Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa
File: 7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa (raw, json)
Hash identifier: KZCQEP0YkF5QzLwmTPvo8FIWL4NpA8fHCUmTzo7LmG0=
Subject key identifier: ED:01:A5:E4:00:1E:14:2D:C1:62:23:27:86:5F:4C:E9:9D:FB:9A:08
Certificate issuer: /CN=e93114001872fabc939db6bedc1e6cd691462117
Certificate serial: 01856E264D0FEA5B31283AB3142B25E43A85
Authority key identifier: E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa
Signing time: Sun 01 Jan 2023 16:24:41 +0000
ROA not before: Sun 01 Jan 2023 16:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207901
IP address blocks: 2a0f:5740::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:4d:0f:ea:5b:31:28:3a:b3:14:2b:25:e4:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93114001872fabc939db6bedc1e6cd691462117
Validity
Not Before: Jan 1 16:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed01a5e4001e142dc1622327865f4ce99dfb9a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:d0:52:02:e6:7a:1e:8d:40:cd:80:d5:d6:
7c:c3:54:9f:f5:90:16:06:1b:4d:6d:e0:1d:d5:2c:
61:0e:37:35:7a:16:34:bf:a7:23:4b:a4:f8:85:d3:
4b:64:8e:42:ad:63:2b:51:ef:2a:d0:d1:d3:a0:b7:
70:9e:a1:33:00:c3:f5:9f:0c:c2:3a:3e:6c:91:ce:
e8:1a:4b:84:1e:e7:8f:c7:25:47:c6:5b:d2:d2:5b:
0d:4c:f4:8f:19:87:db:c7:44:f6:9a:c4:ba:be:3b:
c4:1b:23:46:f4:72:de:3f:c5:f9:e4:2a:67:ea:5d:
21:af:fb:5a:e0:6b:f6:5c:8c:e4:eb:76:b9:55:9d:
18:81:d3:28:a0:1a:84:16:8a:ba:04:ce:f1:ee:c7:
f0:c9:83:91:ff:58:a4:3c:5d:04:e7:b7:0a:46:16:
5b:25:1c:8d:0e:c5:ff:f7:94:0b:bc:2b:a2:4d:81:
4c:dc:3d:39:a3:3f:8d:e3:ae:43:b3:e8:04:be:72:
a8:7a:6d:0b:19:bf:e6:c4:eb:95:27:3d:d1:c4:d0:
bb:b7:2a:e5:b5:1d:18:cd:ad:5b:ca:bd:2c:f0:11:
a5:c7:be:12:10:30:66:59:05:ef:84:10:dd:31:ea:
b9:1f:01:4e:f7:4c:c1:13:23:26:43:bb:43:9d:23:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:A5:E4:00:1E:14:2D:C1:62:23:27:86:5F:4C:E9:9D:FB:9A:08
X509v3 Authority Key Identifier:
keyid:E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5740::/29
Signature Algorithm: sha256WithRSAEncryption
8f:c4:2e:ef:17:c8:0b:df:9e:e2:fa:ee:c9:11:55:04:34:c2:
3b:ca:4c:3c:30:57:ac:3e:8d:7b:81:53:83:15:33:6d:f1:70:
dc:e6:b3:b8:5b:57:de:20:94:21:ee:79:49:71:c5:70:a0:38:
70:19:62:c7:bf:a5:e3:d7:49:03:7b:73:e8:16:bc:5d:b3:18:
9a:92:27:0b:87:36:01:4c:43:0b:c5:83:dc:9d:0c:08:6e:dc:
ae:cb:c4:bf:37:ca:86:25:a9:0c:34:de:4b:0e:ee:83:04:d7:
2c:1e:19:1d:60:eb:71:fe:45:3e:0a:8b:29:16:4c:1b:94:75:
60:8b:dc:5c:02:56:9b:ee:9b:bc:79:61:bd:f4:4a:26:3a:6f:
dd:56:db:3a:3a:89:8c:6b:63:77:00:62:4f:f5:a5:be:10:a7:
19:96:d9:96:01:42:22:4c:1b:14:45:c3:ca:c9:3c:4d:c1:63:
74:38:b5:89:43:d0:2c:03:1b:28:98:f5:77:51:58:cb:d8:1e:
97:4e:e5:ee:b5:5e:5b:2d:3d:b8:62:4f:d3:33:27:e9:8c:70:
c7:1c:e7:00:af:5c:37:6a:d2:df:3f:61:ca:de:3d:aa:5c:61:
2a:56:22:71:95:39:10:1e:c5:9a:67:99:39:18:01:a8:a8:b0:
5d:2f:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:47 2025 by rpki-client