Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/f95ZSkQYNkrZ8Cn2B0_TxOd66t4.roa
File: f95ZSkQYNkrZ8Cn2B0_TxOd66t4.roa (raw, json)
Hash identifier: Z19X36UuWj8VF7ar8Pq3DB6mGq8wPvtChd8h4Tt4OQA=
Subject key identifier: 7F:DE:59:4A:44:18:36:4A:D9:F0:29:F6:07:4F:D3:C4:E7:7A:EA:DE
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01942220491B96879EE200A4B45AB31A424A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/f95ZSkQYNkrZ8Cn2B0_TxOd66t4.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213031
IP address blocks: 2a0e:8f02:f004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:49:1b:96:87:9e:e2:00:a4:b4:5a:b3:1a:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fde594a4418364ad9f029f6074fd3c4e77aeade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:b4:4a:aa:59:ce:c7:31:6c:59:3e:0f:8b:
84:80:e5:3d:86:22:83:17:f5:9e:e9:14:de:24:d0:
8c:14:9d:f2:2d:da:d2:39:17:c3:a1:9d:d5:30:15:
0e:90:b6:ff:85:33:93:e2:1b:51:73:aa:a5:7f:3a:
59:57:ef:0d:6f:de:a7:33:2c:c3:ee:16:7e:50:5c:
5f:29:27:bb:ad:6a:2c:55:56:37:95:22:2b:23:f8:
7b:12:01:07:25:7c:d3:dd:9c:03:22:a3:e3:b2:07:
69:a4:f5:6a:f7:f8:3e:46:08:b7:c4:20:27:ef:49:
f9:41:ae:27:4b:3a:13:8b:e0:d3:40:2c:cf:d6:e9:
49:3c:d8:a9:e5:a2:d6:ec:cb:57:a6:b4:40:3a:77:
4b:8d:45:7a:df:c1:45:56:6d:c9:59:95:6e:d4:61:
f5:e6:b0:60:8f:b8:2d:db:80:ba:a6:03:11:2c:fd:
89:86:03:d1:9e:8d:84:0a:cc:04:bb:b8:92:cb:79:
1d:f4:73:31:1c:4e:f7:4d:09:4e:24:16:7e:c6:0b:
7d:3f:25:79:9a:ad:31:22:da:9e:69:7d:3c:a9:1e:
17:f1:38:fd:87:9f:dd:de:37:e7:59:c8:ac:46:fb:
b8:20:42:0f:3d:b2:db:b4:db:b4:f3:05:d2:fd:c8:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:59:4A:44:18:36:4A:D9:F0:29:F6:07:4F:D3:C4:E7:7A:EA:DE
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/f95ZSkQYNkrZ8Cn2B0_TxOd66t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f004::/48
Signature Algorithm: sha256WithRSAEncryption
13:cf:19:00:b7:41:62:0d:42:85:92:87:60:d4:77:27:c7:71:
cf:23:8e:2e:ac:ff:86:a3:42:5e:7e:5b:fb:f8:1a:86:71:37:
dd:47:70:f7:57:14:91:22:d1:8d:8c:29:08:66:92:e7:2a:99:
2e:d4:0d:c6:5b:17:08:48:8d:26:93:87:46:5e:53:e5:02:c4:
b7:04:4f:11:5c:87:87:90:0d:9c:09:8d:d4:29:ca:80:64:d4:
28:4d:f8:10:b0:93:25:58:9d:d2:af:36:94:ce:17:d2:ea:c7:
30:e2:f9:77:74:6a:13:a8:b1:96:b8:8a:cf:86:79:83:e0:b1:
77:8d:03:73:45:8c:7e:05:28:9f:38:ea:b9:8d:9c:89:f5:8c:
e1:af:11:ab:a4:09:67:d4:2b:70:55:5c:e6:81:a8:5d:70:44:
94:b7:ca:14:0e:8c:73:80:9d:a5:69:9e:7c:45:71:56:13:42:
70:c8:47:5b:a4:68:79:ff:c6:82:b2:21:cc:f6:3b:30:11:42:
fd:32:d7:96:72:ef:e6:a4:9f:97:bc:19:a3:84:91:32:11:0b:
8e:e3:1f:52:dd:fb:a6:dd:c0:2e:a1:94:a7:f6:5b:95:81:80:
f8:6c:08:ce:0a:7c:bf:ea:8c:2c:40:c1:26:24:dc:81:a2:83:
43:65:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:46 2025 by rpki-client