Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KMhXW8THP6YplxnHbo0e8wMBmo0.roa
File: KMhXW8THP6YplxnHbo0e8wMBmo0.roa (raw, json)
Hash identifier: 3fMVbcDwuRIUeOpdxsAEPZJomF6G668Ej1J8bs65aPc=
Subject key identifier: 28:C8:57:5B:C4:C7:3F:A6:29:97:19:C7:6E:8D:1E:F3:03:01:9A:8D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D4594E1C2EDB0E397FC1D1B2FF07
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KMhXW8THP6YplxnHbo0e8wMBmo0.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44754
IP address blocks: 2a0b:b87:ffe8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d4:59:4e:1c:2e:db:0e:39:7f:c1:d1:b2:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28c8575bc4c73fa6299719c76e8d1ef303019a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:20:14:26:a8:78:8b:20:eb:e9:b4:1e:b9:
5a:d4:a5:f7:f0:c1:4e:ca:d9:f9:ba:65:7a:f5:a5:
d5:3d:14:c4:cb:f1:9b:95:45:af:cb:55:64:0c:0e:
ca:b9:a9:97:af:9c:e9:dc:a8:48:18:08:d0:28:c8:
d0:cd:68:0f:15:67:ae:7d:13:e0:b9:2d:77:75:20:
5b:aa:d7:df:4e:ef:64:32:20:18:6a:eb:3b:25:31:
11:a5:a7:21:d1:52:7d:ee:bc:33:c9:bf:7a:1f:58:
4e:5a:53:76:cc:ba:1c:37:4f:25:bf:af:04:d2:05:
8e:df:93:ed:3b:94:ef:5f:fe:87:37:72:d9:6b:87:
aa:d5:c6:43:92:4a:ab:31:f0:6b:65:7c:d7:c9:4a:
3d:f2:94:fa:e9:77:2b:9f:83:19:02:df:2b:df:06:
6e:95:4b:72:85:4c:ca:6c:ec:b0:69:33:95:e8:0f:
20:1d:48:f6:f3:af:20:44:56:ee:37:71:57:c6:30:
8f:2f:61:ae:d8:45:9c:e6:70:48:8f:d8:c2:0d:cc:
4d:2f:12:06:a0:5d:27:b1:5c:dd:63:43:4c:00:28:
9c:ef:08:d2:5d:e8:47:3f:01:49:f1:8a:86:6b:4b:
35:04:af:9f:75:ab:ef:4a:4b:b1:11:39:14:f6:27:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:57:5B:C4:C7:3F:A6:29:97:19:C7:6E:8D:1E:F3:03:01:9A:8D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/KMhXW8THP6YplxnHbo0e8wMBmo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffe8::/48
Signature Algorithm: sha256WithRSAEncryption
93:a0:27:33:6b:e2:c6:cd:6d:ab:aa:04:6a:d4:e7:d2:ca:0a:
08:65:f0:90:a5:c8:a7:63:6d:f5:fd:c5:58:40:ef:aa:03:24:
d9:43:31:c7:9c:99:18:bc:3a:37:bb:f8:c5:71:3b:2b:79:a7:
45:7b:50:63:ea:7c:05:ad:d7:64:29:1b:2e:d5:14:ce:6b:dc:
ec:93:dc:2c:2a:98:0c:00:46:43:89:18:62:9e:c6:f5:df:b7:
62:51:79:b0:09:4a:9f:6d:8b:6e:bb:fe:c9:aa:7f:88:04:f8:
e3:d4:dd:0b:bd:03:8f:97:fb:53:32:f8:c8:13:77:9f:0a:7a:
5e:69:bc:ad:6a:1b:51:d5:f4:39:0b:7c:c4:6e:52:1f:8c:5b:
b2:e1:5e:03:e5:f3:47:e4:9b:da:ca:4c:f9:3a:e0:2b:d9:d7:
21:19:01:c1:dc:1c:b1:0d:55:3a:37:a2:09:8d:93:5c:d9:50:
26:2d:a5:ad:ee:ec:ab:b8:90:03:f1:5f:0a:05:d5:21:d5:2f:
d7:4b:91:ff:3f:c9:b5:c8:50:94:ec:32:a1:35:02:7b:d7:79:
22:6b:e5:d7:b9:ac:31:cd:3c:1e:46:6d:a4:ff:bb:de:9f:2a:
04:4b:34:25:bd:72:97:1d:ce:83:1d:ca:16:df:7e:03:4e:ff:
1f:41:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:15 2025 by rpki-client