Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/J_D_McsIAYG4K4qwpFvyYN6VTDA.roa
File: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (raw, json)
Hash identifier: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=
Subject key identifier: 27:F0:FF:31:CB:08:01:81:B8:2B:8A:B0:A4:5B:F2:60:DE:95:4C:30
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 019421B24C94A78EC21F625469705B61A949
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/J_D_McsIAYG4K4qwpFvyYN6VTDA.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56367
IP address blocks: 2a13:e2c0:fed5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:94:a7:8e:c2:1f:62:54:69:70:5b:61:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27f0ff31cb080181b82b8ab0a45bf260de954c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:bb:85:f5:08:78:42:a5:2c:1a:e3:df:27:
1a:05:61:c4:e0:cc:96:b7:de:ab:30:b3:37:38:16:
ae:be:c7:83:18:b6:7d:d3:b2:29:f8:40:b7:ae:e6:
ad:bc:41:24:27:38:25:01:bc:1a:b1:07:d5:42:24:
25:ab:02:93:3f:29:01:84:1e:65:c9:f3:70:cc:6b:
7b:73:30:c8:92:d1:91:a3:aa:71:9d:ad:82:4f:28:
40:c3:49:31:ff:ce:65:33:5d:4f:96:a4:ff:5b:d6:
2d:99:fa:21:ee:c7:d2:0b:6d:e3:7c:cc:be:ca:16:
c1:fe:f8:75:41:32:32:ea:a7:30:74:e6:0e:62:4d:
32:f0:c5:67:7c:dd:ea:4d:74:1f:93:f8:47:46:d3:
8d:06:6e:b7:78:cf:3f:01:66:fc:2f:b3:2f:86:b7:
38:d4:a5:44:03:65:2a:c8:e9:7d:2f:0e:29:2f:de:
3e:ac:39:78:32:76:fd:90:79:ff:42:f2:53:26:4d:
14:b1:72:f5:2b:70:0d:ae:bc:a5:4f:50:07:89:c3:
8d:1f:01:00:1f:91:8b:26:09:04:20:7c:fd:90:e4:
0e:d5:9c:04:18:c0:03:19:db:76:6f:cd:1d:2e:3a:
79:1b:80:da:0e:a4:4b:b7:a6:24:59:d8:0a:a0:ae:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:FF:31:CB:08:01:81:B8:2B:8A:B0:A4:5B:F2:60:DE:95:4C:30
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/J_D_McsIAYG4K4qwpFvyYN6VTDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e2c0:fed5::/48
Signature Algorithm: sha256WithRSAEncryption
7f:97:09:97:99:ff:81:c5:98:e8:69:10:a1:8b:52:d1:32:f8:
08:ac:7c:15:49:4d:58:0a:02:b0:72:f9:90:d0:d0:31:19:e8:
2f:3c:38:5b:fb:f1:8b:47:5b:3c:f9:f4:42:08:23:be:ae:dc:
35:3e:25:22:84:f4:45:90:9a:5a:45:c5:18:2d:34:eb:0e:5b:
77:d4:76:2a:bc:45:88:1d:9e:bf:d1:c1:75:d0:ba:ab:4b:f1:
d7:d0:fc:07:cb:48:53:ca:5e:b7:90:07:c0:5c:89:99:46:27:
f2:22:7d:9e:68:4c:81:86:2f:43:ad:87:dd:4e:f4:bb:02:18:
a3:49:8d:b1:d0:71:62:dc:62:3a:dc:4e:ed:06:74:1f:94:95:
57:56:db:63:b9:5f:66:91:38:49:8f:8f:b4:9b:85:5f:af:22:
ee:01:73:a2:1a:7b:67:ba:51:7f:16:04:9b:6b:d5:dc:6f:6b:
f9:8e:4c:5f:2c:0b:15:3c:e7:78:ac:eb:65:27:bb:a6:03:64:
71:cd:96:10:bf:5b:6f:3f:8c:55:51:63:24:8b:53:40:91:4d:
04:61:5d:82:f9:4a:ce:7e:86:5f:95:9c:11:6b:bd:1c:df:6b:
c8:5c:22:22:2d:cb:62:64:5b:37:71:78:ae:d8:16:27:b9:18:
ed:18:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:11:34 2025 by rpki-client