Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AJh3rnDk3yA8j-EtobUrtMJjv2E.roa
File: AJh3rnDk3yA8j-EtobUrtMJjv2E.roa (raw, json)
Hash identifier: ft7JZrcYvnUieAqJD9RDEvINZoqH+yGdbKz+jXMsBQ4=
Subject key identifier: 00:98:77:AE:70:E4:DF:20:3C:8F:E1:2D:A1:B5:2B:B4:C2:63:BF:61
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747DCB5E9E6B474D7C496717256660F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AJh3rnDk3yA8j-EtobUrtMJjv2E.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205036
IP address blocks: 2a0b:b87:ffe2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:dc:b5:e9:e6:b4:74:d7:c4:96:71:72:56:66:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009877ae70e4df203c8fe12da1b52bb4c263bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:4b:03:d4:ee:93:4e:cf:fb:79:f2:2c:cb:
1e:2b:21:ff:1c:63:1e:35:34:cf:98:e7:9d:56:af:
fd:88:74:a4:cb:64:04:99:8b:e4:14:26:fb:2e:a0:
68:99:c4:f2:f8:10:2b:bd:86:55:d0:d3:88:cc:20:
0d:eb:d6:d7:a7:fd:8b:7c:6d:8c:32:bf:5a:f3:21:
35:88:a9:c9:39:83:8f:e0:93:9e:e8:a1:20:1b:eb:
a3:a1:25:75:df:93:99:e9:01:d5:c5:41:48:ff:b1:
7f:33:db:d3:b5:2f:c3:07:28:42:84:54:dd:b8:37:
c7:80:7d:74:ec:df:eb:e3:fe:08:27:57:3c:b3:45:
2e:45:f4:2b:a3:1d:2c:29:e2:33:a3:ef:e1:18:0f:
27:29:70:83:91:ae:2e:3f:c4:08:4c:b6:73:72:bb:
f4:b6:01:03:67:1a:99:61:3c:d5:5b:32:76:96:d6:
ef:ee:03:74:ff:b6:3f:d3:12:17:af:d0:f5:31:f8:
5c:78:59:2e:eb:4e:a2:0b:e7:1a:fa:b0:a2:66:6a:
49:b1:23:3a:04:ec:89:21:0e:07:c6:e8:64:da:92:
2f:f9:9b:5a:03:9a:4e:fd:e4:b1:70:6c:c4:68:2f:
20:4e:d0:e8:8c:77:96:e3:29:c9:76:16:47:19:a0:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:77:AE:70:E4:DF:20:3C:8F:E1:2D:A1:B5:2B:B4:C2:63:BF:61
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/AJh3rnDk3yA8j-EtobUrtMJjv2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffe2::/48
Signature Algorithm: sha256WithRSAEncryption
6a:32:e1:b9:9d:c8:e1:8a:26:ea:2c:e0:72:00:a4:9e:12:4f:
ff:03:4f:ba:ab:2e:51:24:be:99:1e:44:39:48:66:20:9b:e4:
65:97:4d:5b:87:f2:19:19:d2:ba:90:cd:e3:d4:7e:0d:02:9d:
7e:5c:7f:7b:88:b8:ce:c1:c4:37:ec:be:2e:d0:13:a7:8b:df:
74:d4:c8:ab:37:3d:e0:bc:33:02:aa:04:3b:a9:ec:a2:33:2d:
d3:40:11:09:83:6b:7f:1c:d6:0f:ad:ce:84:0d:19:51:f2:fe:
78:7d:d3:56:c7:55:cc:8e:a9:c1:a3:67:7f:06:a0:85:e0:cd:
67:4f:26:87:8b:08:19:0d:26:ab:49:8f:39:36:f4:6e:9b:b4:
a4:e2:52:e6:07:59:36:a0:91:6c:08:4b:6f:52:88:bb:f3:4e:
07:72:46:03:5b:83:a0:a4:39:c0:8f:2a:fa:e2:a7:67:a9:e3:
1c:90:5e:89:46:24:d4:35:29:b4:31:f2:c7:99:65:af:82:44:
25:a9:35:79:1a:d2:15:cf:e0:e3:8e:d6:11:64:c6:43:f7:a0:
52:b6:97:b6:35:30:80:af:84:18:83:41:b7:d8:02:e5:73:b6:
27:d8:cf:69:5d:70:cc:5c:5b:dd:73:c7:b2:13:43:40:c7:2f:
ce:84:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:14 2025 by rpki-client