Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa
File: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (raw, json)
Hash identifier: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=
Subject key identifier: AE:2C:95:7E:3F:56:16:50:43:2A:5F:90:8F:40:ED:4B:DC:03:D8:8E
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C322D064BFC138AAFECF975655C3
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49030
IP address blocks: 2a01:240:ab01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:22:d0:64:bf:c1:38:aa:fe:cf:97:56:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae2c957e3f561650432a5f908f40ed4bdc03d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:d4:8e:29:43:ae:e7:20:36:3a:55:6d:b0:
73:10:c0:5f:c4:ea:44:97:43:81:5f:b7:11:22:17:
68:23:06:7e:94:bb:e7:d1:27:4d:ca:67:85:c0:f8:
9d:42:da:6d:3b:a6:31:1b:9d:a4:10:7c:2a:ea:f9:
d2:4f:96:9a:5c:19:a0:79:15:bb:29:24:df:aa:ea:
ce:f8:5c:fa:22:9d:4d:d1:01:f7:e0:d5:ba:4a:68:
3a:8f:72:2d:9e:30:ce:d6:29:d3:71:45:90:60:fb:
da:7f:fb:8c:dc:7d:ab:8f:cb:9a:b4:36:41:f2:ba:
cb:d0:66:cf:42:12:2e:be:26:81:9d:d5:da:83:71:
ab:fd:48:ad:0e:d9:56:39:56:ff:1b:ef:09:73:5d:
3d:83:1b:97:8a:7a:7e:1c:67:f5:31:34:b6:d0:1d:
36:dd:87:15:c5:ab:a7:5d:07:2d:f8:ec:61:17:4e:
47:d6:95:d7:ab:e3:33:27:c7:f7:54:9d:e5:af:31:
d8:ed:de:15:34:c8:54:1b:8f:86:11:9f:3b:b7:ef:
21:d6:b4:c0:3d:80:e3:ad:f3:91:5c:8b:f7:db:07:
66:12:03:85:59:21:f7:db:aa:66:bb:aa:cf:98:a1:
f9:bd:9d:e7:5f:04:4b:e4:75:ca:70:3d:37:73:25:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:95:7E:3F:56:16:50:43:2A:5F:90:8F:40:ED:4B:DC:03:D8:8E
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:240:ab01::/48
Signature Algorithm: sha256WithRSAEncryption
51:95:fb:4d:57:0e:f4:b2:38:e4:ee:89:25:6b:58:7e:b7:06:
c1:e5:02:7f:ac:63:50:a5:36:a1:e6:dc:96:15:fc:21:0f:bd:
52:73:e4:7b:52:7c:0e:e8:17:94:be:c7:7f:b0:5e:21:d9:6f:
0b:ee:a6:5a:7c:dd:0d:d5:ab:47:9f:63:59:c3:f0:ae:a8:d4:
9f:60:71:7a:a1:e1:99:df:0c:3d:11:ac:d8:0b:d7:e7:75:1f:
fc:b4:4e:e6:51:e2:a9:9a:62:b8:62:77:b5:a9:16:d2:34:b2:
dd:71:00:8b:45:b7:8d:74:37:9b:62:61:be:b8:eb:c5:e1:6b:
f1:a7:22:b4:d1:ca:5c:cc:9a:f8:bc:8f:44:8f:ac:4e:61:cf:
eb:de:36:ce:df:56:70:d5:b7:10:21:cb:e8:81:70:cd:77:f9:
b5:a2:a6:15:e8:2f:f7:2e:6a:b4:52:2d:b1:18:a7:a5:15:83:
6f:1f:b3:10:0d:7e:8d:91:fb:9a:66:0f:d9:a8:16:52:7e:1d:
9a:1f:82:26:f0:71:14:f0:05:a6:c7:a9:5f:df:7f:d7:19:0d:
77:89:c4:56:76:8d:01:aa:c6:93:91:35:17:fe:c9:57:75:36:
d0:5a:01:3a:d9:b4:08:16:a5:e0:86:0a:bb:d3:eb:09:7f:a0:
7f:88:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:21 2025 by rpki-client