Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dEQn4gfsJRxfhqKslfN41v3D4hc.roa
File: dEQn4gfsJRxfhqKslfN41v3D4hc.roa (raw, json)
Hash identifier: TZ0sobRJ9WMYF6aBcf3Cq1/T45j0yE6z5roNHeVXmhg=
Subject key identifier: 74:44:27:E2:07:EC:25:1C:5F:86:A2:AC:95:F3:78:D6:FD:C3:E2:17
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C6512BD2B008D4C227717B735A75C
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dEQn4gfsJRxfhqKslfN41v3D4hc.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50542
IP address blocks: 2a02:2698:1400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:65:12:bd:2b:00:8d:4c:22:77:17:b7:35:a7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=744427e207ec251c5f86a2ac95f378d6fdc3e217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:ba:a9:b4:52:60:a6:c4:fb:aa:ca:a3:9f:
69:94:51:ca:b6:3e:6a:ac:84:ad:f1:d0:d7:5c:d8:
91:31:c1:a6:87:68:d3:65:35:b7:70:82:d3:cc:46:
a0:39:e7:35:f9:08:25:5d:f0:b4:bd:ae:fd:94:41:
09:f7:08:47:04:4b:f3:99:05:9d:f6:11:70:a8:14:
f8:66:30:3c:c2:7a:36:54:70:f6:d0:7b:15:05:44:
86:7c:8f:fe:b3:2d:e6:78:77:d1:11:f3:23:65:b4:
14:6d:8b:a7:0f:93:1e:15:55:48:32:bf:0c:f2:5b:
06:10:14:66:77:8c:d5:f7:ed:fe:03:3d:44:c7:b9:
52:8a:02:5f:c4:c5:0a:a1:3d:de:d8:a1:1f:00:cc:
db:c5:5a:ff:70:cf:44:a6:50:c3:ea:4b:34:25:64:
aa:99:3a:aa:eb:4e:56:0e:07:ea:05:fe:8b:67:d9:
3f:fb:77:e6:80:a8:f6:8a:14:e8:d9:d5:e4:a4:3e:
59:af:b7:2b:a3:7b:e0:90:df:b0:87:26:56:7c:f4:
5c:50:c0:db:2f:43:56:bb:6c:4e:d1:9d:06:ab:7e:
cb:2a:04:6e:a1:6a:34:86:69:31:cb:5a:bb:90:b6:
7a:e5:c9:1d:89:4d:6a:18:4d:b6:2a:d0:c7:97:b6:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:27:E2:07:EC:25:1C:5F:86:A2:AC:95:F3:78:D6:FD:C3:E2:17
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dEQn4gfsJRxfhqKslfN41v3D4hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1400::/38
Signature Algorithm: sha256WithRSAEncryption
7b:27:86:b0:56:a2:17:6d:95:cd:14:e3:e2:d8:31:30:56:fa:
6d:af:db:7a:7e:6b:ae:8f:66:12:03:cb:47:30:48:3a:f1:99:
ce:43:85:69:83:bb:1b:88:fd:27:fd:8e:49:22:02:64:75:36:
3f:4b:8f:8c:d7:4b:36:47:7f:61:18:53:54:5a:a4:c0:49:a8:
6c:d6:c2:ca:84:a5:8c:c7:c1:17:b7:f2:79:b7:b3:da:c8:4e:
bc:89:8d:51:34:32:09:71:a7:e7:e3:33:22:75:a5:45:6c:0f:
4d:32:8f:80:aa:d6:2a:5a:98:e4:02:f7:2e:3b:e2:82:f7:4e:
4a:a9:5f:18:92:ef:e8:7c:c2:86:ee:27:66:ba:0f:5b:51:37:
59:10:65:c6:e6:c0:bc:d1:87:14:92:c5:fb:f4:d5:d0:be:9d:
99:b1:5c:6d:13:8a:4b:d1:fb:9b:ef:6c:89:51:fd:6e:d8:a4:
dc:75:8b:48:37:b3:72:f0:ca:d8:5b:9f:06:8e:00:6d:1f:8f:
c5:6d:ae:cf:e1:3d:69:02:a0:64:72:49:94:cf:5a:c8:50:6e:
dc:11:38:1c:85:18:d2:02:aa:fb:fe:4b:9f:47:c0:53:3b:24:
0a:f1:f9:80:26:a4:a0:ec:26:16:71:5d:d3:1b:1a:4b:a9:bf:
dc:05:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:00 2025 by rpki-client