Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_H0Qq13m_e5p4Qu9kLynkpk4n_o.roa
File: _H0Qq13m_e5p4Qu9kLynkpk4n_o.roa (raw, json)
Hash identifier: bvzkKU2fGfJKBcxI1nTyuqJ2fFgid4NpcIKwzE0o7Lw=
Subject key identifier: FC:7D:10:AB:5D:E6:FD:EE:69:E1:0B:BD:90:BC:A7:92:99:38:9F:FA
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E557DBF03BE6B2BFEF93C11D30DE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_H0Qq13m_e5p4Qu9kLynkpk4n_o.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209556
IP address blocks: 2a0b:b86:ffe0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e5:57:db:f0:3b:e6:b2:bf:ef:93:c1:1d:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7d10ab5de6fdee69e10bbd90bca79299389ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:61:43:de:13:55:f9:8d:e5:e1:e6:55:98:
5d:4b:72:18:ba:5f:1d:f0:66:ae:3d:de:a8:ef:8a:
40:0a:40:7e:dc:13:46:9a:41:fe:c5:39:98:cc:bd:
e5:68:01:2b:f5:3b:de:d3:bd:de:36:e1:fe:73:9e:
b4:49:36:eb:4b:b3:5e:7b:6a:52:32:d4:c9:9b:fb:
43:50:6b:68:04:fc:b8:12:74:45:45:34:29:21:ed:
e3:1b:cf:cd:44:5a:e0:12:49:13:a1:c0:32:9b:23:
42:aa:4b:03:98:98:c5:f4:37:09:97:c6:3e:5c:52:
43:9c:2a:ac:13:ef:7b:67:8d:6a:d7:97:2a:55:ac:
53:ad:0b:1a:7a:2f:ba:f1:76:1f:7c:41:64:ce:c6:
b5:ab:1a:6c:db:c2:db:74:ee:85:26:6c:22:92:b4:
19:68:b5:76:95:77:a5:50:2b:9b:0f:51:ca:6d:1b:
b6:7d:0b:b0:17:67:c2:6e:4b:23:6b:80:0b:97:0b:
ca:13:28:03:83:81:dd:09:02:f7:60:ce:a7:35:c2:
ce:b1:8a:f1:16:a8:24:af:d2:f1:d6:1f:0a:a5:4e:
52:95:c9:fd:a6:7e:82:a7:ca:09:4d:58:bd:f3:7c:
c4:e4:f7:42:07:8e:76:22:64:06:07:6f:50:cd:d2:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:10:AB:5D:E6:FD:EE:69:E1:0B:BD:90:BC:A7:92:99:38:9F:FA
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_H0Qq13m_e5p4Qu9kLynkpk4n_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:ffe0::/48
Signature Algorithm: sha256WithRSAEncryption
43:16:ea:42:b6:ff:44:ff:ad:42:ef:53:a6:15:63:ce:64:f6:
ef:de:ce:ac:84:89:d3:d4:b0:54:49:f8:67:0c:b8:ab:f4:fc:
7f:42:32:98:db:87:b4:99:86:e1:4f:b6:b3:93:b8:e4:31:39:
b2:a7:58:92:c4:80:43:20:0c:12:0b:4c:82:2f:03:68:57:14:
f6:17:03:e5:63:74:d0:72:a1:ef:4c:da:36:95:68:b0:f9:e2:
52:b3:31:cd:b1:f7:79:cb:cb:6f:86:dc:f5:04:47:4a:76:a3:
90:c1:b9:10:fc:34:c8:cf:02:51:88:60:5b:64:7f:57:0b:c7:
41:6d:d7:c8:46:f1:00:65:82:0b:d3:4a:e1:26:c2:48:25:33:
b5:d2:56:19:fa:07:ff:b3:a5:02:a2:53:86:6c:1c:0a:99:29:
af:e8:6e:3a:d8:e4:25:34:c2:d1:d9:1f:bb:8e:26:2f:44:c4:
5b:4d:bc:8b:55:a3:a2:0c:dd:30:b0:cb:e9:fa:9d:1b:b3:86:
82:d0:e7:1a:e9:86:b1:8a:90:3f:51:67:87:12:c4:5d:ae:24:
d6:ce:9c:37:d4:c1:fa:3b:69:d9:0c:6f:e7:95:bb:44:f1:08:
29:9d:79:4d:71:36:e9:a4:45:1e:9a:14:0b:28:3a:8a:a2:26:
2b:48:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:51 2025 by rpki-client