Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/JdZQsRtIZvKxTQNNQSb94CVB108.roa
File: JdZQsRtIZvKxTQNNQSb94CVB108.roa (raw, json)
Hash identifier: UQp7tcR34rwanroW3wOKMRMdYSg2dxtY0KeWNQadE+o=
Subject key identifier: 25:D6:50:B1:1B:48:66:F2:B1:4D:03:4D:41:26:FD:E0:25:41:D7:4F
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 01939304DDD7FE9E321D8DF0C60C12B4CAE6
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/JdZQsRtIZvKxTQNNQSb94CVB108.roa
Signing time: Wed 04 Dec 2024 18:53:09 +0000
ROA not before: Wed 04 Dec 2024 18:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:eec2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:04:dd:d7:fe:9e:32:1d:8d:f0:c6:0c:12:b4:ca:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Dec 4 18:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d650b11b4866f2b14d034d4126fde02541d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:33:34:33:06:76:5c:b5:f7:73:99:43:ed:
cc:b4:3a:14:47:e6:8a:78:fb:86:63:19:63:0f:ac:
c7:95:d5:12:9e:f5:20:5d:00:d2:ee:82:23:d8:2f:
b7:89:14:4c:80:ef:30:46:6b:9b:08:b8:f7:6c:b6:
54:07:ad:e5:d2:5e:25:f4:93:e3:28:fc:b7:31:4c:
8b:0b:35:e6:f4:e8:87:73:e0:72:ba:a3:4b:8f:7b:
78:cb:bc:09:5d:8f:98:64:f7:d1:ac:63:76:c5:2c:
51:48:2d:16:d8:9e:cd:6f:aa:b4:b7:fa:fd:56:44:
a6:99:b2:7e:55:19:73:41:13:dd:e2:10:a5:96:17:
89:28:16:2d:34:ee:5a:8d:ff:02:1a:0a:84:7f:69:
38:27:49:a3:7c:03:35:27:56:81:12:56:3d:a3:98:
ad:bb:b9:34:3e:cf:1c:bd:6e:ee:15:42:89:71:93:
67:ab:1b:7f:0d:d2:f2:aa:58:e6:0f:82:a6:a5:6d:
1e:36:b5:51:33:23:5c:9d:a2:8c:f4:27:15:c7:5e:
2c:a7:86:1f:7d:43:34:74:38:07:d6:d2:90:b4:b0:
d4:d6:3c:8f:c8:25:b4:50:57:c9:55:38:87:7a:df:
1f:4d:a8:7a:16:e9:5c:1e:00:a7:ee:34:13:0f:8e:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:50:B1:1B:48:66:F2:B1:4D:03:4D:41:26:FD:E0:25:41:D7:4F
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/JdZQsRtIZvKxTQNNQSb94CVB108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eec2::/32
Signature Algorithm: sha256WithRSAEncryption
85:c7:bc:77:ef:2e:78:c1:91:df:ff:78:fd:59:2a:da:37:28:
b8:83:d5:35:bb:27:7c:95:68:80:e6:c5:f2:99:d2:b1:bb:bc:
a5:71:b5:8c:31:11:df:26:8f:5a:27:f4:64:a0:04:ce:d3:a1:
9a:c4:45:49:de:eb:06:a7:c7:88:62:3d:a3:4e:6c:4d:39:34:
cd:1f:00:d1:13:96:53:96:cb:82:3c:46:0a:2f:84:05:7b:cc:
6a:a9:57:a4:b7:ac:8f:7c:35:24:0f:f2:97:d7:95:cb:c6:e3:
9a:8f:5b:01:db:71:9f:4c:25:c2:9d:e2:99:64:c3:51:0e:f8:
c2:4d:a9:3b:80:62:b7:1c:de:54:86:87:d9:a5:74:c8:ac:3c:
3f:3f:69:90:df:68:ea:68:1e:e4:10:eb:c0:f3:cd:90:15:bc:
0c:33:6a:45:8e:4b:dd:c8:c9:05:7e:bf:90:a9:48:4f:77:79:
c2:f8:df:c5:24:10:eb:0d:5b:f4:12:3d:55:cc:a6:37:51:fe:
53:05:cb:d1:d9:c9:e7:a6:e1:8c:f1:24:33:93:65:c0:4c:05:
d3:6e:03:0e:c6:31:f3:92:55:d7:dd:66:46:01:da:c5:16:ee:
12:b4:54:48:f7:50:77:5f:4b:a7:29:cc:1d:4a:f8:53:1f:24:
53:c8:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:06 2025 by rpki-client