Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7hd2sIUznI41DIGnvdgKPC_VoHM.roa
File: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (raw, json)
Hash identifier: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=
Subject key identifier: EE:17:76:B0:85:33:9C:8E:35:0C:81:A7:BD:D8:0A:3C:2F:D5:A0:73
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0194266B1C3C0E5D40351A7A426418F0B3B3
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7hd2sIUznI41DIGnvdgKPC_VoHM.roa
Signing time: Thu 02 Jan 2025 09:49:01 +0000
ROA not before: Thu 02 Jan 2025 09:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138987
IP address blocks: 2a0d:1a40:faf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:1c:3c:0e:5d:40:35:1a:7a:42:64:18:f0:b3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 2 09:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee1776b085339c8e350c81a7bdd80a3c2fd5a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:7c:36:45:d5:67:48:cf:71:12:e8:1e:98:
71:3d:6d:74:c2:a1:c9:8f:ad:e0:99:ab:1e:7b:e6:
95:6a:2e:d9:d6:59:6a:7e:6a:cd:77:8f:f8:7c:4e:
a3:99:f1:aa:2d:f2:78:3b:fe:b4:e3:35:93:6e:99:
9c:33:86:95:75:a0:dd:03:7c:e4:df:e6:18:7a:48:
fd:bd:9d:71:bb:04:32:4c:d4:80:96:43:38:00:5d:
77:76:5d:c7:f5:e5:f6:4d:d5:05:8a:6a:eb:0e:28:
41:33:cf:54:04:8b:11:4d:b4:b0:02:ae:b9:d1:e6:
15:05:80:15:8b:2e:82:e4:21:10:9e:14:d3:69:dc:
4c:a9:cc:77:3b:45:ae:cf:ee:d0:70:d1:07:87:54:
f5:89:06:f9:a3:28:08:95:ce:90:85:f2:e2:5e:7a:
ab:52:dc:69:08:94:76:30:0a:dd:45:62:4d:13:b0:
cd:21:56:09:d3:fd:70:93:14:04:4c:d3:a0:b2:24:
49:f5:b6:1c:1e:7d:af:40:0a:9a:b7:5d:2e:90:32:
fd:54:9a:b0:51:ef:1f:01:47:4c:f6:4d:80:2f:90:
ce:4a:17:39:df:e3:c0:77:c0:d1:c1:6b:61:4f:46:
ae:b3:79:65:d4:e0:ca:ed:78:82:8c:95:5c:90:6a:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:76:B0:85:33:9C:8E:35:0C:81:A7:BD:D8:0A:3C:2F:D5:A0:73
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7hd2sIUznI41DIGnvdgKPC_VoHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:faf::/48
Signature Algorithm: sha256WithRSAEncryption
0b:df:ca:4c:a9:55:27:81:9e:79:95:3d:c0:10:29:c8:9c:af:
11:56:59:a2:1e:34:c0:cc:14:5a:b0:c3:4a:05:8b:0d:c6:c2:
ac:45:bd:ae:f8:fd:65:36:6c:2f:00:5d:41:d7:57:59:12:4e:
eb:e6:36:09:03:fe:51:2a:68:51:1c:1f:d2:49:20:5a:53:8b:
4b:8b:db:1f:ab:a5:7d:06:9b:7e:a9:94:24:b4:de:d6:e4:c6:
19:64:29:2f:20:82:8f:ac:fb:70:b5:d4:c6:2f:d8:c5:0c:ba:
aa:10:bb:05:c5:ee:87:c1:b3:f6:6a:30:70:b9:9f:b5:0d:83:
3d:d4:34:51:62:c8:e8:fd:d1:ad:b2:64:d9:92:d7:c6:99:19:
c2:84:8b:bb:fa:ac:e4:17:10:9e:25:a6:8a:95:1f:c9:d3:0b:
fb:35:77:e1:5a:d7:0d:6c:bd:ba:90:90:04:d2:8b:17:a6:0e:
80:15:99:6f:0a:e5:a8:68:e8:24:73:07:25:2e:c0:a4:ae:d2:
55:ad:8e:dc:28:8b:83:ba:6a:24:84:5b:03:43:d0:56:bb:81:
cf:e3:72:ec:ff:89:b1:7f:38:49:a2:30:c2:41:98:d6:c9:0a:
7d:2b:37:d8:a1:be:f9:33:cf:91:df:f6:00:cd:0b:e0:81:11:
67:ee:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:28 2025 by rpki-client