Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/g1QBI0oBpZMDfLnVbzlJh58dtno.roa
File: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (raw, json)
Hash identifier: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=
Subject key identifier: 83:54:01:23:4A:01:A5:93:03:7C:B9:D5:6F:39:49:87:9F:1D:B6:7A
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019420D666119069334293BAF1238B38C735
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/g1QBI0oBpZMDfLnVbzlJh58dtno.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49772
IP address blocks: 2a12:e6c0:f001::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:66:11:90:69:33:42:93:ba:f1:23:8b:38:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835401234a01a593037cb9d56f3949879f1db67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:d0:18:43:d8:d1:41:25:58:4d:7b:9b:e0:
f7:f2:40:d9:5d:88:7b:41:92:17:aa:c1:c8:75:fa:
3a:d4:73:f4:84:ef:86:bb:6a:77:cf:59:8e:83:ed:
6f:b0:29:40:65:b4:f3:2e:d9:29:e6:17:b0:45:45:
55:9c:8d:fd:61:b6:b4:12:a4:1b:e8:9d:58:b5:3c:
9f:cf:86:ae:8d:62:1c:9c:ee:ab:db:68:a9:7e:12:
d6:26:5b:d5:42:91:23:92:49:06:09:c6:70:68:9b:
a9:76:84:ea:c5:b7:e7:24:8e:d3:d8:6c:b5:e7:10:
b5:cd:68:27:57:34:e3:d1:94:62:20:19:47:69:7d:
6e:6b:7e:75:b9:52:de:01:43:9f:0b:f7:86:42:eb:
0f:f8:74:e9:77:fb:9e:c5:4c:82:93:c0:92:8d:7c:
00:61:38:ad:6a:9b:af:c1:eb:d9:c2:2e:e6:89:49:
90:86:a5:17:c4:69:80:4a:25:7f:0d:40:21:d7:fa:
f6:88:7f:11:75:6b:e0:22:d3:d1:ce:0b:25:c8:80:
1c:79:df:6c:17:44:98:12:67:fe:7f:37:a8:a9:c5:
2d:50:20:c4:70:f5:b5:5b:43:d6:50:62:87:0a:80:
fc:61:a4:60:fd:c9:2d:08:4f:3b:11:ac:b3:4a:23:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:01:23:4A:01:A5:93:03:7C:B9:D5:6F:39:49:87:9F:1D:B6:7A
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/g1QBI0oBpZMDfLnVbzlJh58dtno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e6c0:f001::/48
Signature Algorithm: sha256WithRSAEncryption
38:df:52:20:57:b3:91:67:c3:01:85:01:25:81:55:05:a6:5d:
12:96:90:31:cf:f4:20:60:c1:c7:4f:51:a6:cd:bb:f1:05:81:
84:34:d7:6b:47:5a:1d:19:37:26:42:26:b8:a0:41:46:80:1e:
49:b0:1e:df:3e:80:dc:ca:a8:3c:47:51:d1:65:46:45:06:ca:
09:d2:12:e6:05:87:54:c9:17:73:43:d8:1e:56:97:3a:57:6e:
52:4d:e2:be:9d:d1:51:cf:a0:c3:e7:f1:d0:ff:98:0c:66:4e:
bf:a3:7e:81:34:7c:c5:8a:fa:b9:0c:f9:3b:06:25:0d:3b:2d:
91:d6:07:c0:a2:ee:6d:fd:05:b6:34:69:81:c8:75:1c:05:fc:
35:78:a5:8e:f3:1f:ae:c2:c1:1e:ab:04:8c:a4:ab:9c:3e:87:
1a:ce:e2:3b:e8:74:07:1a:eb:43:10:f5:78:8c:25:e9:58:9a:
fb:04:7b:32:da:7c:5e:5b:7f:34:03:65:db:5f:68:19:1f:62:
9e:41:44:21:10:00:f0:48:72:da:3f:a6:b4:dd:81:04:5c:7f:
56:b6:fd:3f:d7:60:aa:91:70:97:71:b1:08:65:e7:d6:a3:a1:
6d:d6:0c:df:01:03:a3:a9:1d:fd:2a:a8:f6:6e:69:49:bc:eb:
7a:88:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:42:55 2025 by rpki-client