Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa
File: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (raw, json)
Hash identifier: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=
Subject key identifier: 73:AC:3D:66:10:C5:76:60:4A:EE:62:33:DD:EE:D3:8F:B7:0A:80:D6
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B5693D46FA47199704EDD9C8C4C529
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216174
IP address blocks: 2a10:4646:3b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:69:3d:46:fa:47:19:97:04:ed:d9:c8:c4:c5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ac3d6610c576604aee6233ddeed38fb70a80d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:b6:ea:4c:ae:05:a2:2d:5e:6a:c9:ab:dd:
cc:76:39:dc:45:e0:41:13:a4:9c:69:7f:a5:5d:4e:
c4:0b:8f:7e:43:65:5f:f6:9f:b8:fd:ed:39:46:ca:
ce:87:97:b5:c5:a5:27:37:12:12:31:47:1c:65:20:
26:94:6c:63:e1:2a:b4:63:45:f5:97:a8:b2:59:17:
fa:fd:99:6b:2a:ce:9f:4e:de:02:e9:cb:c3:65:dc:
f9:a2:81:22:ca:72:25:ac:d3:27:29:4b:40:a2:47:
88:c8:4f:0e:b2:5f:99:9a:8d:df:e1:b2:8f:52:e5:
8d:99:11:de:1f:77:12:58:a8:c4:65:90:6b:57:1d:
a5:eb:0b:af:a9:aa:b3:f6:8f:02:61:ff:6b:c4:4c:
08:3e:74:ca:5d:e9:8d:a2:68:cd:31:d2:75:a7:bb:
b5:14:dd:a5:a5:2c:f0:d8:dd:e3:aa:17:21:06:4b:
2b:43:1d:4d:af:f9:3b:86:c2:08:75:37:a5:78:65:
f5:3c:c0:a7:00:7d:44:23:6f:3c:20:57:84:fb:b9:
b1:74:bf:11:4b:ad:c1:7e:cf:3e:22:8b:84:e7:57:
ed:55:5a:d4:60:7f:97:7e:1b:85:ad:1a:c4:ca:00:
24:3d:62:db:32:83:8b:d0:26:40:16:3e:5d:55:6d:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:3D:66:10:C5:76:60:4A:EE:62:33:DD:EE:D3:8F:B7:0A:80:D6
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
60:a7:7d:17:4e:d0:1c:fc:3e:b1:63:fe:5e:f8:bd:de:b6:be:
90:4b:20:6a:64:9e:8b:c3:31:62:eb:58:49:e1:84:bb:6c:44:
ea:70:2d:e2:01:ac:ee:d6:d2:ed:50:f8:4a:64:08:dc:e6:a0:
a7:f3:be:7a:c1:e2:5b:36:fd:af:19:39:bd:06:c5:c5:da:6d:
87:e8:a1:dc:90:a2:af:f1:b3:54:fd:d1:60:f6:f1:9b:c7:ff:
24:b9:b8:4f:d2:c6:58:2e:17:5b:b9:90:cb:d3:11:f2:de:e0:
2b:41:62:9e:3f:c2:83:73:e5:24:1f:f6:b2:ea:79:8f:04:2d:
aa:d6:ac:35:e7:b9:f8:b8:20:ca:4d:a9:c4:8a:17:71:d2:a2:
32:5b:6c:8c:13:bb:1c:1d:55:99:11:86:1d:f8:20:d5:ad:24:
47:51:ef:6e:1f:9c:ae:2a:c9:42:6c:b7:6c:83:a7:47:b8:72:
8e:e8:ed:c9:6a:20:ff:16:d7:b9:c8:c1:5d:0f:ec:40:07:09:
97:35:c7:8e:2f:75:83:64:51:de:6b:d7:7e:f8:56:45:d8:71:
6a:23:5f:13:4e:54:49:39:e8:73:8f:2a:96:19:62:dd:73:f3:
27:21:5d:27:f1:ec:1f:57:04:85:7f:55:ab:18:0d:b6:8b:96:
0a:c4:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:57:52 2025 by rpki-client