Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/18zjEO-_LrFFi1f2wTlrbYuaFPI.roa
File: 18zjEO-_LrFFi1f2wTlrbYuaFPI.roa (raw, json)
Hash identifier: 23CwQKGzrLfwnp7pSv8b0uc7UagpAsMAZY98XDncjIU=
Subject key identifier: D7:CC:E3:10:EF:BF:2E:B1:45:8B:57:F6:C1:39:6B:6D:8B:9A:14:F2
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F0CB01D28BD1875720859194DF58
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/18zjEO-_LrFFi1f2wTlrbYuaFPI.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212647
IP address blocks: 2a0b:b87:ffa0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:cb:01:d2:8b:d1:87:57:20:85:91:94:df:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7cce310efbf2eb1458b57f6c1396b6d8b9a14f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:68:8c:a8:6a:03:33:9b:7a:ca:fa:f5:57:
c2:8e:7d:80:78:74:7c:6f:0a:b1:30:fd:32:a2:8b:
f5:e0:cf:8d:83:4b:25:45:2f:7f:2c:ff:61:19:33:
22:93:58:b2:4c:28:28:ce:75:40:87:92:4e:37:d8:
72:45:fb:7f:30:da:ce:5a:8d:8b:9b:5e:54:3b:00:
65:98:cf:ca:41:64:c8:be:ed:79:0e:f7:4e:dc:e3:
e7:b3:b4:50:85:f9:61:bc:5f:be:d2:9c:f7:05:45:
48:2e:20:be:4b:62:11:90:96:2e:ed:fa:ec:47:a0:
b0:dc:1c:f8:ca:ad:80:bc:a1:06:a3:63:bf:c7:86:
15:c9:23:e6:c6:8b:de:e4:50:db:09:36:cd:58:61:
e6:75:ec:94:df:fb:a9:65:48:11:9c:26:a1:ee:4f:
da:39:30:83:0d:0e:2a:ea:fa:3f:fc:00:2c:51:55:
b6:6b:7e:a2:d6:f2:22:13:87:61:f7:9c:c9:e2:a9:
6c:fc:54:d7:5c:26:59:ce:ea:98:3b:67:80:9f:7b:
b0:ac:9c:cb:2f:f0:5b:2a:bf:fb:15:c8:10:60:97:
88:df:c3:66:a9:c0:8e:6b:2a:49:de:20:f3:6d:4f:
96:42:e9:f2:dd:31:d3:88:6c:b3:02:3e:08:16:76:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:E3:10:EF:BF:2E:B1:45:8B:57:F6:C1:39:6B:6D:8B:9A:14:F2
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/18zjEO-_LrFFi1f2wTlrbYuaFPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffa0::/48
Signature Algorithm: sha256WithRSAEncryption
40:12:e1:92:3e:8f:88:15:33:0e:77:d4:c6:db:68:8b:48:13:
ad:de:26:35:60:7b:21:20:f8:1c:9e:6b:36:58:cc:bb:1b:a1:
f4:a6:8e:42:49:61:a0:70:d8:2f:9c:1c:fa:4d:53:ff:ad:d2:
d0:99:8b:7d:b8:65:77:41:e0:0d:5b:a4:8a:21:04:05:4d:ba:
c9:ea:33:35:7a:4b:88:3a:e8:c3:6d:6c:b6:81:29:f8:25:51:
9f:d0:fa:88:d5:86:ee:4c:fa:8a:58:0d:bf:a0:5c:08:a4:34:
dc:8b:f7:c0:da:6a:d3:da:5d:5b:88:f2:a8:b3:ae:54:b6:cd:
e1:1e:5e:86:b1:26:c7:4b:5b:b6:e3:27:b1:66:28:71:fa:36:
d7:d1:e4:ca:bb:fc:c6:28:3f:9e:3a:ff:4c:fa:e2:eb:d8:41:
66:83:a6:76:61:92:18:59:5c:c4:59:7e:91:e5:e7:40:66:66:
77:ce:86:36:05:ab:b8:cd:6d:02:4c:5d:4f:ba:c9:24:98:ee:
5c:ca:8e:0d:41:2f:46:f9:68:e4:f3:28:d8:b9:05:ad:29:f9:
fe:d3:30:04:2b:72:4e:83:b3:16:c3:bf:84:fd:2d:51:8d:11:
fe:23:4a:42:66:aa:3c:dc:3b:54:ad:db:1c:8c:fc:6c:4a:3c:
af:36:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:32:18 2025 by rpki-client