Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aKYsxoli7O3iEQC0gMkqMH_dw7Y.roa
File: aKYsxoli7O3iEQC0gMkqMH_dw7Y.roa (raw, json)
Hash identifier: V+CuiTpbtZ+ia6vJIspfntc2zujqU+fXqtD48f2i3zU=
Subject key identifier: 68:A6:2C:C6:89:62:EC:ED:E2:11:00:B4:80:C9:2A:30:7F:DD:C3:B6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747EA938AA8A350B04548A64DB6F1E2
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aKYsxoli7O3iEQC0gMkqMH_dw7Y.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211248
IP address blocks: 2a0b:b87:ffb4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ea:93:8a:a8:a3:50:b0:45:48:a6:4d:b6:f1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a62cc68962ecede21100b480c92a307fddc3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:44:e1:d7:5d:50:9b:32:5a:b1:88:44:2a:
8a:4a:35:49:7a:2f:fb:de:2c:b0:88:76:53:e5:37:
76:7d:db:70:30:67:4d:d0:5c:de:6e:29:b7:7e:e8:
9d:de:ea:b9:9f:59:aa:3d:30:d7:90:3f:d8:aa:be:
ec:84:c0:f0:68:7b:31:43:03:aa:8a:f2:b4:17:a2:
d8:5c:0e:48:4e:92:1c:18:06:c8:e9:ee:c2:a1:67:
5b:34:36:30:4e:16:34:28:e6:4c:43:66:76:56:04:
9b:af:71:4f:47:b6:69:7f:4d:d4:be:36:c5:71:77:
94:ed:4f:a9:a3:c2:82:ae:f8:7d:c4:a1:fc:85:10:
d5:e4:c7:1b:8b:04:48:1f:b1:b1:d6:af:80:0c:b2:
a4:67:cd:df:d7:fe:bb:9a:95:df:79:b9:55:00:b8:
a1:9a:78:c7:55:37:80:c6:27:77:9d:f6:cf:1f:e3:
a5:ba:08:16:ab:f4:01:10:61:bd:33:b0:4b:65:ed:
cb:00:92:78:e7:a2:9e:ef:c7:88:11:65:33:f0:d9:
02:57:de:6d:67:12:1c:52:d9:ea:d0:17:44:d6:97:
14:10:d4:0d:66:25:ba:ff:6a:43:06:4c:77:a2:17:
8d:d5:a3:be:79:b7:b3:dd:ad:68:0c:1e:46:fa:38:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:2C:C6:89:62:EC:ED:E2:11:00:B4:80:C9:2A:30:7F:DD:C3:B6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aKYsxoli7O3iEQC0gMkqMH_dw7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb4::/48
Signature Algorithm: sha256WithRSAEncryption
8b:10:fa:b1:b9:fb:9d:3e:c7:5b:47:e2:c3:a5:30:6d:74:f5:
d4:a5:24:9f:c1:1e:13:a3:f0:25:d6:46:3f:2b:06:18:b6:97:
11:6a:99:c2:ff:79:4f:3b:5c:bb:bd:15:ad:00:f7:ec:a8:7f:
19:ed:e5:d8:da:dd:3c:da:02:a0:6d:3c:e9:84:6f:cc:62:2d:
31:3e:7b:a1:4f:bc:29:08:b2:33:7f:f8:72:5b:c9:0c:61:1e:
d6:c4:d0:a6:17:70:3a:06:e9:25:b3:cf:36:27:f6:0b:1b:c3:
31:e6:da:4c:06:12:bb:1c:2e:09:1b:49:bd:d1:46:98:e5:bc:
8d:30:1a:eb:9f:db:5b:67:a8:9f:7a:06:9b:a0:08:70:ea:8b:
f0:6a:26:13:26:2a:85:b7:72:18:3c:5e:46:5c:69:fb:6f:1e:
37:f5:83:ce:13:55:75:56:90:6e:a0:3e:70:41:b3:f9:3c:c2:
c4:c3:74:bf:57:5b:3a:4f:db:9e:23:8b:61:f6:cf:64:09:ff:
14:dc:8d:e4:26:73:e4:b9:ea:09:e6:82:99:8e:9e:37:94:08:
66:cc:d0:fa:f7:da:7c:4b:ab:52:b3:15:29:75:0a:3c:65:58:
02:e3:93:7a:bf:c0:b7:61:0f:a8:c7:d7:2e:f3:8f:46:5a:a0:
51:e6:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:02:24 2025 by rpki-client