Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iZ0biYs7YPWymIuhlq8N8ERjBEg.roa
File: iZ0biYs7YPWymIuhlq8N8ERjBEg.roa (raw, json)
Hash identifier: 23Sp8zCG5wFILQvQI7EH6RTR+nwPS+gf5DWjifv/64Y=
Subject key identifier: 89:9D:1B:89:8B:3B:60:F5:B2:98:8B:A1:96:AF:0D:F0:44:63:04:48
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E471E59835CD22B52E25BC7F0CB9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iZ0biYs7YPWymIuhlq8N8ERjBEg.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208885
IP address blocks: 2a0b:b86:ffe4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e4:71:e5:98:35:cd:22:b5:2e:25:bc:7f:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899d1b898b3b60f5b2988ba196af0df044630448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:e6:e1:42:09:56:5d:2f:ed:bb:8f:fe:f4:
2b:36:58:43:a4:bc:23:9a:ad:e0:67:f9:06:26:59:
d3:c9:8c:4a:ee:d4:7e:16:e9:9b:24:bc:3e:fe:5b:
3b:d8:ce:43:51:c0:2f:d2:d2:3c:06:6b:be:1a:4d:
d1:44:b9:3d:6d:e1:92:d1:a6:50:01:51:49:13:71:
e0:71:cf:8c:03:57:36:02:49:50:a3:98:1a:d7:5b:
9a:31:6a:d6:8e:91:83:79:77:03:33:37:63:3b:f8:
b8:7b:d3:eb:00:b3:00:17:f5:52:c3:2e:25:f7:86:
60:4a:37:41:47:df:05:8c:82:59:c5:e5:ab:1b:20:
18:32:dd:df:68:50:09:5a:fe:94:8a:7f:72:70:db:
64:62:30:6f:16:2e:96:35:c5:a8:d5:96:75:4f:91:
fd:6c:b4:96:dc:c1:7c:27:dc:d0:7f:52:30:2f:48:
1c:e8:4b:4c:93:95:0a:ac:06:b3:c3:be:ee:8c:9e:
9c:85:6a:46:91:77:04:cf:e8:53:c7:ef:84:6d:4f:
b0:8e:77:2a:54:14:e2:47:c3:4e:ae:d1:e4:9a:1c:
c0:d8:9c:dc:70:2b:7a:c6:92:a4:9c:02:92:d3:33:
a5:37:9f:6c:be:16:44:86:df:19:3e:1a:49:68:11:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:1B:89:8B:3B:60:F5:B2:98:8B:A1:96:AF:0D:F0:44:63:04:48
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iZ0biYs7YPWymIuhlq8N8ERjBEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:ffe4::/48
Signature Algorithm: sha256WithRSAEncryption
8e:8b:e6:d0:62:78:4c:67:9f:c3:34:1f:48:e7:1a:8a:6b:3b:
9b:fc:72:93:a9:01:75:69:e6:71:bd:c0:0a:70:4c:81:c8:73:
47:36:a7:6d:b4:d0:e3:a7:bc:c1:1c:49:00:6e:57:84:40:e7:
6d:1a:12:93:3a:19:fe:b0:38:b6:89:8d:5e:4b:49:ee:b7:a3:
12:74:1b:5f:18:1d:42:b5:b1:ee:0c:13:b0:6a:3b:33:50:28:
13:40:1c:38:a1:39:18:0c:0a:9a:96:d3:db:9b:49:c9:b2:8e:
8f:b6:6d:27:8b:27:c2:a3:8a:61:be:b4:a7:73:3e:fe:f5:37:
ed:d0:a9:13:f9:6a:f8:15:e3:d6:88:37:98:c1:23:99:1f:82:
11:b5:4e:76:49:da:56:90:13:ea:89:17:f4:06:b8:da:85:e6:
71:44:0f:9d:34:8d:f8:ca:1d:c5:fc:03:19:e1:a2:65:77:0c:
54:cf:d5:83:76:72:bf:13:3a:b6:31:12:a4:63:18:af:c9:bb:
a8:cb:eb:61:7a:d2:c5:c4:89:86:f7:84:e3:dc:24:85:17:74:
5a:8a:07:e6:58:23:9f:c7:03:70:6d:48:05:5b:d4:cd:55:cd:
34:f8:94:34:a5:d9:ec:77:15:8b:e1:22:ec:a4:ac:0e:c4:d8:
80:2c:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:33:47 2025 by rpki-client