Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RDHvnoN4Vm5QgdJz6lXslBn728k.roa
File: RDHvnoN4Vm5QgdJz6lXslBn728k.roa (raw, json)
Hash identifier: 5WXhwjjn7hulR9G0p2UVFM7dLg6iTIJnioLTBNy/yc8=
Subject key identifier: 44:31:EF:9E:83:78:56:6E:50:81:D2:73:EA:55:EC:94:19:FB:DB:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482846A32B2D5EB12E3BB3099A9EED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RDHvnoN4Vm5QgdJz6lXslBn728k.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139791
IP address blocks: 2a06:3600::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:28:46:a3:2b:2d:5e:b1:2e:3b:b3:09:9a:9e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4431ef9e8378566e5081d273ea55ec9419fbdbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:d8:2e:6a:cd:07:51:cd:eb:a7:cb:f8:48:
d2:15:3b:b3:0d:e1:ae:ac:cb:f2:05:07:09:b8:74:
78:c8:0c:e7:c0:c3:d0:d5:44:ce:9c:72:be:fd:8f:
17:3b:2b:cf:e9:c2:b1:08:eb:e3:9c:3d:34:66:84:
e6:5e:f2:f6:e5:bd:aa:6f:9e:41:51:48:26:a5:d6:
28:96:33:3a:2a:89:fa:f6:be:35:e1:77:34:78:77:
c1:f9:c5:b8:47:09:f1:26:8a:70:9e:b9:29:a3:6f:
5d:e5:93:27:4f:14:4c:fa:79:05:dc:31:ed:47:ea:
bf:a6:ba:80:23:e9:56:be:69:98:29:94:7b:0d:07:
db:57:65:98:87:6b:eb:c7:53:62:2d:b4:69:61:81:
bc:8e:23:7c:43:26:7a:29:8e:94:24:bd:04:f9:56:
c3:c9:8a:85:3c:d1:19:f7:68:2b:6a:36:8a:81:1d:
d2:5d:29:7a:31:26:8c:04:70:03:a9:0d:e2:d2:a1:
33:16:61:89:5f:26:ab:8d:ef:95:89:b3:a8:bb:53:
82:d1:d7:c2:08:3f:90:df:ee:12:ad:72:e6:e8:8d:
33:48:e3:ac:11:46:5c:c8:49:d4:54:97:c8:3d:28:
8e:2a:0f:e8:4e:66:f1:70:fa:b7:9b:1e:72:63:61:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:EF:9E:83:78:56:6E:50:81:D2:73:EA:55:EC:94:19:FB:DB:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RDHvnoN4Vm5QgdJz6lXslBn728k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3600::/29
Signature Algorithm: sha256WithRSAEncryption
99:dc:66:21:5a:89:a8:38:9d:d0:61:c0:e7:d8:f9:31:b8:74:
57:19:4f:c3:f3:2c:45:11:80:9d:59:0e:e7:7d:4c:8a:55:e3:
23:b7:cf:f5:6d:5e:62:5f:f0:a5:d4:8a:57:f2:17:ef:07:ec:
8e:07:ff:ad:4f:2a:a6:33:cf:bc:91:f4:fc:37:a6:ec:ff:08:
89:a3:85:d2:45:fd:8d:57:2b:6c:7f:4c:f9:6c:81:52:94:a8:
1c:7e:bf:1c:8e:9e:69:ba:3f:32:81:7c:dd:96:5a:ea:ec:8a:
54:1c:8c:10:a0:13:c1:33:6d:76:c8:b6:f2:cd:28:f0:23:8c:
89:4c:62:df:21:93:81:e5:f5:08:9d:ec:0f:1f:f6:e2:60:b2:
14:e8:96:4e:f3:9c:3e:98:29:19:60:dd:c7:c1:bf:0d:50:2e:
52:ca:16:39:02:1a:d0:ec:9f:37:83:18:f9:fb:5e:38:1b:cc:
04:b6:c1:89:6b:52:fc:87:51:b1:71:98:ed:df:ed:86:5f:e3:
8e:b9:fd:cb:64:ee:c0:7a:44:1c:d3:af:6b:2a:08:39:5f:51:
e3:8d:6b:f4:9f:15:2e:76:57:3b:2b:29:f2:84:31:20:ee:7b:
5a:5e:84:ac:87:cb:5d:11:20:a0:cf:e3:dd:7c:0c:a3:98:4d:
44:57:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:16:09 2025 by rpki-client