Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3lz5gdOTdM2gH0GcwbIi3JJWyl4.roa
File: 3lz5gdOTdM2gH0GcwbIi3JJWyl4.roa (raw, json)
Hash identifier: zeUJWMh5nuGYVB7CltVekr6zWMjhJtEqWLxX/NLGud4=
Subject key identifier: DE:5C:F9:81:D3:93:74:CD:A0:1F:41:9C:C1:B2:22:DC:92:56:CA:5E
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018CCA2A2650999D461581CC47607092F474
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3lz5gdOTdM2gH0GcwbIi3JJWyl4.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138968
IP address blocks: 2a0f:6700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:26:50:99:9d:46:15:81:cc:47:60:70:92:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de5cf981d39374cda01f419cc1b222dc9256ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:19:b4:48:80:4b:15:a2:5d:9f:f0:3f:69:
5e:66:6e:01:97:27:4f:6d:60:f7:66:06:a8:64:7c:
10:1f:a1:df:0f:72:ab:d0:23:a4:25:85:24:46:ce:
56:b8:56:b4:80:09:14:49:38:e0:15:1f:34:22:4c:
77:9d:39:85:ac:64:be:13:18:de:57:05:ed:42:83:
7f:d6:ea:d7:90:76:82:84:51:85:cc:6b:92:42:6d:
80:01:36:9b:37:bd:a6:40:3a:06:d5:2e:c5:dc:df:
4f:df:81:76:a4:e6:ec:c0:a6:80:ca:a9:a1:78:0f:
ce:d6:5c:0f:fd:7e:80:60:0e:f3:92:2d:26:4c:87:
d3:65:31:9e:e2:76:45:8c:45:89:06:12:b8:8a:90:
ff:9e:94:63:2a:8e:d5:23:ec:bb:cb:aa:75:00:d1:
a7:b5:85:40:0c:bd:4d:d3:90:cb:99:cd:4a:fd:78:
ae:d5:7f:ae:75:dd:c3:49:63:58:5c:f5:49:1d:33:
c0:60:6f:e7:50:4c:6a:7e:a2:05:d4:9a:65:ab:24:
ae:65:42:f0:a3:4d:52:41:84:b7:eb:d1:67:54:a3:
65:da:6f:f3:df:94:dc:4b:48:c9:ea:42:b0:75:28:
a6:2c:eb:da:c9:e9:6e:92:c6:53:b6:96:7c:e8:cc:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:F9:81:D3:93:74:CD:A0:1F:41:9C:C1:B2:22:DC:92:56:CA:5E
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/3lz5gdOTdM2gH0GcwbIi3JJWyl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
8f:09:d3:71:a3:cb:97:e1:3a:63:7e:3b:89:a0:54:68:4d:fb:
60:10:36:51:0c:6f:4c:c4:ff:2e:2a:b2:90:f9:be:b2:46:40:
25:50:f9:9e:bf:f5:55:60:ab:eb:d9:3d:e9:0f:17:27:97:77:
5f:b8:52:ee:f7:2e:23:83:dd:b6:08:ef:39:5b:6e:cd:0d:c8:
4b:9d:e9:d9:62:dd:63:d7:4f:73:9e:53:ae:39:cf:bb:52:4a:
19:ee:2c:b7:52:45:26:b8:fd:98:69:55:b9:77:13:26:e8:64:
40:84:a5:c2:4f:da:32:58:df:3e:21:ec:f3:5c:ca:9a:a3:81:
ca:ce:9c:94:36:a9:93:40:92:13:c5:ed:86:1e:33:29:eb:d2:
ec:b4:2b:46:4d:b4:98:af:6c:d9:47:ab:7b:64:38:73:cd:78:
e9:9b:23:67:e9:d8:5c:41:77:57:b6:c8:83:89:36:54:ba:af:
4e:82:60:98:77:16:8a:42:de:97:a5:33:05:cd:52:e2:a5:af:
3c:75:ac:04:19:9c:43:77:4c:3a:c2:be:92:4f:47:1c:9f:f3:
64:2d:00:9b:c0:77:cd:28:25:97:64:76:d5:b7:df:f9:14:5e:
02:47:71:de:39:aa:a3:68:ef:e7:8b:6f:d5:a4:5b:28:72:78:
ff:f0:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:05:08 2025 by rpki-client