Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t-jmwraTlUsv1PdRPmXuNZtPOnk.roa
File: t-jmwraTlUsv1PdRPmXuNZtPOnk.roa (raw, json)
Hash identifier: SMc8+P6M9GgAZy9+RYvwfT2GY7Au8mKffnTG1PXN4s4=
Subject key identifier: B7:E8:E6:C2:B6:93:95:4B:2F:D4:F7:51:3E:65:EE:35:9B:4F:3A:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01944CB330595A30377F155DC54C708ACCB6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t-jmwraTlUsv1PdRPmXuNZtPOnk.roa
Signing time: Thu 09 Jan 2025 20:13:19 +0000
ROA not before: Thu 09 Jan 2025 20:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200032
IP address blocks: 2a00:cdc0:11::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:b3:30:59:5a:30:37:7f:15:5d:c5:4c:70:8a:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 9 20:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e8e6c2b693954b2fd4f7513e65ee359b4f3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:6b:f9:3e:3b:9d:74:20:96:e8:b0:32:20:
39:24:9e:7f:61:11:b9:f1:0e:41:e0:e2:eb:fa:03:
12:31:17:0a:64:2e:f3:36:0d:2b:3e:8d:a9:7a:98:
57:2e:97:f5:15:d4:a6:7d:61:52:3d:e1:1e:e4:6b:
f0:01:bf:c5:36:a1:c0:00:7c:1c:66:1a:c9:ee:f2:
88:f3:e7:b4:48:61:f3:ee:ee:d0:cc:ce:a8:0a:11:
12:a3:08:95:c0:af:0b:dd:f2:ff:8a:fe:ef:49:10:
73:94:26:e9:19:fe:83:93:7f:38:ea:e6:30:14:84:
40:c3:49:f4:c5:33:f6:a6:8e:37:f5:42:e9:db:20:
82:61:61:d6:fb:ae:e7:5a:90:65:f8:81:bc:45:3f:
f0:14:1e:cb:d8:90:18:5d:ff:d8:5b:08:f4:99:cc:
fa:e4:b9:da:d4:71:cb:6f:15:bc:1d:21:6e:0c:e1:
98:67:16:a5:8f:db:d8:79:00:c6:45:44:bd:6d:17:
22:32:06:a1:ac:6d:b6:e1:d7:f9:ad:5f:f4:8e:1a:
33:c6:0c:1f:bd:9d:8e:01:43:f4:51:4e:36:cd:8e:
37:6c:9e:8e:5b:74:f1:10:a2:94:d0:8b:96:5e:59:
aa:f2:c5:4f:ba:9b:14:f4:73:35:19:4c:13:2c:c9:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:E6:C2:B6:93:95:4B:2F:D4:F7:51:3E:65:EE:35:9B:4F:3A:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/t-jmwraTlUsv1PdRPmXuNZtPOnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:cdc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e4:2f:d6:21:3d:98:ba:7b:98:64:11:32:fa:93:c1:8e:89:
1d:ad:c5:9f:10:5c:30:36:8c:25:dd:99:8d:e3:10:c7:77:0d:
c7:44:54:b8:5a:a6:db:7b:89:06:d7:59:b8:c2:36:cd:57:18:
eb:90:15:1e:06:15:e4:08:03:c8:32:69:69:33:b7:ea:97:a3:
23:84:06:01:46:fb:70:ec:c8:05:0e:ab:ac:61:1e:5e:0b:63:
ca:65:35:e7:98:22:dd:49:4e:89:0d:9d:9d:a8:8b:56:88:0e:
11:05:2f:55:26:e5:a6:d4:29:77:06:53:ad:a6:b9:3d:67:fd:
84:b5:99:98:37:fd:ef:82:42:3e:87:9b:a0:d8:59:5d:f0:fd:
99:e7:52:e0:39:95:f7:7a:26:02:ff:ae:da:c0:36:ff:84:ca:
0c:0b:98:20:f9:92:b3:76:a7:85:1e:dc:e9:42:d5:d9:b7:7a:
31:70:64:c9:7f:cd:d3:ab:0f:8e:23:4c:77:45:5e:e0:c6:e6:
3f:03:9c:ee:84:4f:ab:68:d6:49:13:fb:5e:2f:04:a2:8f:43:
81:fe:84:c5:0e:e3:4a:73:94:6a:37:46:e5:aa:46:d6:d7:f6:
fc:9d:03:b8:dd:a8:60:b8:00:48:33:38:b6:2b:53:10:1f:3c:
40:4e:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:34 2025 by rpki-client