Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/1iavcJFqwR6rzZKxM06ahcbF1Us.roa
File: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (raw, json)
Hash identifier: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=
Subject key identifier: D6:26:AF:70:91:6A:C1:1E:AB:CD:92:B1:33:4E:9A:85:C6:C5:D5:4B
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019427B65BA6E6D5DADDDD74B6C244369379
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/1iavcJFqwR6rzZKxM06ahcbF1Us.roa
Signing time: Thu 02 Jan 2025 15:50:49 +0000
ROA not before: Thu 02 Jan 2025 15:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a10:9007::/32 maxlen: 32
2a10:9007::/48 maxlen: 48
2a10:9007:1::/48 maxlen: 48
2a10:9007:2::/48 maxlen: 48
2a10:9007:3::/48 maxlen: 48
2a10:9007:4::/48 maxlen: 48
2a10:9007:5::/48 maxlen: 48
2a10:9007:6::/48 maxlen: 48
2a10:9007:7::/48 maxlen: 48
2a10:9007:8::/48 maxlen: 48
2a10:9007:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5b:a6:e6:d5:da:dd:dd:74:b6:c2:44:36:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Jan 2 15:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d626af70916ac11eabcd92b1334e9a85c6c5d54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:36:1e:46:46:76:7c:6c:2b:42:bd:01:04:
85:26:9f:df:17:3d:75:6c:06:70:3c:f7:2d:33:9b:
2e:8a:8e:ee:21:e7:c5:68:bd:08:1e:59:41:e8:c7:
1d:7c:32:54:e0:2b:82:04:61:a3:53:c2:81:2a:8f:
51:00:22:99:e8:60:a8:d2:1d:ab:84:67:26:f2:22:
17:20:17:48:6a:f3:fb:23:08:92:d9:78:29:e7:80:
46:3a:d4:b5:52:b0:c6:10:9f:26:6a:08:b3:9f:f7:
99:4d:5b:62:7b:51:d0:a4:7e:98:c7:55:e1:eb:6a:
61:3c:3b:54:03:85:d1:b0:80:eb:cc:69:55:2e:d3:
c7:74:3f:de:e1:6f:e6:31:24:a1:d7:f1:b7:c4:75:
2e:ab:9f:03:c6:79:56:0e:e9:ea:ec:a3:02:31:8f:
86:4c:8e:12:34:9a:1c:2e:a5:09:4d:b7:fe:3c:c1:
3d:a5:34:ef:0a:3c:d7:39:83:37:10:d8:07:cb:b0:
2b:ee:cc:f4:19:43:1b:c6:1c:c0:cc:cf:76:fc:d9:
36:ad:4c:82:c0:ca:38:83:12:ba:1e:a5:54:e2:14:
13:42:de:25:ce:ec:50:ca:b4:e5:a2:2d:b1:30:92:
9d:ce:2b:d5:7f:75:0c:77:05:85:ea:56:c8:10:9b:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:AF:70:91:6A:C1:1E:AB:CD:92:B1:33:4E:9A:85:C6:C5:D5:4B
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/1iavcJFqwR6rzZKxM06ahcbF1Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9007::/32
Signature Algorithm: sha256WithRSAEncryption
6b:62:e3:94:de:4e:b6:a3:79:f1:fd:b5:05:ce:e3:c1:0d:d9:
14:6d:89:21:61:24:c2:f4:1a:72:32:d0:df:f9:3d:73:c5:85:
95:df:ee:5c:96:6a:ac:79:34:47:f3:9b:45:73:6e:55:49:75:
13:cf:10:f6:44:66:19:3e:62:98:62:8b:c8:aa:01:94:5d:77:
f0:c3:df:b6:30:b8:e7:17:e3:b0:9a:ad:e7:f3:9b:de:d6:44:
87:5a:ec:7f:a7:6f:e6:a0:cf:4d:3d:ae:93:51:e0:88:9d:07:
90:a4:17:4d:83:58:f6:f2:73:40:f6:92:c8:8d:14:99:9f:9e:
3e:fe:18:8c:96:f9:7f:95:7c:56:54:c4:7d:82:1c:7b:41:16:
f5:4d:0d:9b:c1:46:2f:0b:9d:b2:f2:a7:1e:cb:9b:e3:e4:c9:
31:50:af:a9:db:1a:2c:35:e1:df:a2:6d:7e:d2:36:48:39:be:
c0:04:32:08:23:f0:57:2a:a0:17:96:23:59:67:be:7a:3c:b1:
89:31:94:1c:08:f3:da:1b:37:a6:d2:a0:e1:39:b4:a5:e2:02:
ca:18:3a:29:14:b6:67:2d:bb:9f:67:a5:eb:a0:e6:e5:98:b2:
b2:1f:27:12:1c:62:c0:82:56:7d:11:63:01:b1:de:9d:84:dc:
fb:5a:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:38 2025 by rpki-client