Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa
File: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (raw, json)
Hash identifier: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=
Subject key identifier: F7:FD:96:AD:24:80:2A:53:75:10:83:C7:E0:82:F4:39:6E:7A:32:B4
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B648D6107D3E3C68E329385CB40AAD
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 2001:67c:1164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:48:d6:10:7d:3e:3c:68:e3:29:38:5c:b4:0a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7fd96ad24802a53751083c7e082f4396e7a32b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:b8:7f:1c:e2:b8:c3:09:98:12:de:72:af:
d4:1b:70:6c:44:97:2c:2b:15:ab:bf:70:ca:1e:ce:
04:00:d8:3a:b9:38:28:0a:a7:ef:80:ea:6d:1c:1b:
e1:ae:f0:0f:e4:51:80:09:98:14:b6:90:c8:97:4b:
b0:7a:0d:aa:70:29:e2:47:ac:eb:2d:ae:11:c3:3e:
d9:f3:92:0f:f7:b3:81:c4:e0:4f:19:82:e6:11:0e:
13:d9:85:64:02:3e:99:f6:58:eb:0a:c5:ea:5d:96:
61:65:dc:a4:3b:81:46:c1:1b:2e:c2:c4:ad:83:ba:
b5:e2:28:fc:5b:c6:f6:3a:8c:41:60:89:cf:39:c7:
48:e6:3a:c8:27:3d:63:e8:68:f4:c5:4e:09:68:b9:
0f:35:a5:a2:da:23:e1:26:5e:44:73:98:b6:b1:7e:
4f:1e:78:ee:72:e8:62:ff:0c:11:ca:88:33:73:2b:
f3:7f:7a:d0:ce:ff:3f:54:0f:7f:9a:c8:8d:cf:20:
64:ab:21:05:06:34:33:2d:20:79:58:7d:d2:7b:83:
f7:1a:57:1d:4e:f2:b6:69:70:5b:6f:4d:c3:a8:a2:
2f:d8:c2:3e:ec:76:e7:50:1f:e5:40:a2:7c:50:40:
1a:b5:ed:c8:76:64:c2:fb:87:c4:b3:4a:dc:ec:b3:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:96:AD:24:80:2A:53:75:10:83:C7:E0:82:F4:39:6E:7A:32:B4
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1164::/48
Signature Algorithm: sha256WithRSAEncryption
9a:b2:b2:ea:84:1c:ec:e5:00:d1:23:9b:88:99:c4:9c:96:a1:
89:a4:5e:47:4f:fe:ba:66:35:9b:52:c5:9f:f0:91:c8:d3:7c:
a0:13:ce:17:05:f4:23:40:86:9a:80:a4:8b:77:17:cb:c5:6a:
ae:9b:6d:af:3d:9a:5b:56:39:6c:e5:03:7d:c5:43:66:16:19:
c5:fe:52:c9:d6:c7:94:05:d8:53:2c:0d:21:90:0a:ec:9c:3d:
5c:b8:d1:23:a7:b8:4e:98:de:61:31:20:29:1e:83:57:b2:5f:
d0:cc:5b:c8:81:39:8b:cc:14:44:f9:69:58:68:0b:1e:d8:14:
51:78:7f:c5:13:58:6a:e1:2e:ff:a6:c7:f4:8c:c4:c1:56:bb:
db:d3:88:ba:bc:30:ec:d7:3b:74:b4:31:cd:87:ed:b2:46:02:
eb:c5:ac:8a:29:80:cd:03:17:0d:35:75:c3:d5:fc:a5:64:bd:
30:06:f3:f0:86:3c:c2:1e:fd:3c:9a:53:d1:bc:5a:21:ae:cf:
9b:a2:df:28:91:6d:9a:64:b3:8a:66:a6:ff:1a:77:99:97:f9:
04:bd:66:0a:b3:72:1e:4d:c3:fd:1b:c9:37:1b:06:6d:b9:0c:
b4:01:8d:15:9a:1b:a3:04:e7:e0:57:a8:c6:1c:ec:de:7c:c5:
b3:ed:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:02 2025 by rpki-client