Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa
File: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (raw, json)
Hash identifier: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=
Subject key identifier: F5:0F:8A:D3:20:34:0F:D8:DD:90:65:E7:EE:27:E1:56:1D:A1:2D:EE
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01948F9B98A6374A3F8CD6AB097A755AD4F2
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa
Signing time: Wed 22 Jan 2025 20:02:06 +0000
ROA not before: Wed 22 Jan 2025 20:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:5b81:2010::/44 maxlen: 48
2a04:5b81:2060::/44 maxlen: 48
2a04:5b81:2100::/40 maxlen: 48
2a04:5b81:2130::/44 maxlen: 48
2a04:5b81:21d0::/44 maxlen: 48
2a04:5b81:2200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:9b:98:a6:37:4a:3f:8c:d6:ab:09:7a:75:5a:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 22 20:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f50f8ad320340fd8dd9065e7ee27e1561da12dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:7c:e2:07:16:6a:98:67:2e:e4:3b:26:d5:
3c:65:0d:77:8c:31:a1:d1:46:5d:72:ba:e6:3b:ab:
ed:0b:e0:aa:a5:68:8a:0c:6a:ea:b4:0e:a9:4b:f1:
a1:bb:8c:fe:69:ab:47:80:43:46:b2:3c:92:de:78:
6e:8b:b5:ee:b7:8f:d4:fa:eb:c1:67:a1:4b:78:b4:
8f:7e:37:48:a8:49:65:f1:81:38:9f:16:0b:33:7f:
5e:07:be:9e:9c:cb:02:38:92:6c:4b:1c:48:80:cd:
a5:b6:87:40:7b:6b:f4:71:e1:55:e2:d1:6a:e2:01:
56:4e:9c:61:79:7a:8d:df:03:f6:79:ec:a2:e9:7f:
0e:55:8f:94:85:3c:6a:0d:28:13:c3:94:8b:98:78:
fc:0b:78:cd:31:72:fd:c2:e7:a5:6d:c8:37:da:33:
eb:fa:d9:a6:22:2a:71:60:18:74:5c:f5:f5:3d:73:
bb:03:f9:17:8a:d2:d3:4a:05:43:88:5e:70:a1:e2:
ab:32:fa:a2:52:ff:8a:65:9a:e2:27:f3:be:f1:6c:
4b:4a:5f:6c:dc:65:65:01:c0:62:72:d8:bc:51:06:
8c:1b:9a:1f:0d:ff:0c:da:2b:da:3c:75:2f:db:3c:
39:16:1f:73:8e:76:4d:5a:6f:76:8d:c8:90:0b:53:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:8A:D3:20:34:0F:D8:DD:90:65:E7:EE:27:E1:56:1D:A1:2D:EE
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b81:2100::-2a04:5b81:23ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:9f:d6:f9:a3:fb:01:32:17:7b:5e:f5:bb:70:8a:9c:45:7c:
f7:64:e3:a1:f9:ef:30:16:a8:d5:d7:53:5c:5c:a7:f4:16:a0:
72:78:a4:48:11:48:65:3f:18:96:3c:59:c1:38:b7:81:a3:e9:
46:77:6f:00:ca:62:9c:9e:79:22:5a:0b:7c:ce:c7:a1:ec:04:
00:66:e2:ba:31:db:bc:23:4d:1f:e8:74:56:6f:2d:72:14:f1:
8e:c1:45:29:13:4d:a6:63:90:2c:58:2a:38:f3:9d:56:a5:0c:
db:4a:44:93:1e:96:b5:11:41:c5:b5:40:ea:5c:bd:ae:f2:1f:
0f:29:06:4f:da:6f:6e:32:03:40:ec:cc:fc:7f:cc:50:e6:b6:
ac:cd:98:53:9b:4b:93:f4:26:65:40:ca:d8:d8:4a:4f:4f:72:
a7:28:7e:97:b4:34:c2:2a:7f:01:f3:ad:4c:9a:c9:15:53:4a:
bc:31:c6:09:f4:d7:9d:75:b5:1a:27:14:24:09:33:ab:6e:e0:
96:f2:af:85:a0:13:53:f1:d0:2f:44:d6:72:da:4e:19:2a:b0:
49:a9:a3:51:41:2f:19:10:a4:63:0e:f0:92:8d:9b:2d:3e:9d:
bc:27:c8:80:07:a7:d9:04:83:b8:30:6e:a6:7b:dd:1c:5c:2f:
88:8d:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:29 2025 by rpki-client