Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa
File: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (raw, json)
Hash identifier: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=
Subject key identifier: 4A:EC:31:6F:80:3F:AF:92:41:12:84:02:6F:96:28:B1:9A:60:C5:84
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01942521F85908E9CFCB35F9C269E30CF7BB
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49800
IP address blocks: 2a03:6947:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f8:59:08:e9:cf:cb:35:f9:c2:69:e3:0c:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aec316f803faf92411284026f9628b19a60c584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:43:0d:44:cb:8a:81:82:a9:9c:c1:65:c8:
0d:16:0e:c2:14:1a:c4:53:b8:57:9d:a1:e9:aa:fd:
e1:c9:f4:b8:9d:43:d0:b3:00:fe:30:fc:72:0a:0d:
01:6b:6f:f5:76:e1:51:14:eb:59:f6:42:0a:b1:5c:
77:d4:a6:4c:28:b7:89:71:fd:b9:92:42:f1:2d:44:
e7:1d:d2:dc:25:92:bf:a8:af:5b:ce:5d:12:f5:c1:
aa:6a:5a:5f:1a:ca:c6:b8:1e:f9:3e:05:8c:52:67:
ea:f2:cb:7e:93:d8:79:d9:46:7c:84:52:a4:7f:6a:
f7:81:25:c9:89:ae:18:83:3f:16:63:16:b3:c2:83:
98:e6:bf:00:06:f6:55:2b:aa:88:9c:97:f1:9d:38:
fd:27:cb:cb:a4:9c:c8:ec:95:db:5e:94:60:11:7f:
2d:e2:11:bc:40:4d:b2:e3:11:58:44:45:2e:c1:11:
72:67:45:57:a6:c9:7a:b1:72:bc:92:c6:17:f2:bf:
a4:46:bb:70:e1:f6:6d:78:d0:d3:c5:47:1b:4a:9c:
2d:0b:c5:26:39:7f:18:ac:de:35:d1:2a:68:60:1a:
9a:5f:12:2c:df:c5:44:c3:5d:81:ed:ce:36:e1:e1:
d6:90:e4:c8:88:ec:25:d4:ae:47:b1:06:61:4d:89:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:31:6F:80:3F:AF:92:41:12:84:02:6F:96:28:B1:9A:60:C5:84
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:200::/40
Signature Algorithm: sha256WithRSAEncryption
00:35:c9:0c:e9:e7:08:d3:03:6b:61:b3:48:63:7c:b5:49:5b:
42:ca:59:9b:ba:ee:a3:53:98:2a:22:29:15:15:1a:71:af:95:
3b:50:11:bb:3e:61:47:62:fc:08:33:c0:8f:18:a3:3b:1b:40:
e4:58:63:0f:67:7c:60:48:cb:89:a1:62:05:c4:76:b2:83:74:
82:30:1a:dc:fe:a1:c0:ba:94:40:13:b2:e3:c1:28:b2:b6:64:
cb:a8:06:c2:b9:a9:0e:37:9a:da:5e:b7:a7:c4:f0:67:3e:30:
32:42:6d:19:e5:50:a9:f4:01:94:46:56:e6:0d:70:e4:d6:5b:
fa:3e:ce:a0:44:90:26:38:b3:6d:19:5e:03:b6:d1:ee:c3:30:
75:b2:3a:76:55:b3:c2:62:85:b1:9c:d1:2f:02:f0:fd:7a:79:
27:09:b8:af:b5:bf:22:59:50:c1:8b:ca:4f:95:a4:86:67:f0:
ca:d0:29:50:ec:4c:55:04:1d:e1:33:b4:02:92:0b:b0:e2:51:
c3:b2:bc:c4:a5:d1:b7:1d:32:4a:93:8d:33:76:b9:47:7d:8c:
bc:9d:b0:ec:0f:fa:dc:99:01:a1:96:41:36:22:13:61:f4:6b:
e6:0a:d8:82:55:51:59:c7:2e:b0:05:65:cd:43:2b:69:99:73:
42:4e:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:31 2025 by rpki-client