Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D6ae5sDEIwb4WylZmzTHgARFDBE.roa
File: D6ae5sDEIwb4WylZmzTHgARFDBE.roa (raw, json)
Hash identifier: fEwB6suFe/+NHdY1uGg+uMLqI/GTCP2jHomBGCL/YEs=
Subject key identifier: 0F:A6:9E:E6:C0:C4:23:06:F8:5B:29:59:9B:34:C7:80:04:45:0C:11
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D6222A1691B8CCFF80C9A4AC7D2D
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D6ae5sDEIwb4WylZmzTHgARFDBE.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51999
IP address blocks: 2a0b:b83:d5::/48 maxlen: 48
2a0b:b83:d6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d6:22:2a:16:91:b8:cc:ff:80:c9:a4:ac:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa69ee6c0c42306f85b29599b34c78004450c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:09:3e:76:97:24:fd:fd:5d:eb:cc:32:77:
ab:fb:93:e6:85:ba:12:ac:a8:8d:90:cc:6a:08:2e:
8d:db:9c:ac:13:5e:fe:82:1a:aa:df:85:7b:61:16:
95:8e:bd:a0:14:cb:71:81:39:f9:19:f2:66:80:8f:
1c:32:7b:42:5f:54:e3:e2:12:50:a4:00:b2:88:0e:
bd:f6:1a:84:f8:77:46:ad:8e:ed:ee:6d:a0:a2:7e:
b4:64:db:59:10:be:c0:98:18:11:ca:ad:ae:56:0b:
20:a5:4d:4d:72:d4:53:a2:97:eb:7d:6b:47:7a:a7:
63:38:79:41:5e:f5:22:ba:59:0b:6e:de:93:69:a7:
c4:47:55:87:21:7a:9c:cb:10:0a:65:cf:30:1e:c8:
b8:e4:5f:e9:b1:6a:bb:6c:21:76:79:e8:a9:d9:41:
25:39:c8:21:36:b8:43:00:d7:6a:bd:77:eb:1e:11:
e6:d9:9f:2d:83:51:99:bc:97:75:1c:99:61:94:c1:
2d:20:e3:45:d3:0c:5e:77:d2:60:0d:14:86:42:af:
b9:95:93:f8:51:21:74:a4:c6:41:9e:1e:b7:cf:5e:
b6:93:1f:25:4e:32:cb:cb:db:b8:c1:0b:20:a4:00:
cd:64:33:36:4f:67:28:dc:c3:29:a2:57:7b:b2:76:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A6:9E:E6:C0:C4:23:06:F8:5B:29:59:9B:34:C7:80:04:45:0C:11
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D6ae5sDEIwb4WylZmzTHgARFDBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b83:d5::-2a0b:b83:d6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:ef:4a:b9:72:40:1f:0a:07:fe:ff:86:d0:a6:a2:60:50:a9:
d0:12:97:05:a0:ed:5c:38:45:bc:6c:75:a4:ff:b3:eb:d4:98:
e0:51:b8:00:9a:9c:b9:8a:f4:c0:00:e5:dd:7a:25:bd:49:c7:
26:a0:fb:6c:cb:87:77:88:d6:ef:f7:97:3c:34:19:64:1f:0c:
98:01:52:c7:31:b1:a4:c0:a2:e4:ea:7d:31:a7:88:0c:b5:f5:
24:f4:8b:4c:ff:90:9f:77:2e:c5:97:de:cf:c2:7e:82:2d:5f:
a7:b6:13:71:75:70:90:c6:c5:52:65:84:02:f3:0d:55:0d:0f:
96:c1:9a:62:a1:ec:6a:61:11:ad:11:15:a4:50:06:56:bf:7c:
5d:07:f7:bc:67:f9:11:df:89:81:8d:44:18:b1:25:0c:9f:df:
3a:d2:11:58:84:ca:89:81:32:4c:b7:26:2c:5b:66:63:77:ba:
ab:df:4a:ab:24:46:58:8a:fb:1e:7e:12:00:04:14:22:fd:e8:
e3:5c:0f:61:18:ec:7f:89:9f:25:1c:3d:1c:8e:e5:ee:34:f8:
c6:ba:7d:45:d3:3d:3a:91:54:bb:97:6f:c4:fe:91:90:9c:39:
4d:a1:21:b6:15:94:b0:10:62:0e:06:83:f5:0a:b2:be:7b:1b:
88:60:b0:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:02 2025 by rpki-client