Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/T_tBIVOnk6atlnO-qvOB3SEZFOg.roa
File: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (raw, json)
Hash identifier: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=
Subject key identifier: 4F:FB:41:21:53:A7:93:A6:AD:96:73:BE:AA:F3:81:DD:21:19:14:E8
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E955752ABACCDCB24D04E4E0DBA6
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/T_tBIVOnk6atlnO-qvOB3SEZFOg.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215379
IP address blocks: 2a0a:280:3500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e9:55:75:2a:ba:cc:dc:b2:4d:04:e4:e0:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ffb412153a793a6ad9673beaaf381dd211914e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:a3:be:3f:55:6b:50:64:12:eb:11:c5:53:
a0:b3:ba:39:82:7c:a7:3a:ac:18:17:b1:0d:2d:e2:
b1:e4:b6:59:e8:70:79:83:9e:ce:de:72:d1:73:85:
cf:3c:5c:b3:d6:60:4f:2d:e7:8d:1c:08:bf:2e:90:
da:b5:bd:0c:10:f4:78:a0:ff:49:2e:71:08:aa:35:
9e:15:8a:77:d8:f5:bb:29:09:1e:5c:a9:63:ca:39:
ac:c2:6b:a1:42:e0:d2:ef:8f:53:8b:e5:e4:9b:92:
3f:4f:17:05:c3:67:c1:20:a2:c0:92:b4:1d:8a:a6:
f8:3f:9f:f9:3c:ba:73:99:e6:83:b4:c5:91:05:e0:
dd:6f:14:bd:53:94:24:11:d1:c4:78:91:11:7b:16:
d5:9a:1d:fc:2f:22:92:c5:f3:98:d4:f3:ee:71:29:
30:12:29:66:91:30:6d:b4:81:72:a7:2c:1a:dc:98:
4a:4a:0a:66:22:49:db:48:8d:18:0f:d0:1a:a7:04:
8e:1d:f9:82:53:54:31:6a:ed:c5:61:7a:49:6b:90:
c4:61:b2:a4:c3:a1:3d:01:b7:fc:2f:4b:6d:73:0a:
5d:17:be:8f:2f:5c:32:e7:63:59:35:31:a5:c6:2f:
1d:41:c4:89:fc:f7:0b:3a:2d:1d:4e:50:22:ee:90:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:41:21:53:A7:93:A6:AD:96:73:BE:AA:F3:81:DD:21:19:14:E8
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/T_tBIVOnk6atlnO-qvOB3SEZFOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3500::/40
Signature Algorithm: sha256WithRSAEncryption
01:e4:e4:52:cf:de:09:0e:b7:7e:36:c8:1c:f2:6c:66:d1:4e:
85:00:c1:8d:6e:33:43:e2:57:18:db:64:49:2e:da:af:aa:c2:
a6:d2:84:b3:9f:11:f6:c8:72:60:2b:67:7b:36:ae:54:07:08:
25:d2:2c:50:3c:f0:c1:49:2b:67:c2:68:04:5f:f2:90:d6:18:
8d:65:62:eb:b2:1c:7c:55:95:1b:2c:c4:44:88:b0:43:74:f2:
6b:08:a1:8b:e3:a8:21:ed:88:d1:76:e5:c3:46:51:f2:b8:59:
6d:38:42:9a:43:09:b1:2a:f3:bb:e3:52:a5:d3:99:c0:4f:a7:
06:69:7f:2e:b5:5a:d7:97:a8:0f:a0:de:63:63:11:15:90:d1:
28:a0:42:9d:53:d6:81:7f:6e:28:c7:c7:1b:2a:81:42:16:86:
3c:b9:23:98:84:b8:99:de:94:a3:4d:df:9a:78:2c:d3:d0:1d:
4a:b2:20:d6:ff:4a:f1:c0:4c:dc:20:96:dc:7e:14:f9:d4:52:
a4:c2:76:a6:89:ff:d7:6c:3d:b2:73:74:95:55:a8:2b:eb:d1:
7e:15:a6:f9:ab:75:dd:90:49:60:4c:53:35:14:ab:96:af:d2:
6c:c0:53:57:35:bf:bb:61:fb:f7:97:11:ab:82:d5:7f:9c:30:
a9:7f:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:45 2025 by rpki-client