Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa
File: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (raw, json)
Hash identifier: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=
Subject key identifier: 77:FD:DA:58:CC:76:C0:81:22:E7:3C:1A:02:65:6E:14:15:AF:4F:81
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019423D7BE0F35123C35AA58AD8FC7066D25
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa
Signing time: Wed 01 Jan 2025 21:48:48 +0000
ROA not before: Wed 01 Jan 2025 21:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197962
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:f140::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:be:0f:35:12:3c:35:aa:58:ad:8f:c7:06:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77fdda58cc76c08122e73c1a02656e1415af4f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:97:2b:8b:f8:ea:15:20:27:be:3b:a4:94:
da:f1:d0:c7:03:47:84:92:fa:9d:20:0b:df:97:c6:
f2:1b:1e:ad:73:5e:b0:40:e2:ad:84:52:6a:60:93:
01:32:f1:9a:c7:79:f4:76:74:db:71:3f:31:43:22:
78:ed:3c:ea:e8:61:80:e7:7f:a5:9f:82:ee:7c:11:
32:16:26:ff:18:5d:f6:94:00:09:f7:84:15:e5:92:
dd:b1:31:3c:6e:e9:78:25:41:2b:da:a7:2b:da:b3:
ff:6d:c4:4e:63:37:17:d2:93:2f:96:3a:1e:78:cd:
07:07:9a:60:80:5d:c9:65:7f:d0:b4:92:3a:4e:9c:
7f:f5:85:5d:44:61:c0:f1:62:24:a0:d1:8e:f8:af:
ca:d6:04:1e:f4:5e:99:c0:53:11:fc:8a:38:a5:0e:
66:9d:1b:50:ed:22:ae:a9:d4:5e:d2:c3:85:eb:ac:
b8:b8:b1:4f:35:b5:d4:16:79:6f:c9:7b:f8:36:07:
17:24:b5:92:6e:5e:d4:ee:d3:e7:6e:0d:10:6c:cf:
2a:ca:6b:d9:48:38:1b:bb:d2:c8:e5:f6:bf:c6:47:
a3:5c:ac:8c:a3:6f:b4:fc:a7:a1:d7:16:32:6b:0c:
cc:b6:d1:bc:e0:32:58:01:b8:f0:8e:4d:df:aa:90:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:DA:58:CC:76:C0:81:22:E7:3C:1A:02:65:6E:14:15:AF:4F:81
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:f140::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:d2:e9:4b:2b:57:10:f6:42:c8:58:ad:57:c6:4b:88:97:4b:
5e:56:41:88:50:2d:7e:5b:2c:b1:c7:ca:bc:fc:4f:e7:26:0b:
3f:fd:a4:58:91:be:a4:9a:4b:f5:70:de:32:db:6e:cd:15:35:
9c:ee:b1:39:19:7b:2e:ee:8a:b7:e3:72:37:bb:80:9d:9a:e7:
d7:66:d2:59:dc:9a:00:49:ea:21:09:d7:1f:fd:df:27:28:ff:
d1:7b:6d:ba:16:d4:a5:02:72:cd:30:87:8e:84:13:99:5a:ee:
d5:e6:a9:66:5b:78:d5:e0:a9:f7:7c:8d:1c:7d:c3:2a:5b:68:
e9:62:f8:dd:f3:f6:e9:86:84:04:3b:82:ce:58:17:22:d0:87:
74:d6:7a:62:fb:f1:59:34:06:42:d6:71:99:de:c4:f6:17:4c:
e1:5f:a0:63:8e:85:b6:f7:4c:dd:fb:ef:6f:1e:b2:52:9c:90:
f1:c1:64:c4:7d:dd:be:79:e6:54:69:47:df:9b:8b:3e:7d:1f:
20:d0:f8:db:48:25:94:83:85:1a:ef:5f:b1:82:59:19:96:1c:
15:ab:1d:21:f4:cf:b2:f8:1f:f0:e4:d3:17:75:84:cc:0d:27:
be:06:44:f8:f2:8a:03:bd:a7:eb:b9:27:ce:a1:3c:be:01:c7:
90:eb:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:20:22 2025 by rpki-client