Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2dBnw9Zm0iG95ScBRgeRL6K6qGU.roa
File: 2dBnw9Zm0iG95ScBRgeRL6K6qGU.roa (raw, json)
Hash identifier: iWLS0dUcbj7x0hiYWnWPlmBPvDk8/IjJmcVlBSF422I=
Subject key identifier: D9:D0:67:C3:D6:66:D2:21:BD:E5:27:01:46:07:91:2F:A2:BA:A8:65
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D92102A68BADBA757E28117FEC541
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2dBnw9Zm0iG95ScBRgeRL6K6qGU.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17035
IP address blocks: 2001:668:120::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:92:10:2a:68:ba:db:a7:57:e2:81:17:fe:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d067c3d666d221bde527014607912fa2baa865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:c4:dc:e9:44:18:76:d5:c9:ec:e2:3a:5c:
c3:ef:65:b5:df:07:25:0c:8b:34:51:a3:9e:4d:a4:
ae:e9:f9:43:d5:86:e1:17:b8:92:7c:5f:25:fd:65:
e2:30:5f:eb:1b:0a:e9:96:d8:bd:06:83:fe:41:79:
52:3d:e9:a9:61:9a:b9:aa:2d:b0:60:b2:1a:d1:48:
c7:49:c3:f2:05:00:eb:42:04:7c:5a:3d:b2:68:3a:
1e:00:ce:c1:6e:b8:7d:0c:63:e7:21:be:95:22:4d:
b1:31:11:03:ab:88:1e:7c:b4:97:6d:eb:ec:fa:84:
92:01:4b:d4:23:6f:e3:7f:ac:6c:1f:8d:fa:8f:c0:
77:3d:7e:65:64:62:12:5c:05:91:cd:ac:ce:49:15:
d2:f7:db:07:28:4f:89:3a:00:d0:eb:4c:96:84:ca:
bb:51:9c:37:8d:9b:78:a0:95:1d:61:5a:54:61:44:
a2:2c:36:6d:0b:c7:fd:2e:40:e2:ed:9a:0f:75:b7:
92:d7:0f:f8:ad:e3:04:36:76:41:c6:b3:bc:44:1d:
f5:19:8b:1e:07:4a:08:fd:81:4e:dc:cf:6a:ca:39:
00:26:89:51:73:3d:f9:ba:e5:9c:e3:eb:05:4f:e1:
b7:e1:6a:f2:c9:ee:b6:ee:be:05:36:3e:8b:d6:82:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:67:C3:D6:66:D2:21:BD:E5:27:01:46:07:91:2F:A2:BA:A8:65
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2dBnw9Zm0iG95ScBRgeRL6K6qGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:668:120::/48
Signature Algorithm: sha256WithRSAEncryption
d4:06:26:9a:3e:fe:92:f3:28:20:04:03:d3:a3:a6:1d:c6:1b:
d8:95:d9:d1:24:bd:a1:d8:7e:af:08:f6:48:1e:4f:27:34:5d:
10:a6:a8:0d:23:11:d0:ae:94:e7:60:21:1a:d5:63:73:e4:84:
4c:15:b1:aa:f9:c1:c0:a2:62:6f:eb:b5:dd:fa:0f:9d:70:a9:
29:25:90:1c:d1:2e:42:32:03:df:ce:d4:b7:1f:3e:d7:5b:2a:
d2:7a:19:22:c1:4f:99:15:7c:65:08:d2:0a:a7:03:0b:47:65:
4d:86:8f:98:46:03:97:f4:7c:3e:9b:d5:16:ff:50:39:a8:76:
3c:bd:d8:a2:5c:5e:e8:fc:4a:0f:fc:42:8f:2d:3e:82:81:9d:
e7:b0:40:cc:78:ad:90:1c:cf:be:fe:22:93:c0:95:11:5f:30:
ec:d1:f9:43:31:e6:17:c0:a2:f3:2b:1d:6c:37:3f:c0:32:e1:
5d:ce:fd:ac:ae:8f:e9:68:c8:59:e2:75:ff:90:3b:b7:28:2b:
ac:e4:80:27:a7:0b:4f:b4:df:df:1c:1a:14:7a:c0:ba:54:74:
a9:b2:1e:3e:e1:dd:c8:0a:53:00:33:2d:19:ca:9a:a8:bb:8c:
12:42:35:16:23:4e:a3:03:82:26:17:cf:80:81:e5:a2:9f:ec:
9c:bb:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:05 2025 by rpki-client