Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/7pztvUDezwt3ZSHLohSTcy0jFYM.roa
File: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (raw, json)
Hash identifier: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=
Subject key identifier: EE:9C:ED:BD:40:DE:CF:0B:77:65:21:CB:A2:14:93:73:2D:23:15:83
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 019427B3BDBA892A79D9C3AF0485A6EA4C9F
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/7pztvUDezwt3ZSHLohSTcy0jFYM.roa
Signing time: Thu 02 Jan 2025 15:47:58 +0000
ROA not before: Thu 02 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211238
IP address blocks: 2a02:6ea0:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:bd:ba:89:2a:79:d9:c3:af:04:85:a6:ea:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jan 2 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee9cedbd40decf0b776521cba21493732d231583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:3b:43:94:21:4c:36:a0:74:3c:fc:b6:e2:
16:fd:8d:d2:3c:4c:82:01:89:11:33:f3:dc:ca:ea:
73:ea:60:12:91:c3:f3:b3:18:f7:6c:78:54:24:18:
db:90:3e:a0:3e:19:b4:78:a0:db:78:a6:67:30:c3:
ef:05:be:b9:12:1a:c0:bd:f6:ea:bd:07:fd:68:9c:
a2:2d:3c:4e:8b:14:2a:56:cf:53:2c:4b:00:3d:03:
55:51:11:ba:b9:be:d8:75:3d:2a:69:93:e2:b7:bd:
3a:b7:52:2d:f4:17:ae:4c:f1:91:60:47:09:72:90:
30:d8:18:cf:65:10:11:fc:7d:c9:27:63:53:c1:fb:
1b:1b:13:fb:f8:cf:39:f2:d8:ba:85:34:b6:e8:a6:
2a:b7:9f:20:a1:af:56:85:07:23:22:64:55:6b:a0:
41:b3:d9:bd:2f:03:fe:67:69:e4:f8:be:f2:31:3a:
15:f3:f4:b4:a0:b2:bc:b9:3e:43:12:55:3b:7d:c4:
1d:d6:ee:d7:86:7b:fe:e8:a1:83:db:54:b9:26:df:
7e:d1:54:e0:a4:5a:4b:79:81:c4:b5:f4:4e:b4:f6:
e1:54:9e:b8:86:f3:bb:2b:0d:fd:89:88:d7:e0:51:
12:bd:d6:e1:68:bc:9a:30:89:df:88:1d:c8:1f:42:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:ED:BD:40:DE:CF:0B:77:65:21:CB:A2:14:93:73:2D:23:15:83
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/7pztvUDezwt3ZSHLohSTcy0jFYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6ea0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
39:b9:eb:65:ac:b1:38:17:6f:a5:75:9d:d6:2e:80:78:49:96:
f6:cd:ff:9e:67:cb:fd:b2:ca:aa:57:7a:52:48:17:5e:9c:5e:
68:3c:3c:fd:e6:39:dc:b3:54:84:ce:21:f9:76:2d:08:69:cf:
5b:6c:ac:cd:80:2b:3e:fc:61:ca:c1:23:c4:e2:2a:15:09:c4:
b7:82:41:14:77:cb:df:a6:9a:7c:9f:c0:b8:30:22:4f:fc:be:
0e:e2:a0:e6:32:08:6a:87:d6:86:fa:78:0c:2f:e4:de:18:e9:
42:96:fc:c9:c0:8f:c8:b9:0b:d6:ee:0a:19:27:d4:32:cf:16:
a9:51:82:7f:da:5b:06:b5:7f:f7:9e:f1:61:68:4d:66:a2:0b:
f1:56:88:87:73:eb:8b:f3:27:5d:27:ce:3f:ca:83:5d:19:82:
a5:26:8d:2e:27:09:db:51:b9:5a:d9:8d:ca:ee:cd:d5:8c:63:
2b:ed:a1:1d:0b:26:81:7b:90:2f:32:a6:45:dd:dd:5f:d3:61:
ca:1b:1e:b0:c0:26:18:2c:87:f4:34:9b:9f:d8:46:d1:77:16:
44:78:a6:3e:8b:b5:98:47:ff:65:05:62:8b:b0:d5:20:51:94:
d4:b2:57:75:65:ac:65:4c:66:fa:94:29:4c:94:d0:04:d6:03:
f5:5c:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:24 2025 by rpki-client