Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/094z1xKhD-fPImqcpq7FnS51L8I.roa
File: 094z1xKhD-fPImqcpq7FnS51L8I.roa (raw, json)
Hash identifier: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=
Subject key identifier: D3:DE:33:D7:12:A1:0F:E7:CF:22:6A:9C:A6:AE:C5:9D:2E:75:2F:C2
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019427B5847FBE000EC61B377EC5948F06A2
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/094z1xKhD-fPImqcpq7FnS51L8I.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48606
IP address blocks: 2a0c:5705::/32 maxlen: 48
2a0c:5705:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:84:7f:be:00:0e:c6:1b:37:7e:c5:94:8f:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3de33d712a10fe7cf226a9ca6aec59d2e752fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:3a:3e:e1:63:ae:5e:c7:25:be:a8:4e:27:
8f:74:ed:65:89:b2:5c:1a:3a:84:85:69:de:79:79:
ff:aa:0b:74:f6:8a:d3:71:54:fa:eb:68:9a:ac:c3:
ce:59:7a:e2:20:db:89:19:b9:69:dd:c0:5d:ba:2c:
aa:63:2e:c7:b3:f2:d0:5f:25:19:8a:3e:61:a6:93:
19:66:32:0b:b3:db:98:93:a6:8d:47:6c:ea:8d:af:
37:6b:7e:0f:17:46:1f:ee:bf:ca:22:e0:1d:70:5f:
1f:c6:ad:15:a1:49:db:2b:25:b8:01:00:f7:99:1e:
0a:16:dc:7b:0c:34:72:4b:6f:b0:b9:f0:45:48:37:
57:07:25:75:72:0a:6c:5f:0f:5d:27:16:b7:24:86:
b6:f1:98:a8:06:07:43:af:30:ab:e5:db:72:a2:51:
96:b9:46:fb:92:f0:f7:c8:1a:c4:d6:03:c6:1b:fc:
88:ca:28:db:8e:d5:c1:25:9d:05:58:f7:d0:dc:aa:
20:76:1d:05:74:6d:9f:ae:cd:df:5f:da:02:7f:e6:
91:3a:f4:0d:12:c1:a6:f4:4d:53:11:9b:42:66:65:
76:f8:e4:18:83:75:81:79:29:7f:8c:cf:ce:01:d4:
b5:49:60:15:c5:5f:2d:72:b9:79:8f:81:9c:8e:65:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:33:D7:12:A1:0F:E7:CF:22:6A:9C:A6:AE:C5:9D:2E:75:2F:C2
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/094z1xKhD-fPImqcpq7FnS51L8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5705::/32
Signature Algorithm: sha256WithRSAEncryption
54:61:39:48:1a:5e:d8:62:27:2d:c5:80:2d:ad:69:34:22:0c:
45:b6:c8:64:d3:ef:5c:be:99:ce:88:29:83:25:a5:5a:3f:53:
90:9c:47:a0:90:c1:66:d3:72:74:fe:22:26:ec:a6:3a:c4:bc:
41:1b:30:83:45:dc:84:ed:f2:8d:3a:71:5f:20:05:56:57:1e:
0b:9b:2a:ff:40:40:52:b7:6a:0b:b8:e7:ba:73:d4:3f:24:74:
54:e9:62:4c:7d:60:78:a4:72:06:df:59:df:55:8b:53:fd:34:
62:d3:98:76:20:49:8c:9a:8a:c2:cf:1c:a1:cb:f6:d1:aa:9a:
ab:3d:64:55:f0:c9:8f:e1:de:64:e0:87:80:ae:ec:48:5f:a8:
21:d4:1c:09:01:01:e5:3f:e7:cb:45:94:0c:2c:65:ff:72:6a:
07:1b:c9:9c:06:f8:41:2e:5e:81:82:82:25:ac:14:a6:e0:bb:
c0:72:dd:c0:f9:40:b3:d7:a8:84:88:5e:45:02:78:99:62:01:
2b:5b:7e:50:3c:e8:22:c7:4b:22:75:b8:ec:85:8c:ba:8e:41:
97:9a:ea:0a:f2:07:94:af:21:58:e0:19:3c:ce:d9:85:07:ed:
44:8f:34:f7:14:2a:b6:81:18:14:8b:e4:bd:0c:ae:15:eb:e4:
92:81:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:03:42 2025 by rpki-client