Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jPCQ80F6GeIc_utKD1kL_90tbGM.roa
File: jPCQ80F6GeIc_utKD1kL_90tbGM.roa (raw, json)
Hash identifier: njoy9AKpQhBZLomM8Szm6g/Iu3x34j/mxItiT/Z3RCU=
Subject key identifier: 8C:F0:90:F3:41:7A:19:E2:1C:FE:EB:4A:0F:59:0B:FF:DD:2D:6C:63
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747EFA6D20214737D778708CCD1B4C3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jPCQ80F6GeIc_utKD1kL_90tbGM.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0b:7080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ef:a6:d2:02:14:73:7d:77:87:08:cc:d1:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf090f3417a19e21cfeeb4a0f590bffdd2d6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:05:b5:2d:6c:09:8b:85:67:91:e8:cf:25:
48:e6:68:88:b1:9d:48:52:b3:ee:d8:fd:0e:82:8c:
37:a7:60:71:50:d1:d2:d3:15:d5:bb:72:73:f4:7c:
aa:b1:49:16:8b:ab:7e:08:1e:93:a0:4f:1f:3c:ff:
ba:2a:d6:9a:61:03:a8:c3:59:d3:4d:5a:0e:88:94:
10:de:55:26:70:d3:ca:c0:81:0f:49:94:d9:20:3c:
0d:c7:ca:f4:bb:3f:f9:12:a7:d4:15:d8:0e:19:46:
a3:1d:de:64:9e:2b:a8:64:7f:31:1f:9c:f0:6d:cc:
de:e3:a5:b1:82:46:dd:92:90:cd:0e:49:bc:89:ea:
38:fc:fd:ee:cb:57:54:52:16:13:b7:b3:a3:78:08:
64:76:59:3d:94:12:a2:03:79:02:49:12:eb:40:c3:
bc:0d:be:e9:4e:8d:94:a0:68:1c:3e:b6:c7:8d:c1:
1d:ae:a2:4b:3a:ec:8f:af:76:a6:d8:46:81:0a:79:
f5:74:b6:87:84:6b:be:12:a5:24:ce:a2:c6:b4:b9:
d9:5b:4b:ba:79:10:59:ca:63:37:59:38:6d:53:7a:
fe:21:af:af:a4:1c:76:b3:68:4c:79:ee:04:41:3a:
08:af:89:92:4b:b3:fb:ca:1e:9e:78:6a:bf:f7:a0:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:90:F3:41:7A:19:E2:1C:FE:EB:4A:0F:59:0B:FF:DD:2D:6C:63
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jPCQ80F6GeIc_utKD1kL_90tbGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7080::/29
Signature Algorithm: sha256WithRSAEncryption
16:37:e7:86:2f:d3:78:71:74:df:2d:70:98:e2:71:51:a9:a8:
8e:5d:54:d3:61:d3:d3:46:57:03:4e:ed:09:5e:e2:a9:a8:72:
e5:6a:04:56:94:2a:8e:df:01:92:bf:d5:66:54:58:b1:08:09:
ed:af:fc:ae:3c:45:2f:e9:dc:aa:47:44:fd:81:72:7d:5e:0f:
ec:7f:79:90:86:8f:1e:19:4c:1c:cb:1b:8e:12:27:a7:e7:fa:
b6:78:da:41:91:0d:2d:9c:1d:90:37:5e:3e:09:a9:02:14:bd:
34:a3:61:9b:4a:e2:c3:d8:6f:cb:b8:ed:39:7d:34:b3:3f:aa:
0c:1e:69:d7:06:b7:ed:af:19:8c:65:48:09:6b:da:4d:8b:c5:
4c:92:73:0c:21:c3:17:25:c7:d0:f6:d4:19:2f:ca:ef:30:96:
10:ff:82:53:ad:26:b8:f6:22:f0:13:57:0e:1e:a6:af:54:da:
0f:44:3b:9f:07:71:91:cf:46:cd:d1:c3:f2:bd:a6:b5:12:66:
8e:87:10:6d:a4:02:9c:fe:3f:da:a0:a9:f0:0b:f2:23:38:6b:
98:70:5d:f7:c4:94:dd:d4:62:8e:ed:f1:a8:bf:14:be:29:0d:
19:a6:c9:30:11:86:4f:6d:04:b3:49:35:4f:24:4e:1c:c7:9f:
38:29:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:15 2025 by rpki-client