Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/f9J3fcUkkHHcn80-VJtEBd6Rau4.roa
File: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (raw, json)
Hash identifier: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=
Subject key identifier: 7F:D2:77:7D:C5:24:90:71:DC:9F:CD:3E:54:9B:44:05:DE:91:6A:EE
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 0194236A2ECB5D90447E8589E4DFA90DAAB5
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/f9J3fcUkkHHcn80-VJtEBd6Rau4.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a01:b960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2e:cb:5d:90:44:7e:85:89:e4:df:a9:0d:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd2777dc5249071dc9fcd3e549b4405de916aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:2a:1a:51:85:11:d0:97:b9:f0:dd:6a:11:
6a:3b:8c:5d:e3:f5:f5:8b:ec:7d:e0:4e:bc:8e:2e:
8b:d1:8d:ea:60:6d:d8:ec:dc:67:98:db:79:39:bf:
41:01:5c:6b:e2:f2:c6:78:5c:ea:0f:96:2b:c3:94:
dc:65:c1:3b:d4:33:54:70:ef:d0:94:da:c9:78:f6:
2d:ed:20:a1:60:1d:0c:82:a4:37:8b:56:40:02:b2:
59:dc:e4:09:57:1c:1a:df:9b:e2:64:f2:13:eb:2d:
50:18:7c:60:4a:10:5d:9a:f8:85:5a:6b:92:20:3f:
94:0b:30:0b:70:36:2a:25:37:b0:53:89:ce:1c:e8:
6e:6a:ae:5b:3e:5e:7a:39:fa:f4:4c:7b:81:40:dc:
a3:11:90:a0:68:ef:b2:1f:29:a9:15:ed:17:23:16:
4e:33:67:b9:4b:3a:7a:e1:06:1b:0c:d5:18:00:65:
0e:be:5b:9e:72:be:87:23:cf:24:45:fe:46:51:4c:
4f:84:1a:6a:f9:57:ee:00:c5:75:ab:69:a7:eb:28:
ce:ee:d4:00:cb:88:3a:66:c2:5b:ff:08:9e:1e:c7:
c6:4d:dd:5a:ce:9b:f5:c9:10:1e:51:4e:7e:52:32:
f8:5c:30:48:d3:10:99:56:22:ca:95:32:d2:2c:87:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:77:7D:C5:24:90:71:DC:9F:CD:3E:54:9B:44:05:DE:91:6A:EE
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/f9J3fcUkkHHcn80-VJtEBd6Rau4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960::/32
Signature Algorithm: sha256WithRSAEncryption
4f:1f:52:dc:f1:f4:37:88:a0:39:43:25:72:7d:48:25:95:ec:
a2:c1:7f:c0:09:7d:a1:c6:43:d2:8a:a3:51:de:c5:49:95:3c:
28:2b:63:8e:5d:d4:4c:ac:4a:f4:b3:96:3d:2d:e5:42:e6:cf:
b5:dd:98:64:b7:8f:d0:d0:ac:e3:da:7b:42:68:e3:d5:79:e0:
4b:b9:88:bf:ca:82:f3:fc:52:3c:1d:22:32:30:0c:8d:06:f8:
00:2e:0e:b0:d6:98:f7:75:22:6e:2f:5b:89:65:23:d8:4b:00:
c3:1e:d0:75:8b:7c:74:69:18:e6:4c:57:aa:6b:7d:81:f1:64:
de:c2:df:dc:5f:75:28:95:d0:93:73:01:1d:8c:3e:4c:bd:54:
cf:4c:9f:01:ab:ae:fa:4e:a0:88:35:0a:dc:81:13:d4:60:e3:
7b:39:45:a8:f5:83:7b:af:07:fa:2c:71:7f:66:ab:21:66:e0:
55:58:d1:5f:30:9b:ca:e4:31:dc:c3:88:1a:c8:58:4a:b9:77:
79:e2:38:d3:4f:60:aa:39:4a:d1:b9:38:b9:d4:91:c9:0c:74:
7a:7d:ec:c2:c5:f4:5f:f8:c0:d2:e7:1b:00:5a:17:2e:c4:38:
d5:a3:51:52:b2:21:3c:c8:a7:bb:ce:c2:36:29:13:32:79:57:
cc:4e:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:53 2025 by rpki-client