Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_PsTgNyj2kuvf9bU_VQgCADRPAQ.roa
File: _PsTgNyj2kuvf9bU_VQgCADRPAQ.roa (raw, json)
Hash identifier: bWRmBYvsrWHn6JuASHO7QZY/Kv+hHW0Nsaq81jNfzOc=
Subject key identifier: FC:FB:13:80:DC:A3:DA:4B:AF:7F:D6:D4:FD:54:20:08:00:D1:3C:04
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019423D7BD3252C89090B91EDA2F22853EBB
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_PsTgNyj2kuvf9bU_VQgCADRPAQ.roa
Signing time: Wed 01 Jan 2025 21:48:48 +0000
ROA not before: Wed 01 Jan 2025 21:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a11:f240::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:bd:32:52:c8:90:90:b9:1e:da:2f:22:85:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcfb1380dca3da4baf7fd6d4fd54200800d13c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:a7:cc:32:60:ef:c5:2e:30:87:02:e0:a3:
94:d8:f7:43:36:84:3e:57:99:70:5f:11:f1:30:62:
09:e0:8c:12:1c:4a:5b:01:cf:86:bb:9e:0e:ef:f3:
04:c3:fd:f3:c3:24:60:cf:7e:40:d1:1d:7f:c9:65:
48:bc:27:18:12:35:8b:ed:fc:f6:e9:65:1a:cb:b4:
84:17:19:94:e1:fd:ce:ad:dd:c7:84:81:f6:02:58:
09:18:dc:fd:4c:64:e8:3d:9c:fa:6f:9b:61:d2:29:
9c:95:5b:46:8c:e1:32:b1:1e:ed:bf:2d:0d:07:c1:
7e:50:d3:db:cb:11:69:f0:ac:42:14:9a:e0:c1:62:
43:08:bb:b6:af:f0:d6:51:ad:6b:d3:13:14:f9:f9:
94:b9:06:20:e2:22:30:0e:f3:41:b6:eb:25:41:5d:
5b:28:ff:68:4f:59:df:b1:81:82:8c:4a:53:1b:9d:
3d:41:69:7a:3e:d6:84:92:0e:7d:df:ea:86:9d:15:
50:36:03:8e:24:02:cc:41:09:0f:ad:88:ea:af:55:
71:41:6a:38:c0:a9:f9:76:79:c6:66:6c:53:c0:c9:
ba:ad:b7:2f:a7:e3:96:4e:88:eb:87:8d:3d:fe:a4:
7b:51:f0:c2:b1:81:31:e4:ac:16:d4:2c:05:cb:b0:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:13:80:DC:A3:DA:4B:AF:7F:D6:D4:FD:54:20:08:00:D1:3C:04
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_PsTgNyj2kuvf9bU_VQgCADRPAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f240::/29
Signature Algorithm: sha256WithRSAEncryption
45:3b:10:cb:1f:80:44:07:bd:7d:e0:57:67:dd:4f:3b:b0:9a:
5f:74:7a:25:96:20:83:bc:85:9a:b5:68:a9:e6:dd:22:a7:f1:
78:f5:d7:8f:f9:8c:7a:e1:8b:ec:74:9a:56:b7:97:76:51:18:
51:9a:d2:4e:30:84:56:4d:78:5b:36:8c:3a:b1:c4:ce:47:27:
5e:55:8f:83:37:96:9a:b0:55:90:5a:fd:39:d8:99:f8:30:49:
f9:a9:2e:97:fe:2d:0f:56:c2:a9:00:58:72:d4:c0:01:cb:11:
78:9b:19:08:19:9f:75:54:17:73:e9:90:29:7a:3a:27:36:47:
70:fd:11:76:b9:b9:53:08:25:36:ec:56:76:27:87:da:e5:fd:
ce:00:32:ae:e3:55:96:3f:65:8d:6e:6a:64:7d:56:5c:93:03:
81:b3:43:c9:84:b8:11:a6:4c:c4:b5:ad:8e:7d:ef:25:6c:dc:
4a:68:0e:48:7b:9b:02:59:1b:9d:c0:fd:1a:19:3e:93:d0:91:
bd:42:e1:2d:ab:af:7f:61:59:22:eb:10:0e:d2:92:e7:3e:f5:
fb:5a:2d:84:2c:d4:b9:a0:34:0f:34:74:9b:b2:a2:92:8b:3c:
fb:de:98:a1:6d:cc:d1:bd:ed:71:22:55:70:aa:87:ea:43:99:
b4:96:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:59 2025 by rpki-client