Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s-ve3F8tXP4595quse_pLEBwHiM.roa
File: s-ve3F8tXP4595quse_pLEBwHiM.roa (raw, json)
Hash identifier: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=
Subject key identifier: B3:EB:DE:DC:5F:2D:5C:FE:39:F7:9A:AE:B1:EF:E9:2C:40:70:1E:23
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DEDFAF129E3CA12FF52AFAFE6CE9
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s-ve3F8tXP4595quse_pLEBwHiM.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200160
IP address blocks: 2a0a:280:1100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:de:df:af:12:9e:3c:a1:2f:f5:2a:fa:fe:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ebdedc5f2d5cfe39f79aaeb1efe92c40701e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:b1:e9:7b:ea:d4:31:f0:ad:76:d3:43:f0:
b2:d5:35:bd:eb:ee:dd:1f:20:d0:96:9e:b5:b4:e3:
44:6f:3c:ba:31:46:a2:b3:77:23:d6:53:e7:8b:d6:
c4:b1:36:92:c6:8b:2b:d4:33:8d:c3:ff:c9:34:27:
4b:48:0a:d1:b5:50:3c:56:13:54:72:2f:2a:ae:1f:
2f:30:b8:cd:1f:9c:c0:a6:b9:27:83:91:e1:22:4c:
38:8b:34:a7:2d:54:a2:e7:4c:05:52:d7:cc:81:2b:
97:35:cf:ba:0f:c2:bf:68:61:68:ee:da:82:9b:80:
11:11:aa:76:9f:3d:03:4a:98:cd:30:07:88:82:90:
86:11:62:b4:2a:12:d3:a1:3c:f6:45:2e:98:43:3c:
38:a3:51:aa:a8:7e:72:05:e4:59:3c:af:40:ee:2d:
16:e1:d1:fd:39:96:d9:3b:32:fe:f2:9b:cc:89:c9:
c2:b0:c0:c6:46:1a:ee:00:62:ab:4c:52:3c:b2:7b:
c5:a4:37:c2:d9:89:4a:f2:bb:99:0f:e2:0a:bb:23:
03:d0:62:c0:d4:16:4d:37:d8:3f:3e:15:a6:0c:07:
8b:6a:a5:ef:33:5c:dd:4c:94:37:29:b7:e3:1e:c5:
b1:31:89:8e:2d:28:b7:14:31:e6:f6:d6:ae:5e:42:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:DE:DC:5F:2D:5C:FE:39:F7:9A:AE:B1:EF:E9:2C:40:70:1E:23
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s-ve3F8tXP4595quse_pLEBwHiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1100::/40
Signature Algorithm: sha256WithRSAEncryption
25:8b:74:22:e0:52:e3:ce:dc:82:22:76:79:dd:49:8a:be:1c:
76:ed:8a:3f:7c:f9:c9:1c:da:90:fd:58:0b:07:65:81:a3:16:
8a:31:7f:7a:07:c3:8e:b8:51:2a:62:ab:ba:98:62:7c:d6:6c:
1d:60:c2:ab:64:0c:67:56:d7:ba:9b:45:12:6d:88:99:12:ad:
0d:86:d7:d0:65:2a:4e:b2:9d:1d:09:ad:21:89:84:34:8f:85:
3f:ed:d6:a3:0e:93:de:ad:dc:3b:a8:7a:5c:1c:1e:c5:f5:b7:
df:c5:f1:2a:1e:ea:cd:2f:c4:6d:e3:f9:ba:67:60:44:e1:78:
a7:6a:4e:a5:3e:bb:b0:19:72:ed:20:f8:62:bd:12:e4:c9:c0:
df:db:dc:80:33:df:a5:bc:cc:5b:ae:56:fe:2a:6b:f5:c1:9f:
45:97:fd:80:f1:77:d3:d7:c3:50:f9:a3:1f:21:63:0e:54:fa:
e2:8f:c6:f8:03:08:1c:73:cd:77:33:92:17:ca:a6:65:0d:10:
d0:10:fc:3d:1b:d2:58:75:78:ad:5b:9d:cd:c6:f9:63:f1:63:
45:97:db:37:17:2f:fe:02:b9:a3:0d:20:6b:ae:7f:ca:5a:c3:
46:71:a3:6d:56:70:fb:d5:b4:b3:6d:46:18:4c:08:fe:b6:56:
e6:aa:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:21 2025 by rpki-client