3:71:85:3e:8d:49:1c:
05:5d:f1:2b:49:0f:68:86:41:d2:00:ec:59:3c:45:12:85:4f:
58:55:f0:ba:b6:80:b4:9f:b5:19:dc:5e:52:64:ce:d3:c2:60:
66:98:e9:26:b9:f1:c5:98:73:7f:53:c3:15:ed:9e:9e:11:3b:
2a:7a:51:c3:7b:c1:a4:b2:38:53:66:01:67:41:7a:fd:81:0d:
81:31:3e:42:94:0e:b0:31:ab:fb:54:f8:26:77:34:60:ba:c4:
ea:b2:85:52:ce:47:19:12:21:4e:46:c2:e6:ac:bb:bb:b8:57:
ca:64:7f:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:19 2025 by rpki-client