Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa
File: Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa (raw, json)
Hash identifier: xmxRpk/h+RREswL6FdQ3EYJu4suUIaG6Qi2dOEQuO0E=
Subject key identifier: 22:CF:D2:B9:B6:60:C2:A6:FF:F4:5E:2F:74:57:0F:B6:AA:80:13:F4
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BA80A280069C95632CA2452A2538
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 2a05:b0c6:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ba:80:a2:80:06:9c:95:63:2c:a2:45:2a:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22cfd2b9b660c2a6fff45e2f74570fb6aa8013f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:fc:61:3f:e2:71:c3:6f:23:79:da:7f:d2:
3e:e3:89:3c:88:1d:bc:71:e0:79:ec:9c:84:17:24:
54:ce:11:e9:29:70:47:af:45:dd:b6:96:ad:fc:51:
06:96:4d:79:3d:8d:61:cc:e3:29:f6:fd:51:a0:0a:
05:6b:22:10:a4:ba:3f:54:ce:1a:cb:d4:ab:d7:f7:
45:2e:7e:7e:bd:8f:d5:b8:f9:2e:55:a1:47:97:38:
c1:84:90:ff:6c:69:48:fa:9a:bf:44:ac:f8:69:c0:
7a:68:ab:2e:9d:70:76:41:74:cb:a8:e8:e5:d2:57:
bb:1e:76:e4:24:18:1c:c1:3d:a1:ee:38:8b:60:be:
68:db:23:ee:a1:3d:be:d0:b1:c1:40:24:c4:08:b7:
ed:1f:ba:12:c5:1d:05:2c:12:26:7f:6a:a7:4b:52:
9f:53:d8:22:d1:27:2c:7f:74:9d:a9:2b:ec:60:a3:
2c:39:ef:e3:b4:fa:72:3f:73:42:07:1e:22:8d:34:
e9:ed:37:97:95:7d:c7:14:0c:90:4a:7f:d2:88:e6:
75:5d:6a:0d:eb:bc:3b:08:d5:44:96:85:09:bb:f4:
5b:a1:5a:43:bf:22:5f:84:86:d8:72:59:75:b6:b1:
0e:10:66:13:aa:fa:5d:73:c7:22:47:f6:46:81:5b:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:D2:B9:B6:60:C2:A6:FF:F4:5E:2F:74:57:0F:B6:AA:80:13:F4
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:300::/40
Signature Algorithm: sha256WithRSAEncryption
5f:43:a6:a7:82:15:22:65:68:ac:80:fb:ae:19:2c:95:ee:59:
a0:dc:26:62:16:56:2e:95:98:cd:4a:df:9d:d4:e8:f6:21:b5:
a7:fc:3e:1f:c7:64:86:53:98:8f:4c:28:37:f1:9e:9f:b6:16:
5d:98:f2:5a:a4:b5:63:13:74:8c:02:10:33:c2:62:c9:5e:0a:
c1:f5:3e:d7:29:31:ff:1d:2b:a4:c5:14:ca:5d:61:01:57:17:
8f:a8:cc:23:43:95:91:e4:60:12:c3:88:24:dd:0d:be:75:93:
8f:0f:e0:be:e3:7c:62:db:0d:c7:71:e4:35:40:94:d2:7c:8e:
0b:cf:15:fe:bb:a9:4e:de:94:7f:8d:92:53:c5:0d:5c:83:18:
74:dd:9a:99:1f:c0:05:dd:f9:ec:e4:7e:9b:3b:4b:6d:2e:f7:
ba:8c:2a:98:3b:90:57:c0:ea:de:be:c5:c9:a5:07:bb:8c:bb:
bb:c4:fe:14:fd:ac:6b:13:b3:23:7c:8f:6d:6b:cc:44:a6:3e:
28:54:4c:a2:67:4e:a7:16:ee:45:74:8d:a1:c5:d5:b6:cc:3f:
fd:5c:82:35:e9:f0:8f:e1:6e:84:33:8e:44:76:62:bb:dc:e2:
1e:af:d0:7f:8f:d9:62:27:21:07:c9:54:c9:1f:83:7b:d9:13:
4c:77:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:45 2025 by rpki-client