Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DeT4H9vHwyuu35zhI-U0tyFq8YA.roa
File: DeT4H9vHwyuu35zhI-U0tyFq8YA.roa (raw, json)
Hash identifier: d0w+8cvUotAVfyvFf8K4WVYM3e72pkNRc5Y9xUxniZE=
Subject key identifier: 0D:E4:F8:1F:DB:C7:C3:2B:AE:DF:9C:E1:23:E5:34:B7:21:6A:F1:80
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C69A9500BCCD5C86643B81F441EF9
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DeT4H9vHwyuu35zhI-U0tyFq8YA.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51645
IP address blocks: 2a02:2698:2000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:69:a9:50:0b:cc:d5:c8:66:43:b8:1f:44:1e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0de4f81fdbc7c32baedf9ce123e534b7216af180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:a6:a2:20:d5:05:0c:34:6d:7b:ab:7d:ea:
a9:09:b3:b8:61:fd:6d:f0:ce:a9:85:17:8a:46:e6:
44:02:e8:d9:3d:19:6b:34:7b:03:cf:e9:35:69:1c:
b3:50:f9:50:c5:69:71:83:d0:75:27:cd:03:d5:eb:
df:d0:d1:56:71:56:e3:85:3a:9d:9e:b5:eb:99:60:
42:4c:61:70:f2:ab:1a:14:c5:44:66:7f:55:40:31:
1c:64:16:b4:82:93:3f:d4:e4:2f:77:e3:9d:b7:1a:
8e:32:d6:19:0d:c1:3f:63:fe:1f:c7:48:1b:ce:f1:
c6:86:27:2d:fe:45:63:9f:54:08:53:b7:77:55:94:
32:b6:69:cc:cd:76:ac:5c:61:8f:64:17:e8:41:74:
d8:86:75:cb:7f:09:d3:10:1a:c6:6c:5c:95:13:0d:
9e:09:cc:8f:88:18:85:ab:64:8c:51:fc:60:4e:9d:
40:5c:dd:01:95:c1:71:7e:c4:b6:6b:6c:89:e2:ba:
1d:24:4e:93:11:91:21:d3:7c:f2:9d:2e:1b:2b:8b:
2d:68:c4:0d:ee:a1:fc:8e:cd:7b:40:cb:d6:b8:cb:
88:59:b1:d8:56:e2:0c:e4:b9:44:d2:c3:d2:34:55:
51:20:51:ce:66:72:6e:d2:1d:e2:ae:3f:24:72:a7:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:F8:1F:DB:C7:C3:2B:AE:DF:9C:E1:23:E5:34:B7:21:6A:F1:80
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DeT4H9vHwyuu35zhI-U0tyFq8YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2000::/38
Signature Algorithm: sha256WithRSAEncryption
ae:41:6d:ff:e6:0f:44:63:57:00:db:0f:ea:0d:99:b8:f2:7b:
3c:02:78:90:a6:84:81:fc:7d:b9:81:77:2e:b2:01:66:a2:98:
19:fe:ee:d6:82:71:46:9f:bb:e2:de:72:2a:ca:76:7c:99:f6:
b2:be:65:c2:e3:0c:d5:5e:49:72:6a:e0:20:4c:76:d7:d6:8c:
55:20:5d:4c:da:a7:94:aa:1a:0f:84:0a:4f:9a:94:70:4a:ff:
73:a6:20:7b:66:8b:22:fc:5e:fc:a7:5b:bb:ad:7b:af:bb:fc:
db:4f:6a:d1:e9:d5:f9:a4:fb:24:bf:a6:ad:52:c2:e8:0d:2f:
e0:23:40:60:4a:fb:09:91:5f:83:a1:64:1a:c4:26:eb:e7:73:
d8:ad:dc:9c:30:d9:d9:68:85:32:6e:4f:5e:63:fb:cc:34:27:
dc:1c:f4:a2:be:1e:4b:6e:26:de:bf:86:ee:0e:2c:51:ce:0a:
ec:d0:3f:bd:fe:53:f5:56:40:94:e7:72:05:ee:e3:d2:f2:96:
4b:51:7c:0e:c4:ed:2b:02:e9:69:5a:0c:5f:d1:77:ce:cb:6f:
b3:91:93:59:3a:10:5d:19:92:cb:42:e4:3a:8f:ae:b5:c7:23:
3d:75:4f:c7:4b:cc:72:86:46:b7:9c:c6:dd:6a:8a:a7:a1:ab:
4c:b1:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:11 2025 by rpki-client