Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jR6B6upcDz-k-D33X5cUCpKNQhY.roa
File: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (raw, json)
Hash identifier: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=
Subject key identifier: 8D:1E:81:EA:EA:5C:0F:3F:A4:F8:3D:F7:5F:97:14:0A:92:8D:42:16
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E0112007BD0D4358AB8602FF20DE
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jR6B6upcDz-k-D33X5cUCpKNQhY.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:280:1d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e0:11:20:07:bd:0d:43:58:ab:86:02:ff:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d1e81eaea5c0f3fa4f83df75f97140a928d4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:b5:f6:fc:a0:b6:50:46:8f:71:9f:1a:31:
a3:17:39:be:ce:28:a6:24:53:82:37:79:57:0a:c2:
67:73:74:5b:01:8c:1c:16:df:e5:27:34:ec:db:bc:
a9:19:5b:a4:c7:23:22:c7:fb:f9:65:50:60:16:65:
28:6b:b5:52:b0:20:8c:7c:c1:32:95:93:3b:fd:8c:
70:58:d0:29:17:11:02:4d:ad:5d:26:b3:1d:d0:5c:
92:56:0b:7d:59:db:8b:36:b9:1e:d2:13:f3:22:9a:
8c:3b:22:81:c6:85:7b:0d:54:24:1a:a2:33:3e:f0:
31:2a:1f:22:96:23:c1:39:dd:04:1d:c8:cd:ff:94:
08:15:fc:2d:3a:e5:d7:63:d5:73:91:aa:4f:d3:fc:
ef:92:f7:89:c8:97:78:46:d6:9c:43:0d:2a:6b:42:
26:ad:b5:ed:46:cf:34:f6:76:a4:d9:6d:e8:a6:72:
f6:34:77:8e:27:db:b1:4c:e1:a5:03:d0:67:db:d0:
71:ac:d1:86:f7:32:a8:de:26:d4:a1:c4:ca:d8:71:
ea:ac:b5:90:80:d1:78:2f:74:81:32:1e:b9:4b:d3:
18:2f:e4:49:b0:77:76:df:30:5d:a2:60:57:14:11:
df:a9:85:7f:a5:bd:58:33:10:c1:58:ff:e0:16:68:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1E:81:EA:EA:5C:0F:3F:A4:F8:3D:F7:5F:97:14:0A:92:8D:42:16
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/jR6B6upcDz-k-D33X5cUCpKNQhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
70:a4:19:c5:f8:77:75:d1:31:cf:98:32:d3:ea:9f:4a:6c:1d:
0d:44:fb:3a:e4:e7:9d:49:97:8b:a1:37:b5:67:20:e8:4c:2a:
c0:89:ce:e1:d8:e5:86:1e:cd:7b:50:1d:d4:0d:5f:fa:6c:e6:
fe:5a:44:64:d0:dc:de:a4:b1:3c:7b:02:33:95:f3:4c:70:4c:
12:42:b7:fd:69:71:32:2e:69:7c:c6:14:72:eb:bf:d3:2d:43:
a2:41:97:bb:ee:32:82:24:a9:66:47:ea:bc:3c:96:3e:62:48:
e2:74:40:6c:b8:ce:f7:d5:c8:7b:8e:b7:58:7d:c2:ce:bc:08:
1e:6e:da:05:a7:c1:a6:9c:9e:8b:9c:e6:f0:15:0b:5d:b2:ce:
3c:de:02:c9:a3:d7:fe:cf:38:1a:0e:f0:e3:f4:f1:1f:fb:a1:
96:95:68:dd:fe:b3:75:19:55:00:cc:37:dc:45:f8:e4:aa:d0:
03:0a:e2:04:44:6b:c1:58:a3:c7:0d:87:84:69:53:ba:7f:d2:
f4:7c:04:24:7c:ab:ec:65:63:bc:a9:16:67:17:4b:e7:c0:3a:
61:89:2b:13:f7:b3:21:66:01:e3:ed:24:8d:19:f4:c1:b9:37:
c4:fe:d3:00:96:c8:22:05:69:48:18:0e:8b:3c:8b:45:53:78:
aa:6a:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:45:09 2025 by rpki-client