Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa
File: 8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa (raw, json)
Hash identifier: 9hCqmB2340c+JsCnzCqxOHtXSX9acHBMNsYdRmzUUeg=
Subject key identifier: F1:B8:47:FA:86:D3:37:7F:D7:65:D0:37:65:8E:2A:12:72:AC:E8:2D
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FCDDAD3700557B5236D8BA36DB09
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa
Signing time: Thu 02 Jan 2025 13:49:11 +0000
ROA not before: Thu 02 Jan 2025 13:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 2a0b:4141::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fc:dd:ad:37:00:55:7b:52:36:d8:ba:36:db:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1b847fa86d3377fd765d037658e2a1272ace82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:d1:9c:8b:44:86:ca:68:ef:d3:b8:fb:83:
df:33:1d:e4:75:ff:25:93:01:d7:10:77:a4:7b:35:
85:0f:d9:37:45:18:8a:ac:f3:78:20:5a:d1:ff:d4:
6c:17:de:e3:98:c8:07:7c:98:da:94:07:8c:ec:5a:
4c:7e:9b:1a:7b:b6:71:8c:0c:6e:90:09:87:fb:98:
d2:59:f2:82:f2:26:b5:a3:43:12:34:1b:57:2c:49:
84:a3:52:1a:d0:7f:a7:66:87:45:ff:3b:6f:88:94:
60:69:e7:0f:d1:20:b9:cb:f6:ce:1d:66:2d:de:4e:
35:f6:cd:94:55:43:dc:a1:ae:b4:32:1a:bd:22:cf:
57:c8:8f:a3:61:e4:6b:54:b3:c9:ca:40:7d:f5:64:
96:85:3e:6a:16:80:85:4c:e0:bf:11:30:4d:cf:83:
72:57:02:47:33:ce:b5:81:a2:2a:27:0b:40:9b:4f:
cf:9d:23:51:79:86:04:fb:65:e0:af:b8:cf:fd:f6:
e6:9d:5f:62:a5:a3:8d:ee:d1:cc:6f:b2:3a:96:8b:
72:49:55:9b:1b:fd:8f:02:24:eb:13:20:9e:1d:48:
c2:fc:62:ad:63:4d:02:81:b3:f4:e6:4e:22:d0:a9:
42:8f:b6:72:21:ed:78:e2:03:9c:c2:91:f0:d6:45:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:47:FA:86:D3:37:7F:D7:65:D0:37:65:8E:2A:12:72:AC:E8:2D
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4141::/32
Signature Algorithm: sha256WithRSAEncryption
58:70:f6:5f:bb:c0:2f:f5:95:26:7a:0a:d3:9e:aa:ba:72:99:
b5:fd:5e:8b:91:66:15:44:05:ee:3b:e3:c3:b8:8f:77:29:88:
ec:99:c1:50:78:11:d5:89:ad:ff:77:c2:fb:76:0a:00:d0:6b:
8f:ce:88:29:71:70:45:b8:f0:1b:b3:d1:6a:cb:4d:56:16:f1:
c5:12:06:ef:7e:60:d1:bd:5f:a8:a4:fe:ec:de:2f:0c:20:bb:
73:e3:16:9f:10:76:44:aa:ad:96:c2:b0:54:49:c4:30:ed:8f:
12:26:7f:57:fb:7b:7b:f8:ac:8c:ca:95:8c:bf:fb:ea:23:3f:
5d:f8:73:fb:02:cc:46:12:8b:28:41:3a:4c:1d:41:13:ff:65:
af:c0:66:8a:72:11:9b:e8:a8:8e:52:30:6b:81:9f:36:c6:14:
af:d2:7e:d7:45:8f:13:1e:2b:5f:a8:6f:77:b2:df:1f:87:f6:
27:2a:24:bc:e5:97:29:c4:ba:46:97:f2:c8:30:6e:91:d6:63:
48:70:b3:03:15:fd:fa:74:f4:ca:f4:52:21:87:4c:11:6a:d5:
ae:9f:56:98:ae:8a:99:19:69:b5:af:43:07:df:09:8a:2e:2b:
b6:38:5f:fe:37:34:04:35:1b:e9:fd:13:86:eb:d5:fd:21:80:
ed:eb:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:43:06 2025 by rpki-client