Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/_6ucnx77KQFalvj5yEE2wp5osls.roa
File: _6ucnx77KQFalvj5yEE2wp5osls.roa (raw, json)
Hash identifier: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=
Subject key identifier: FF:AB:9C:9F:1E:FB:29:01:5A:96:F8:F9:C8:41:36:C2:9E:68:B2:5B
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5E77E2A447C0FEF520FA5AFD5762
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/_6ucnx77KQFalvj5yEE2wp5osls.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210596
IP address blocks: 2a0a:d6c0:9145::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:77:e2:a4:47:c0:fe:f5:20:fa:5a:fd:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffab9c9f1efb29015a96f8f9c84136c29e68b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:e8:e6:7e:8a:49:f4:75:47:51:ee:54:64:
62:59:6d:0d:53:04:b8:84:82:5f:5f:cb:13:cf:b0:
50:5e:1b:e9:a5:28:c3:bf:5c:d9:cd:60:c8:2d:06:
b2:82:f5:eb:49:b8:cd:1d:1c:67:d4:73:1b:8c:fc:
29:ee:1f:70:f4:4c:08:4d:81:cf:90:3f:ac:27:b0:
de:0d:4e:f3:69:d7:d2:38:f9:bd:67:9e:ee:e1:f0:
72:ed:a7:89:52:5f:4f:a4:18:ec:d7:d1:74:e4:49:
f3:bb:15:51:50:02:3c:68:b5:6d:82:03:16:fc:fb:
e1:58:4c:bb:09:6c:39:ce:50:4b:29:87:f2:7e:c1:
36:47:02:bb:5a:40:ab:5a:b3:d6:49:80:c4:a0:4a:
a0:80:85:a1:0f:b1:bf:f5:01:1f:83:84:c5:38:0a:
ac:25:f6:e6:4d:37:87:cc:ec:94:79:29:67:de:4a:
53:a9:78:e1:0a:f0:45:a2:75:c4:16:8e:bb:1d:db:
90:eb:5f:eb:ef:e9:52:80:f4:ea:b3:f4:88:55:48:
fa:c4:b8:02:8b:4c:7d:5f:c1:77:fe:4b:ec:59:2a:
e4:cb:2e:da:e4:7f:24:d6:8e:37:43:63:d6:68:84:
49:63:ad:df:00:6c:56:a5:e3:8c:d3:7b:8f:9d:26:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:9C:9F:1E:FB:29:01:5A:96:F8:F9:C8:41:36:C2:9E:68:B2:5B
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/_6ucnx77KQFalvj5yEE2wp5osls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:9145::/48
Signature Algorithm: sha256WithRSAEncryption
35:1a:49:66:cd:8f:9b:8a:df:12:54:16:06:3c:87:c7:2e:df:
9f:dd:ef:59:84:70:b6:35:df:90:50:05:75:eb:32:e0:07:b6:
1d:07:57:c3:16:68:6a:f0:52:7d:d5:ac:98:e4:29:f4:8f:a2:
83:93:34:1b:f0:04:29:83:28:e8:3e:3a:46:1d:dc:2f:cd:e3:
46:79:bb:b7:0f:9b:bb:87:04:65:da:8b:70:ef:9c:b9:61:a2:
8d:c0:a4:5f:0a:94:53:e1:24:96:25:cc:92:70:96:1e:62:e3:
ab:5d:ec:39:92:a9:84:39:2e:28:d3:33:2a:ba:06:79:19:a9:
a5:d1:a4:86:40:7d:c2:bb:33:1c:04:38:df:ff:69:76:e0:90:
29:29:50:0f:d9:63:0e:0a:62:18:3a:cf:64:41:e1:0c:3b:f5:
d5:89:64:d0:da:60:40:65:c3:e7:4d:b3:bd:56:71:82:51:73:
20:da:7f:44:bf:d6:03:9d:e6:9d:c9:85:ca:18:6e:39:d9:eb:
88:f9:8f:3f:9b:96:2e:18:36:e3:4e:59:c0:7f:cd:05:29:07:
f5:0d:79:b8:5a:50:b7:81:3c:8b:2a:77:d2:9d:6d:54:9e:64:
67:ee:35:ce:27:e5:38:a2:3a:31:92:c6:a1:e1:d5:80:58:fc:
d8:1f:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:25 2025 by rpki-client