Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/0PY44eNhRhwBAlEI8CW_7e75Yh4.roa
File: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (raw, json)
Hash identifier: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=
Subject key identifier: D0:F6:38:E1:E3:61:46:1C:01:02:51:08:F0:25:BF:ED:EE:F9:62:1E
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DB8D609380C0349F2957834B2095F
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/0PY44eNhRhwBAlEI8CW_7e75Yh4.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a01:e281:af00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b8:d6:09:38:0c:03:49:f2:95:78:34:b2:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0f638e1e361461c01025108f025bfedeef9621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:55:2d:2e:39:18:71:dc:47:52:b6:8a:41:
36:f4:ca:a1:cd:15:aa:8b:c6:39:4e:2b:37:43:22:
68:56:42:c7:18:3a:46:47:c7:04:99:bd:87:98:88:
de:4e:e9:ab:4d:86:e5:50:b8:e9:fa:fb:f4:28:f0:
f6:b5:f8:1a:ee:54:9f:13:d5:ec:15:7b:01:c3:ca:
b2:12:69:d0:ce:3b:0a:c1:72:4f:c2:98:e2:d1:a0:
8a:f9:10:18:fc:94:07:26:93:64:31:e7:c7:4f:ce:
6a:7b:3b:e8:5c:96:e9:32:2c:35:25:0e:53:69:9a:
37:4d:a0:2f:e6:4e:01:b4:e4:41:b5:bc:83:6b:9d:
43:4e:65:f9:e5:76:93:cf:21:55:a9:42:cf:a3:ff:
33:12:70:1e:b8:e3:e3:58:96:f2:76:f9:36:47:42:
c5:05:32:3a:9d:e0:67:62:27:82:54:0c:f8:58:e6:
7f:2e:51:5a:43:5a:a1:0f:b4:6d:be:c2:e0:ef:7e:
77:46:dd:1f:85:f9:ca:2f:3f:4a:73:c8:07:2e:f9:
58:ed:32:ef:bf:60:b0:39:f5:20:11:ab:b3:68:95:
b5:b3:1f:ca:35:0c:4d:a3:a0:40:86:9a:11:f8:fb:
67:be:16:bb:41:c1:39:1d:48:55:1e:98:77:19:53:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:38:E1:E3:61:46:1C:01:02:51:08:F0:25:BF:ED:EE:F9:62:1E
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/0PY44eNhRhwBAlEI8CW_7e75Yh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:af00::/40
Signature Algorithm: sha256WithRSAEncryption
17:b0:c0:8d:cf:eb:46:05:b6:d2:61:67:6a:f9:6d:49:00:21:
0b:9a:90:a7:a7:24:e9:76:4e:16:94:f8:1d:f8:74:e1:c8:95:
07:8f:ac:97:65:2a:68:bb:ab:4e:6e:7b:24:71:72:fb:03:7c:
26:9d:ab:75:1f:54:03:b4:d0:08:23:12:8b:27:13:e3:af:da:
69:d0:31:27:17:5b:5d:c0:0c:38:bc:b8:8d:fd:c5:98:9c:ba:
10:82:11:1f:7a:df:c5:04:31:5e:a2:06:5a:88:6c:25:42:ac:
9f:09:0f:b9:1c:5e:f4:df:67:b6:cd:23:ce:81:e0:fb:75:c4:
66:33:28:75:23:e0:f2:a3:35:4c:3e:f0:ea:60:b6:4b:5a:23:
42:44:0a:19:cf:df:be:84:97:e4:f8:2d:98:f0:5f:8e:35:c3:
c8:c9:4c:78:74:b7:4f:02:6c:28:be:25:37:2c:40:33:cd:d3:
93:8e:ee:29:a6:a9:2d:4a:9b:cf:a3:b1:88:57:ea:2f:07:d4:
7c:a3:86:3f:47:04:c9:00:60:1c:38:19:20:c5:00:1f:97:24:
74:73:cc:29:cb:34:b3:a0:c7:8e:06:d1:ec:8f:e9:bc:84:5a:
db:77:d7:f2:aa:94:26:3b:72:1f:b3:9f:05:7a:b5:a7:2c:32:
1c:b4:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:00 2025 by rpki-client