Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/EXfTHtw-3BJt59JkT36dPstORFo.roa
File: EXfTHtw-3BJt59JkT36dPstORFo.roa (raw, json)
Hash identifier: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=
Subject key identifier: 11:77:D3:1E:DC:3E:DC:12:6D:E7:D2:64:4F:7E:9D:3E:CB:4E:44:5A
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA044671F16365E2BE145AC188345C
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/EXfTHtw-3BJt59JkT36dPstORFo.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61163
IP address blocks: 2a03:f87:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:04:46:71:f1:63:65:e2:be:14:5a:c1:88:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1177d31edc3edc126de7d2644f7e9d3ecb4e445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:34:17:84:97:23:27:a7:64:3b:89:fa:d6:
5a:66:59:3f:7b:8d:09:a4:2d:8a:3a:49:50:cf:18:
93:97:f0:07:82:a9:36:6b:92:fe:3c:a5:6f:ce:f1:
ea:87:4a:d0:86:97:32:8d:20:2a:03:6b:40:0e:de:
f7:08:b1:8f:a1:db:dd:bc:19:fb:d3:7a:36:d3:7e:
48:34:48:8f:69:25:49:9c:a9:04:37:6e:7f:ae:d6:
32:00:9f:7f:f3:6b:53:f6:10:db:00:18:33:5d:23:
4d:75:95:39:95:15:a7:84:a8:32:5b:4d:20:63:58:
82:7a:95:ba:9f:2e:6e:59:fc:b2:a6:87:0a:a8:78:
29:5e:8d:cb:d7:13:11:df:73:6a:8c:1d:ef:f6:60:
4d:81:1b:5b:d1:d1:68:c9:2c:3b:29:22:78:75:a4:
a7:f5:85:40:19:45:24:f4:9f:0b:d6:8b:37:69:07:
e3:69:83:49:53:fd:64:76:24:54:5f:87:00:a8:96:
62:fe:71:11:49:6f:bd:ce:c5:44:fc:f4:7a:ac:f0:
33:ba:04:79:b3:a4:0a:aa:92:33:a1:23:90:ec:3b:
4e:f7:63:6d:f5:21:3e:4b:65:62:4f:bb:0b:e9:07:
22:84:c7:d1:d5:1d:89:80:0b:b4:98:7d:dc:45:3b:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:D3:1E:DC:3E:DC:12:6D:E7:D2:64:4F:7E:9D:3E:CB:4E:44:5A
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/EXfTHtw-3BJt59JkT36dPstORFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f87:3::/48
Signature Algorithm: sha256WithRSAEncryption
07:07:79:3e:63:8f:d8:1c:85:53:db:79:0b:ab:c4:0c:48:0f:
bc:7d:75:ba:50:63:80:c1:27:b3:53:a4:ca:27:cd:ec:b9:5f:
32:2b:d8:6c:0f:1a:32:83:3a:35:c8:3d:55:e8:23:66:05:26:
fd:30:d6:e7:9d:a6:79:31:8b:08:b5:32:f0:10:58:94:08:2b:
ec:3c:5c:25:c1:03:e8:7b:9d:62:e4:ce:8d:d2:ef:09:52:ac:
3b:0d:fa:90:7a:e4:09:b8:72:0c:c2:83:de:5a:8e:28:8f:d1:
ea:e3:9e:47:ae:68:87:32:77:a5:e3:1f:ee:f5:19:c3:55:d9:
79:19:86:6d:2b:4e:70:e6:ab:fd:ca:a8:e4:20:fb:aa:74:ad:
8d:fe:6e:ef:25:cf:6c:1d:e6:c4:8e:7b:db:52:99:2e:bd:ec:
73:a4:10:1e:a7:64:d2:cb:82:9b:5a:cb:d2:ac:e7:0a:19:ad:
f3:99:f4:d5:3d:13:8b:03:78:ab:3c:f4:a9:6f:2a:d3:a8:c0:
63:d9:80:98:df:18:18:2c:d8:c2:c8:ac:6f:48:95:1c:5c:17:
69:89:94:d3:03:42:09:3f:28:dd:11:22:c7:e7:51:69:c3:74:
b7:86:8f:30:2b:a9:ef:14:69:77:6c:68:cc:3c:54:e5:b0:1c:
fe:64:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:32 2025 by rpki-client