Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r_K9aRDSTmrCI8K_nFX5q68qwMw.roa
File: r_K9aRDSTmrCI8K_nFX5q68qwMw.roa (raw, json)
Hash identifier: i6V01VKfF5bLbrm4oH26xunmnwu/EOStCSNVxRIaItg=
Subject key identifier: AF:F2:BD:69:10:D2:4E:6A:C2:23:C2:BF:9C:55:F9:AB:AF:2A:C0:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247E3C53A636AB2FF697D39C33CED4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r_K9aRDSTmrCI8K_nFX5q68qwMw.roa
Signing time: Thu 02 Jan 2025 17:51:07 +0000
ROA not before: Thu 02 Jan 2025 17:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44796
IP address blocks: 2a00:1728:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7e:3c:53:a6:36:ab:2f:f6:97:d3:9c:33:ce:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff2bd6910d24e6ac223c2bf9c55f9abaf2ac0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:89:b1:53:48:9d:d3:e6:58:09:2d:5c:9e:
e1:de:11:24:c5:c0:20:9f:5f:fd:da:7d:63:f8:aa:
b2:ee:4e:18:63:d0:65:e7:4f:6b:0c:b2:f3:25:b4:
b2:7b:98:88:cc:b1:43:77:dc:38:73:ad:67:ab:07:
2b:d2:ce:7c:71:04:3c:e7:76:4f:4d:e2:c6:fc:17:
70:66:5d:13:3b:ed:c5:19:92:bd:f1:a2:26:c2:a5:
c7:00:5c:ec:3c:3d:dd:7f:06:89:ea:38:de:2c:67:
2f:ab:17:4c:a9:11:9e:ec:ac:fd:29:3c:7e:03:a1:
e5:3e:33:57:d7:16:1a:03:52:64:ea:a2:d0:d4:40:
ec:c7:bb:84:11:30:42:73:61:73:df:36:b1:72:61:
40:01:59:e6:63:c1:12:d4:0d:d2:46:2b:62:48:ce:
c3:6b:5d:68:4d:25:3e:7a:e6:c2:85:db:77:87:92:
60:93:ab:92:74:f9:02:d6:45:84:e3:f4:3f:e5:05:
44:da:31:02:71:b5:a3:fe:bf:56:a1:71:68:8e:19:
3e:22:f1:71:dd:01:2e:d0:35:1d:14:c8:9b:e4:f8:
b6:6c:81:b9:10:36:1b:ce:d8:4f:4e:1b:b7:e7:70:
44:da:0b:7e:69:f2:a3:b8:ae:47:58:f1:00:42:9b:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:BD:69:10:D2:4E:6A:C2:23:C2:BF:9C:55:F9:AB:AF:2A:C0:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r_K9aRDSTmrCI8K_nFX5q68qwMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:1d::/48
Signature Algorithm: sha256WithRSAEncryption
a4:fc:43:d9:25:3c:ea:b7:23:ce:88:3b:00:79:a6:32:99:80:
e3:8c:d5:6c:bb:11:b2:3d:e8:98:f4:0d:b4:0d:bc:03:c5:2c:
17:b4:41:fc:48:90:c0:e3:52:6a:7d:13:90:f5:e4:db:a4:a1:
c5:dc:a0:66:f1:df:ca:11:e4:67:5a:3d:9a:19:00:52:5e:0a:
d3:33:ee:b2:54:7b:09:1d:83:f0:11:88:04:a7:8e:b8:7e:ef:
c0:e8:f3:de:f0:c1:be:b9:07:5b:33:ff:74:68:fc:e2:e8:b7:
82:3c:1a:ff:a5:40:5e:49:a7:8d:97:2e:a5:39:1d:75:ac:da:
f8:e5:e1:27:82:d2:98:68:5f:a6:51:7b:58:74:d1:37:b1:d7:
52:b0:7f:7a:ab:40:43:65:1b:2a:29:6a:6a:3f:75:dc:92:86:
7e:11:63:ee:80:ea:e1:f2:21:5d:16:b2:37:ae:3c:b5:14:2e:
14:ec:f6:2e:0d:3c:c6:56:17:92:e1:ad:38:ed:f8:9d:c1:34:
ad:91:2f:bd:72:bd:80:a5:71:24:20:e0:1d:ea:58:59:90:82:
a2:ac:09:44:8d:80:fc:0d:3a:fd:b2:5f:97:37:c7:d0:8e:85:
f9:47:f1:93:12:cf:28:33:68:ed:29:13:fc:76:07:44:b8:72:
ce:34:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:34 2025 by rpki-client