Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa
File: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (raw, json)
Hash identifier: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=
Subject key identifier: E1:E6:7E:A2:B2:DF:DD:2C:35:8B:D1:68:54:2F:C1:81:4B:95:EB:26
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0194266A167FAF912D47281C018703FEB009
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa
Signing time: Thu 02 Jan 2025 09:47:54 +0000
ROA not before: Thu 02 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202352
IP address blocks: 2a05:6584::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:16:7f:af:91:2d:47:28:1c:01:87:03:fe:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jan 2 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e67ea2b2dfdd2c358bd168542fc1814b95eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:22:da:09:47:c3:0f:41:93:ff:44:71:b7:
c9:03:b6:9d:cd:a8:ae:b2:7a:b3:68:78:0a:0b:24:
e4:ce:46:1d:7b:a2:67:46:24:35:6e:28:f3:bd:1a:
58:ed:fe:62:e9:db:10:4e:6b:d3:b9:02:a5:96:0d:
74:88:30:3f:09:44:bb:73:51:3f:f3:f0:f0:d4:11:
fd:2f:17:73:39:7d:73:6e:2e:26:42:25:31:43:4c:
68:7e:15:75:d1:a4:99:92:8a:3c:e9:b5:5e:49:4f:
cf:e8:89:f5:50:7d:8d:4f:a7:45:17:c0:20:88:d5:
97:c1:26:44:1e:54:b5:8b:37:91:20:50:eb:d3:0d:
d4:c9:bd:a9:0e:9f:de:b6:b2:a3:03:68:86:76:4e:
d5:4e:30:e0:43:0a:86:9b:19:b9:b3:c4:f5:c8:da:
9f:0a:30:13:d6:00:ac:78:39:3a:24:0d:1b:a0:fc:
ad:78:ee:c3:6f:7d:01:3c:ad:c7:cb:82:77:68:f7:
b1:bc:2a:79:c7:75:6f:e5:17:43:3f:bd:ed:70:1d:
a3:bb:b8:a7:23:44:79:f8:92:19:7a:ea:4a:66:ca:
a0:64:72:c8:96:d3:47:47:0b:c4:e7:85:c5:4a:b2:
18:f3:78:b3:c7:e0:12:57:2f:a4:0f:5d:de:27:16:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:7E:A2:B2:DF:DD:2C:35:8B:D1:68:54:2F:C1:81:4B:95:EB:26
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6584::/32
Signature Algorithm: sha256WithRSAEncryption
7b:44:e2:55:fa:25:10:c7:4a:ed:4e:f4:ce:ae:47:c7:21:85:
d8:1b:8e:1b:0d:8d:ea:15:81:f0:e1:61:22:42:7a:f4:f2:49:
30:49:07:35:19:97:49:df:1f:2d:75:44:f1:52:7a:d7:63:a1:
9c:0b:17:20:85:ac:79:ff:95:44:be:af:33:28:fa:44:39:6b:
f5:2a:bd:0b:90:01:cf:64:29:0e:4a:8c:7c:90:85:e1:07:36:
69:b6:2e:cb:76:0a:81:01:1a:fd:18:d5:67:be:e4:7a:b7:78:
c3:85:bb:6e:66:b1:2d:be:ef:b4:ae:43:ac:f1:2a:36:dc:7d:
e1:a8:db:d4:e5:98:d7:0d:af:c2:13:6f:fe:20:63:03:95:6b:
6c:87:81:74:15:d6:19:28:46:ed:03:b2:af:75:0d:c7:13:35:
8e:26:6d:8d:e1:fd:a8:41:1e:ec:71:37:a4:ec:41:1f:8f:4d:
da:e8:8b:8f:b5:16:43:21:61:bb:da:9d:23:e1:fa:f0:1f:da:
e0:a5:73:51:42:d9:11:d1:89:67:b2:31:e0:ca:43:d6:98:87:
77:a6:f2:f5:92:de:d1:a3:5f:bc:3b:3e:dc:5d:d8:b1:e8:5f:
4e:ae:c3:2d:69:03:5e:4f:3b:f9:8c:aa:8a:d7:f4:56:86:7b:
ce:ca:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:04 2025 by rpki-client