Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/REmHTTPklFc4BVmxoTMP3qdUJtM.roa
File: REmHTTPklFc4BVmxoTMP3qdUJtM.roa (raw, json)
Hash identifier: vSSGcfE4cBb8ySriQqPyg2kHQHpWViZnJepzZAmOYZk=
Subject key identifier: 44:49:87:4D:33:E4:94:57:38:05:59:B1:A1:33:0F:DE:A7:54:26:D3
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01856D53D5B143D03A029AC0EC52F104FCA5
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/REmHTTPklFc4BVmxoTMP3qdUJtM.roa
Signing time: Sun 01 Jan 2023 12:34:48 +0000
ROA not before: Sun 01 Jan 2023 12:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206058
IP address blocks: 2a11:29c0:3dfd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d5:b1:43:d0:3a:02:9a:c0:ec:52:f1:04:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jan 1 12:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4449874d33e49457380559b1a1330fdea75426d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:8d:02:c9:4e:1b:01:0d:25:b4:79:a3:8d:
75:49:21:3f:58:57:6f:5d:38:30:e5:b4:3c:15:24:
04:87:db:49:05:ce:fe:9e:84:d2:6e:97:09:a1:c4:
70:17:84:32:5a:67:a9:ea:0b:85:93:df:06:45:03:
94:49:27:ba:c1:1f:96:23:2a:21:78:8c:2c:ca:1f:
da:ce:0a:1d:0b:f6:89:77:58:6f:c2:1a:40:c0:5c:
97:67:e2:60:06:e4:c4:f8:f0:d9:d9:33:f7:a8:9e:
f6:48:15:c5:a1:1f:09:a4:32:31:da:8e:fd:9b:43:
ed:4e:3d:35:a0:8c:ad:62:88:27:d2:ed:46:ee:81:
34:6d:b9:9a:b0:e8:0d:ed:95:71:01:0a:50:f2:9b:
1c:3b:1a:d1:30:9f:08:90:47:b1:96:ff:19:b0:26:
df:91:c9:f0:9c:21:80:fa:89:66:4c:2d:2d:30:f2:
7c:80:f4:f9:20:3b:f3:b1:78:9e:b8:9f:60:26:75:
8e:2a:d2:7f:bb:d6:04:7e:19:59:08:10:92:c5:c7:
7a:6e:44:a9:8b:48:44:4e:0d:cd:b3:e4:87:f5:b8:
08:10:8c:75:fe:27:c0:32:1d:9a:cc:4d:2d:78:07:
26:82:b8:37:79:b9:b8:2f:0c:f9:60:2a:e1:21:f8:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:87:4D:33:E4:94:57:38:05:59:B1:A1:33:0F:DE:A7:54:26:D3
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/REmHTTPklFc4BVmxoTMP3qdUJtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dfd::/48
Signature Algorithm: sha256WithRSAEncryption
a8:31:1e:cf:ca:ac:01:6d:72:88:a9:2e:4e:c1:ff:4c:ad:1c:
44:c8:ce:ef:a5:dc:79:30:49:5d:fb:a0:aa:3b:65:11:36:5a:
ca:b2:7a:2d:a3:90:56:e0:8e:5d:79:b9:55:28:30:e2:c0:23:
b5:09:12:35:70:29:c8:dd:86:bd:d0:a6:7c:c4:74:60:8f:d4:
0f:1a:5e:f8:4e:b5:46:e2:58:a6:22:0e:94:24:84:3a:cb:67:
bb:85:66:ee:80:69:62:0e:d5:b1:67:18:a8:b6:9d:cd:7f:25:
f6:e6:83:27:ee:5d:49:5e:3f:03:60:e9:5a:1f:95:c1:5c:f2:
cb:74:ab:0b:71:12:1a:ba:8a:56:10:0b:04:48:fd:d7:9b:05:
4c:f2:17:e3:4c:91:0e:28:99:11:90:5f:33:09:2a:1c:85:3d:
44:60:27:52:c6:a4:a8:bd:fa:fd:48:d7:60:af:8d:0f:03:f9:
5d:a6:d0:08:a2:ef:66:3c:19:e0:13:38:fb:bd:d8:bb:9a:8f:
58:d5:ca:17:b5:07:10:dd:a5:8e:97:87:71:3a:21:ba:d5:c1:
26:85:0d:c0:bb:b3:3b:84:6f:c3:cb:74:cd:96:46:e8:7b:e3:
8b:6d:55:db:85:82:f8:c6:6f:46:7f:60:de:90:2d:5e:19:41:
4f:85:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:17 2025 by rpki-client