Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/SrPm1i3skuiVEboXgAOiwvJ0e24.roa
File: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (raw, json)
Hash identifier: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=
Subject key identifier: 4A:B3:E6:D6:2D:EC:92:E8:95:11:BA:17:80:03:A2:C2:F2:74:7B:6E
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019427B68ED1A2B7897C3DB4510F90FAFFB6
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/SrPm1i3skuiVEboXgAOiwvJ0e24.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 2a05:9bc0::/29 maxlen: 29
2a05:9bc0::/32 maxlen: 32
2a05:9bc1::/32 maxlen: 32
2a05:9bc2::/32 maxlen: 32
2a05:9bc3::/32 maxlen: 32
2a05:9bc4::/32 maxlen: 32
2a05:9bc5::/32 maxlen: 32
2a05:9bc6::/32 maxlen: 32
2a05:9bc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8e:d1:a2:b7:89:7c:3d:b4:51:0f:90:fa:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab3e6d62dec92e89511ba178003a2c2f2747b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:3e:d5:48:c7:f9:95:fa:91:3d:3d:44:2c:
5d:64:ca:5c:bc:8b:d1:83:15:e8:98:d8:7f:7c:37:
9c:12:08:d8:cc:58:e1:3a:05:87:71:60:7c:99:a3:
20:34:bb:ee:d1:dc:89:39:42:45:ee:e2:4d:1a:cb:
06:e8:f9:77:5b:60:ed:40:31:85:0c:0f:ab:83:10:
7a:a9:57:3c:5a:1c:a6:13:c6:c1:53:8b:01:3b:21:
11:8b:87:ad:51:7d:d2:82:ea:3a:f6:06:bd:a4:85:
9f:d9:ac:7b:88:ab:e5:09:71:9b:c7:61:32:85:cc:
c0:2c:98:dc:40:7e:b4:68:a4:13:7c:9a:24:a9:b3:
1a:94:bf:bd:f0:4d:80:a3:6c:cb:a0:af:80:a8:e2:
4d:e3:da:d7:c5:d3:82:09:ed:0f:e4:bf:a4:70:c7:
0c:22:f3:89:89:e0:87:fc:6f:08:25:12:6a:ab:dc:
e3:7e:4e:ba:2c:6a:7f:a8:08:31:69:78:a4:a4:66:
01:ee:72:6c:76:a9:34:d2:de:c9:cf:17:32:01:41:
c8:09:49:dd:0c:56:87:54:34:b1:68:21:f4:54:89:
cd:0f:ac:0b:ae:89:80:9e:e8:32:88:44:93:ac:75:
3a:55:6b:55:4d:69:f6:42:a0:94:f6:4a:92:1b:1c:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:E6:D6:2D:EC:92:E8:95:11:BA:17:80:03:A2:C2:F2:74:7B:6E
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/SrPm1i3skuiVEboXgAOiwvJ0e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9bc0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:88:21:f0:94:e7:17:2c:e7:4f:7d:d2:00:49:19:cd:62:32:
ba:ea:f4:de:76:8b:d4:65:73:48:87:65:be:5b:a2:e3:7f:6f:
f9:cc:6d:30:8e:39:1d:68:f6:a2:f8:cf:e1:6b:8a:23:86:84:
55:26:70:b0:bb:b5:a8:54:20:1f:73:87:0b:e7:39:a7:22:f8:
c5:f9:40:2d:47:17:b9:fd:df:bb:3a:ee:b1:69:3f:ae:62:9d:
72:a3:59:12:63:74:6f:fe:98:bc:a9:e1:eb:c3:bc:c0:53:a2:
b5:99:16:7c:1a:93:0c:12:8a:68:4a:01:ec:80:6c:68:7d:b0:
46:b3:b3:d5:34:f0:8b:9e:fd:7b:68:81:28:fb:60:ff:b6:cf:
de:58:07:51:cd:ce:a9:cb:9b:f9:d7:e2:d6:fb:d4:24:c0:7f:
de:cd:ed:22:0c:9a:9d:06:ab:01:8e:04:ae:53:91:0b:fd:ce:
b5:10:2f:dc:b6:46:ca:d7:71:45:5c:f5:0f:ab:d3:7f:37:52:
63:11:a0:50:fe:9c:05:1b:c0:bf:e4:a4:ff:7d:e8:dd:d2:fc:
a9:f1:91:2a:ba:05:77:05:8b:67:b3:b3:a1:12:b2:8e:33:da:
3a:0c:92:70:3a:3e:65:f3:3b:16:39:38:69:f2:57:d6:b1:57:
a3:05:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:39:01 2025 by rpki-client