Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa
File: gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa (raw, json)
Hash identifier: qCXHymQkR6cp0GITgkqNAbNsnjRKEGt7ZyJutfebqWA=
Subject key identifier: 81:1E:FF:A7:C5:7F:CD:54:40:61:22:E3:92:E6:82:15:A9:CA:DD:87
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 019421B1DF9F22028D5A6373AC2F929A16F4
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209489
IP address blocks: 2a04:de40:40::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:9f:22:02:8d:5a:63:73:ac:2f:92:9a:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811effa7c57fcd54406122e392e68215a9cadd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:88:11:8e:9c:ea:d4:f9:b4:bb:2a:cd:57:
bd:2e:90:ca:ff:95:41:0a:c1:89:a1:1c:33:b4:2c:
5d:fc:a9:f3:92:51:d5:92:81:63:06:ac:bf:3d:2c:
9b:7c:ff:cd:98:61:03:ef:a0:b4:48:f2:95:fb:4f:
f8:3f:76:e0:65:a4:eb:58:9d:02:e4:64:77:72:c1:
ba:56:1b:97:06:85:52:ac:34:ca:cf:2d:22:38:37:
79:4c:03:f8:14:ed:61:8c:50:6a:f9:60:cf:a8:b7:
6a:1b:6d:b7:c4:d5:8a:d7:b4:aa:43:31:99:6e:3e:
78:bd:e5:1b:53:3a:10:68:c6:07:2c:f8:d1:90:85:
40:d1:06:b1:23:be:a9:77:d0:6c:28:4b:78:6c:ec:
eb:b4:55:ee:4d:8a:30:50:98:1b:a8:e0:13:d8:0b:
66:ec:fe:68:7d:3e:5d:f3:c0:0a:31:b6:f6:6c:f1:
af:14:e7:4c:d7:22:88:f7:9c:7b:a7:03:4b:b2:a8:
0b:25:e7:1b:37:f3:e4:49:ac:93:4d:71:ab:d8:eb:
2b:29:f2:84:5d:82:ce:d4:c4:2b:44:16:43:cf:67:
43:4d:d8:17:61:f0:12:cc:a7:0d:8c:b7:f3:1f:fb:
6e:23:91:f6:09:8a:52:d0:de:0f:d7:b4:70:a6:de:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:FF:A7:C5:7F:CD:54:40:61:22:E3:92:E6:82:15:A9:CA:DD:87
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:de40:40::/42
Signature Algorithm: sha256WithRSAEncryption
7a:79:f5:1d:2f:1b:26:17:48:2c:74:82:d8:fd:30:4d:e1:4c:
c5:e0:e6:59:dc:fc:fd:f9:e9:fd:1b:51:e8:fe:ac:3a:d7:a2:
c8:81:e8:97:92:58:d9:6d:2e:b6:03:48:cd:64:0f:d5:24:83:
35:a8:d4:16:bf:6a:76:54:7c:16:f9:9c:36:55:b8:c7:ae:a3:
53:6c:e4:a0:d3:9b:9f:0c:a6:64:74:8b:5b:c4:af:e9:34:bb:
05:78:32:f1:bf:e3:0a:37:a2:98:df:45:f0:dc:36:a0:6e:61:
78:b7:91:b2:d0:c9:a7:19:3c:db:59:72:1b:f2:8a:dc:54:1c:
e9:28:88:4b:54:81:cb:6d:5e:fd:f4:c8:7e:0d:65:50:be:91:
c6:c3:a4:79:05:bf:ff:9b:e8:bc:ff:63:69:55:6a:65:5e:1d:
17:3f:1b:cc:c5:de:e4:0e:f1:b0:1e:f4:ef:26:87:ef:82:11:
bc:29:56:c8:a4:22:c9:03:b9:aa:5c:86:11:90:2b:eb:f3:e0:
f1:8c:fa:f6:0c:b4:3d:50:84:68:15:d8:27:69:7e:14:b9:a2:
23:60:2d:ca:86:34:53:78:1f:6c:5f:22:cc:73:00:c8:a5:3a:
9d:f3:a2:b9:d8:4f:36:0e:7f:ca:43:ae:fe:bc:ff:8f:bc:e6:
4d:f9:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:41:48 2025 by rpki-client