Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ag398xWwoLkZNYSzzqBoRHc0pNM.roa
File: ag398xWwoLkZNYSzzqBoRHc0pNM.roa (raw, json)
Hash identifier: AII9GwrTHgJbuNMr8y3iQ/CJ2Fbx3xyLdQKVC5mxTtg=
Subject key identifier: 6A:0D:FD:F3:15:B0:A0:B9:19:35:84:B3:CE:A0:68:44:77:34:A4:D3
Certificate issuer: /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial: 01820A4F5EFABC3EF86E481C4BF3209D7676
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ag398xWwoLkZNYSzzqBoRHc0pNM.roa
Signing time: Sun 17 Jul 2022 03:59:09 +0000
ROA not before: Sun 17 Jul 2022 03:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0a:4f:5e:fa:bc:3e:f8:6e:48:1c:4b:f3:20:9d:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
Validity
Not Before: Jul 17 03:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a0dfdf315b0a0b9193584b3cea068447734a4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:1e:d7:62:87:1b:c6:24:e4:cb:22:ae:84:
dc:c5:2b:d2:95:b4:26:02:a8:85:40:c5:76:f6:a1:
92:19:b7:18:4d:56:81:1a:00:34:5d:13:f9:eb:94:
df:c4:0b:5e:2e:c1:f8:d0:98:6a:95:0a:b3:2f:19:
5e:e8:6b:0b:58:92:08:71:28:3d:cd:c7:26:a8:97:
f4:57:c0:a9:b6:10:a1:fe:2d:5e:46:de:58:21:df:
45:85:2e:cd:3e:a9:a3:30:e8:ad:28:f6:04:1d:2b:
b8:ab:a2:a1:90:96:e5:65:10:ae:55:21:55:bf:4c:
eb:9b:13:81:3a:f8:db:5c:81:66:9b:11:53:4f:91:
be:ee:e3:2c:6e:3e:b1:ee:aa:8a:ae:57:d8:aa:0f:
47:79:64:85:fa:a9:17:5d:6f:c8:9f:92:14:ba:1f:
b0:10:5a:00:28:ac:71:ad:7d:b3:c9:cb:a3:a3:df:
db:a2:d9:38:c4:bf:b5:03:22:4a:07:24:50:e9:79:
dc:1b:7d:04:1b:66:ee:08:fc:29:4b:16:71:4f:5d:
82:56:06:55:a5:e9:df:c4:af:61:57:03:36:c1:3c:
9f:e3:d7:ce:26:02:57:a0:59:5e:68:b8:20:4a:8a:
e1:20:61:77:30:1a:69:1e:a3:67:01:fb:b4:06:1a:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:FD:F3:15:B0:A0:B9:19:35:84:B3:CE:A0:68:44:77:34:A4:D3
X509v3 Authority Key Identifier:
keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ag398xWwoLkZNYSzzqBoRHc0pNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
Signature Algorithm: sha256WithRSAEncryption
03:fb:b2:eb:7a:94:2f:b0:2a:e1:b8:bd:58:eb:37:80:4d:10:
89:cf:03:ad:d0:78:19:9b:09:83:13:b9:5b:e8:2c:e8:44:fe:
10:3c:69:70:72:48:7f:2c:51:0a:71:6f:e3:4c:a5:0f:45:9f:
ec:6a:b8:d5:cc:8c:4e:b7:ac:42:d9:4d:d7:6b:11:c6:ba:f8:
c6:be:27:ef:4a:02:24:43:e8:df:03:e4:e9:d9:39:e5:29:16:
71:2c:d4:f9:48:cb:ec:d8:8e:a9:09:91:15:43:dd:b4:a0:f1:
5a:95:12:73:74:75:ba:c5:3a:17:f9:ab:d2:db:5d:a3:e7:e3:
a1:d6:ab:78:42:e1:57:cc:5d:99:f5:e7:59:58:20:88:8c:e6:
f6:82:2d:de:db:47:13:e9:3f:66:8f:bb:72:13:21:f4:af:b4:
a3:a3:e8:55:c8:94:ab:a1:83:e2:71:ab:1a:d6:b7:12:a4:82:
fe:9a:cf:70:03:27:af:bc:4a:c3:82:68:89:4e:c1:93:dc:e5:
4b:dd:b1:a6:72:8e:12:9b:34:55:80:f8:a4:f1:2f:7a:a9:45:
dd:23:1c:9a:2f:5b:b1:40:59:2b:73:d7:6f:46:2c:da:3d:f4:
8a:57:ae:b9:83:a9:95:2c:5d:bc:b6:bb:84:e1:73:d2:9d:af:
96:da:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:55:13 2025 by rpki-client