Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/B9dwnbBbiJenj05UDjyUy_TzXDg.roa
File: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (raw, json)
Hash identifier: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=
Subject key identifier: 07:D7:70:9D:B0:5B:88:97:A7:8F:4E:54:0E:3C:94:CB:F4:F3:5C:38
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5D92187960FBB64ED432C81830C7
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/B9dwnbBbiJenj05UDjyUy_TzXDg.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203564
IP address blocks: 2a0a:d6c0:2035::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5d:92:18:79:60:fb:b6:4e:d4:32:c8:18:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d7709db05b8897a78f4e540e3c94cbf4f35c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:1c:45:9e:96:f2:ea:c7:61:c1:b5:99:9d:
2b:0a:34:b1:81:7d:23:2c:fd:1e:a6:32:40:89:39:
d7:9c:1b:d8:c9:a5:b8:e9:11:5f:d3:db:70:a4:79:
ec:00:8e:1a:bb:79:2f:06:8e:21:35:fb:da:8d:6d:
7e:cd:3f:f8:fd:ab:d6:e0:bc:27:7a:3c:f5:92:35:
bf:77:d3:1e:2c:cc:16:b1:c8:8a:e3:74:4d:42:59:
b2:a3:d6:40:42:ca:92:50:77:cd:20:18:6d:aa:bb:
8b:9f:54:80:f5:ed:01:9c:56:cf:6c:f4:38:31:f5:
74:61:99:51:8e:a6:33:8e:41:69:0f:91:0e:6c:0c:
93:e8:0f:f2:39:d6:17:f4:60:7c:52:42:6e:f7:9d:
38:22:2d:e9:b8:89:cb:6c:26:f2:63:4e:9b:6f:35:
3a:c2:16:ea:de:7f:b9:a8:23:45:59:88:83:60:8a:
e9:74:7f:5f:03:ff:b0:f3:15:a4:aa:8c:06:c7:fe:
0c:06:3d:02:43:da:b8:e4:15:7a:7b:ea:92:00:d7:
b3:aa:aa:5d:aa:a7:64:ac:a3:6f:59:26:1b:16:08:
ef:3f:aa:64:35:05:3b:7f:38:3c:24:b3:21:30:79:
3c:b9:d4:38:bd:79:12:26:b9:76:c1:57:45:5f:7a:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:70:9D:B0:5B:88:97:A7:8F:4E:54:0E:3C:94:CB:F4:F3:5C:38
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/B9dwnbBbiJenj05UDjyUy_TzXDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:2035::/48
Signature Algorithm: sha256WithRSAEncryption
7f:30:83:ab:30:17:b3:44:90:8c:a4:a9:4c:69:af:f3:e9:97:
e6:9d:b1:b8:82:5f:a7:0d:96:7b:85:58:a1:1a:dd:9e:b9:a1:
e4:84:34:12:b8:d3:5e:a7:29:b4:d2:bc:4c:aa:07:55:20:64:
10:b3:24:37:96:26:88:64:ec:91:82:ac:fa:9e:8d:f5:0e:07:
15:54:a1:78:e9:0b:92:a2:4e:b2:91:47:25:1d:3d:70:75:8c:
2f:03:c3:e9:eb:61:d8:17:d1:d6:fa:6b:7c:0b:8f:03:f2:db:
8e:5c:d8:ee:6f:46:60:e8:30:fa:10:1a:de:cc:39:25:ff:83:
89:9c:69:36:65:0e:95:91:0a:a4:ee:2f:42:c8:d8:85:6d:86:
0b:32:c0:f0:ed:cb:10:1f:c3:4b:a1:b6:22:23:89:52:3f:36:
51:1d:45:b8:6b:2a:04:cc:fc:c8:2e:c4:a7:04:36:33:27:bf:
45:d6:f9:e2:ad:c8:b2:e5:b1:ba:99:6d:a5:d5:5a:73:20:46:
fa:2e:ec:99:7f:42:c9:9c:d2:b4:7b:58:fc:90:61:e0:67:0e:
89:56:b3:bd:32:8f:e2:91:35:00:ef:1a:06:a2:58:c5:cb:9b:
dc:83:5d:f9:50:85:17:b2:c6:4c:a5:7b:96:d1:f3:c5:e6:5b:
be:76:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:06 2025 by rpki-client