Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/i6VRDQdIil0CjvQd057rABtr9kE.roa
File: i6VRDQdIil0CjvQd057rABtr9kE.roa (raw, json)
Hash identifier: sn7kvKyr4NofwuxW4yXFFyr4t+Wfqf9Hgohjb3PA8yY=
Subject key identifier: 8B:A5:51:0D:07:48:8A:5D:02:8E:F4:1D:D3:9E:EB:00:1B:6B:F6:41
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 019424B3A3F932E4A6A8EEAB91C6477F0C3C
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/i6VRDQdIil0CjvQd057rABtr9kE.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29018
IP address blocks: 2a0b:1306:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:f9:32:e4:a6:a8:ee:ab:91:c6:47:7f:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba5510d07488a5d028ef41dd39eeb001b6bf641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:a3:89:6a:cd:9f:f9:ad:c2:ca:32:11:d8:
e3:f3:78:c2:a9:a2:fb:f2:ea:09:71:10:41:71:f1:
0b:c1:1c:61:3b:3e:df:19:3e:28:0f:a8:9c:50:52:
8a:75:b7:f4:07:49:09:cf:43:e1:c0:48:29:62:86:
43:44:b7:32:28:30:57:03:4b:76:25:2e:2a:a2:59:
99:8f:7b:cf:7b:69:a5:38:8b:2a:37:bf:03:5d:a4:
8b:c3:54:85:3f:3f:bc:ed:b4:90:53:f6:e8:ea:6d:
3f:0e:c8:d2:02:91:f9:fa:0d:4d:6c:e2:22:6a:57:
18:bd:4e:d5:64:cb:bc:74:cf:53:37:58:cd:f6:73:
7e:92:00:d9:ff:36:b4:d4:49:24:d0:dc:32:e6:30:
32:db:9f:f7:40:5a:ef:a4:38:52:f5:48:11:91:2b:
53:87:17:f2:07:3a:60:27:8f:c5:72:35:ab:90:2e:
77:0f:c3:21:a0:52:2e:ce:59:3f:db:e6:de:fd:27:
40:d6:d1:14:bc:4c:e8:bf:5a:98:e6:60:f8:13:58:
65:57:7b:10:e4:f6:89:64:b0:e6:52:4a:7b:ed:ed:
f1:f7:da:09:1a:00:1a:86:f9:dc:ca:dd:9b:cd:18:
36:fa:62:63:21:14:17:dc:69:96:49:71:24:fd:7b:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:51:0D:07:48:8A:5D:02:8E:F4:1D:D3:9E:EB:00:1B:6B:F6:41
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/i6VRDQdIil0CjvQd057rABtr9kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1306:3::/48
Signature Algorithm: sha256WithRSAEncryption
05:dd:42:ac:4c:16:3b:a8:4b:8f:be:19:58:45:ad:2a:9c:28:
21:e9:c4:c2:fb:44:cd:86:26:91:4c:44:f8:61:4e:4c:19:4f:
64:26:4c:de:1b:4f:14:1a:3e:f3:04:cd:ff:31:58:01:59:27:
af:1b:7d:92:69:20:ad:6d:0f:4d:ba:b2:ea:54:5f:d7:04:05:
23:6b:ee:35:6f:4a:d4:bb:86:18:bc:8f:eb:bf:54:5f:75:46:
f6:81:ab:96:da:72:39:33:99:57:22:48:fd:76:b2:78:09:95:
ce:88:27:b7:6e:4a:65:bc:da:e4:6a:e6:b6:dd:36:e0:c2:9f:
18:ba:57:f3:53:74:6a:88:64:37:4f:cb:44:74:53:03:d2:41:
cc:12:63:b1:68:0b:62:63:80:0f:31:b0:18:0c:d6:a2:46:cd:
76:c3:e0:48:28:f8:4f:19:61:8a:81:b2:3d:fa:63:50:62:a7:
0c:f7:93:51:46:5c:4e:f3:5f:b0:e1:2a:1f:84:da:33:1a:f4:
4a:4d:81:b7:85:82:1f:e3:b7:fe:ce:61:bd:8d:dd:1c:d7:a4:
e3:23:cc:c3:71:0b:bc:6c:e2:c3:f8:71:6c:01:94:44:df:d3:
7b:b0:97:78:23:53:6f:08:f0:26:99:12:cf:2e:4a:92:3e:a5:
7e:a8:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:31 2025 by rpki-client