Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa
File: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (raw, json)
Hash identifier: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=
Subject key identifier: 45:5A:C2:21:D6:4E:0A:CF:17:A1:07:7A:FB:71:F6:76:FD:D4:77:C7
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019427B614211733F7F5182A1282D0B1F0A2
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209083
IP address blocks: 2a0e:800:ff00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:14:21:17:33:f7:f5:18:2a:12:82:d0:b1:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455ac221d64e0acf17a1077afb71f676fdd477c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:3d:fd:bd:a2:5f:2e:8f:e5:c0:4a:fd:6b:
70:d4:87:9e:c7:ad:12:84:69:50:f5:96:ae:9e:d4:
1d:b1:1e:1b:e9:42:58:e8:e3:19:94:b3:73:c6:01:
71:04:66:78:c9:b0:3c:ee:6f:7a:f6:16:bc:bf:95:
3d:e7:95:73:66:2f:9c:68:e5:60:e1:b8:e7:0c:5f:
4c:34:6b:04:63:f5:51:da:27:09:f8:43:17:5e:3d:
21:77:07:26:a3:5e:8a:92:f5:34:56:94:2b:ab:f0:
2c:1c:38:a3:0f:d1:bf:e4:33:74:e9:bc:25:0f:92:
88:c7:03:53:1c:80:48:33:3b:4c:a5:05:47:d4:a4:
db:bb:e4:15:03:bb:03:d7:ed:3c:6c:fa:6b:fe:20:
93:5f:2f:7f:c2:02:cf:d1:e2:b4:20:57:5b:76:7a:
6c:c6:f0:be:d7:db:c7:63:5c:a6:49:27:6b:5e:5e:
1a:0c:29:7f:56:2e:51:b6:fe:90:14:0a:ee:0b:dd:
a1:e1:14:8f:5f:93:57:05:19:19:4e:8c:ce:64:7a:
42:60:91:71:0d:0e:c3:48:47:cf:64:4e:e2:94:3d:
dc:5d:ce:59:f5:6f:56:1b:42:b1:24:4b:35:f5:70:
4b:d3:40:38:b3:a0:82:62:26:6e:ef:5a:19:29:d4:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5A:C2:21:D6:4E:0A:CF:17:A1:07:7A:FB:71:F6:76:FD:D4:77:C7
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
66:6e:6c:c8:d6:13:f8:58:8c:ea:72:5d:a8:7b:c5:08:08:62:
b6:b6:a4:1c:11:e1:2b:5e:9c:92:9b:ee:3d:e4:ee:e3:6b:19:
b1:90:e0:5a:f1:00:7d:c3:bc:9e:f0:1a:eb:18:4b:02:91:60:
1c:c7:c3:37:05:a4:47:73:b3:69:9c:ca:d2:b3:19:03:c7:18:
ff:13:6c:3a:98:42:9f:30:c7:c0:09:a7:cc:5c:b4:7d:6a:ef:
5a:68:44:9a:59:af:da:4c:94:32:20:82:84:5b:c5:15:68:99:
f1:18:64:f3:1e:91:c9:d2:a2:9e:d2:f4:56:f6:a6:1e:04:e6:
d4:3e:72:e8:29:72:f1:0b:05:39:93:18:7b:e8:70:d1:cd:a5:
bd:1e:8e:24:7c:6d:0c:32:31:1a:cd:4c:90:20:ea:89:47:fc:
28:50:d1:64:52:f7:17:ec:b3:22:2c:03:8a:50:cc:3b:17:0e:
5a:42:b4:d4:13:11:77:81:a6:0a:bf:45:19:5e:1a:a9:9d:e7:
1a:ad:36:e7:50:51:54:0d:8c:18:7a:76:aa:fe:00:8f:ee:99:
a3:f0:c5:37:26:62:8f:bd:14:ab:69:80:9c:50:cf:2d:dd:b5:
ef:9c:e4:2a:2e:4a:4d:09:ab:7c:b9:38:2e:c6:e6:16:df:63:
55:5d:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:27 2025 by rpki-client