Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/DA2bDUhWsbFIIGjx_ycqlDhR74Q.roa
File: DA2bDUhWsbFIIGjx_ycqlDhR74Q.roa (raw, json)
Hash identifier: 28aKq31k7BPwDvAWNEL4yRR06aqFRNQg/arwfnvjHZI=
Subject key identifier: 0C:0D:9B:0D:48:56:B1:B1:48:20:68:F1:FF:27:2A:94:38:51:EF:84
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CB69826E1B556645D7983FE24F94
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/DA2bDUhWsbFIIGjx_ycqlDhR74Q.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0b:b87:ffef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cb:69:82:6e:1b:55:66:45:d7:98:3f:e2:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c0d9b0d4856b1b1482068f1ff272a943851ef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:cb:49:81:96:e4:ed:54:69:bb:4e:08:ef:
29:31:6e:91:cb:e6:26:f1:81:f7:86:92:2d:bf:fc:
f8:bb:82:b7:e9:d9:81:23:be:9f:b3:fb:3e:4b:e3:
da:7e:a5:ce:1f:c8:71:76:02:ba:71:44:5a:88:87:
50:96:a3:bd:c2:8b:d8:52:80:68:a0:59:00:a1:ba:
17:5a:cc:1d:b1:30:b9:9a:bc:bb:63:50:67:85:25:
31:dc:59:8f:48:be:8b:f5:4a:16:1a:4f:1e:02:f7:
9a:49:b3:6e:e3:47:53:87:ff:c6:43:f5:93:34:ec:
eb:0c:2c:d3:ae:67:c7:b8:90:ea:97:6e:d1:05:ab:
42:2d:79:3b:9b:20:ce:fd:54:b0:13:e8:76:38:59:
7e:d4:df:99:fb:e6:91:ee:60:b9:a3:f8:f1:51:27:
c1:ce:89:53:b7:7d:4c:e5:52:ee:e5:3b:f3:90:b8:
73:7d:59:64:37:ce:c1:01:9a:50:a4:0c:d0:84:1b:
a6:2d:4c:c1:56:a1:11:6a:90:5c:77:ec:28:9a:a8:
a9:fe:fd:d3:64:76:24:5f:ed:b8:68:39:7a:d6:e9:
36:92:a2:4b:8c:55:3f:41:6b:3c:7b:b2:53:59:7c:
0a:c0:8c:99:72:97:f7:be:be:9b:16:44:f8:a1:10:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:9B:0D:48:56:B1:B1:48:20:68:F1:FF:27:2A:94:38:51:EF:84
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/DA2bDUhWsbFIIGjx_ycqlDhR74Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
c8:47:2a:5b:37:4e:77:d2:08:ba:0e:e6:ed:0a:55:32:af:fa:
cb:00:09:ac:90:1b:b9:c5:9f:c1:3d:73:9f:5a:41:cd:0f:74:
7c:f5:84:b0:ad:02:cf:02:57:37:76:1d:74:04:02:ef:09:bb:
c2:77:50:2b:b4:3f:3a:59:3c:54:ba:15:51:64:8f:3e:a1:0b:
63:03:21:52:36:41:4f:dd:6f:20:18:f6:53:4d:64:c5:62:d2:
21:c0:d6:9f:3d:e0:4c:c3:e7:eb:50:e0:91:9d:5a:d3:6a:1c:
f1:f4:49:80:e1:85:a6:c2:86:2d:9d:1e:a4:5a:93:62:5e:8b:
6a:2e:c2:e1:c0:53:43:b4:78:4e:0c:d6:09:3b:2b:af:7d:60:
e0:1e:39:05:77:29:b3:b1:fe:be:3b:85:6d:5a:86:86:61:ef:
40:31:d5:74:c4:49:ae:78:7e:5c:54:2a:f6:27:49:58:d0:a3:
06:c3:84:90:b9:a6:39:da:e0:94:90:a7:b3:fb:ae:98:d1:cf:
92:62:0e:61:3d:5f:60:78:be:43:c9:85:28:89:5d:8e:83:d1:
eb:39:a3:9d:18:89:c6:5e:05:9d:2e:d6:11:9c:84:1a:70:ef:
0a:79:a2:c1:db:cf:d1:b7:bc:f5:33:45:31:33:5c:df:bc:34:
30:8d:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:02:22 2025 by rpki-client