Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/nzL5rU21d1PlGGMQdcFTW627B-Y.roa
File: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (raw, json)
Hash identifier: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=
Subject key identifier: 9F:32:F9:AD:4D:B5:77:53:E5:18:63:10:75:C1:53:5B:AD:BB:07:E6
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBCFA741809B185CCA9F535DD2F54
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/nzL5rU21d1PlGGMQdcFTW627B-Y.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214430
IP address blocks: 2a01:e281:a100::/40 maxlen: 48
2a01:e281:ae00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bc:fa:74:18:09:b1:85:cc:a9:f5:35:dd:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f32f9ad4db57753e518631075c1535badbb07e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:17:2e:84:48:e7:27:e5:b8:00:7e:4e:1f:
a2:7c:7e:35:3b:08:10:ad:1e:f1:00:7e:ad:3f:5f:
fa:27:e1:f7:d2:ee:d4:b9:82:db:2e:4a:52:c0:c1:
19:34:8d:cb:8a:8a:7f:e1:c4:d5:04:39:85:e3:65:
1b:8d:20:0a:c2:87:3f:27:2e:3e:d0:29:f9:12:74:
cc:4a:99:5b:6c:39:4d:85:74:b7:cd:c2:ca:db:80:
2e:35:3f:6e:87:2e:97:d4:c4:a4:80:27:f2:5f:5e:
13:c1:49:28:c9:bd:f1:b4:77:cb:42:0d:fb:f3:79:
ff:9b:d9:ca:1d:72:e4:4c:32:8b:69:71:8f:1f:61:
3c:ce:e2:3f:fa:cd:d3:b6:d7:70:a3:41:49:b2:f8:
99:ab:c1:41:0b:7f:e2:54:d8:0c:2b:8e:8d:25:9e:
5a:1e:cd:2c:a8:96:78:6b:b5:16:04:23:e3:29:cb:
46:4b:0f:31:8a:c8:e7:a4:67:89:74:9a:0b:0c:b0:
cd:ea:c6:14:2e:7b:d7:eb:d6:cf:17:82:63:4c:8b:
df:2b:7a:8a:55:f0:e3:f6:e3:2c:1b:3c:ba:6b:9d:
70:7f:ae:65:d9:e5:ab:8c:33:40:4b:80:fe:5e:37:
25:0e:36:ac:a9:23:56:08:01:57:aa:67:8a:92:6e:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:F9:AD:4D:B5:77:53:E5:18:63:10:75:C1:53:5B:AD:BB:07:E6
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/nzL5rU21d1PlGGMQdcFTW627B-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a100::/40
2a01:e281:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
c5:7b:27:92:2d:7e:bf:38:75:f0:a6:ad:44:fa:63:58:08:f8:
07:75:50:d4:31:e6:d0:f9:8d:67:5a:8e:13:24:0e:bb:b3:6d:
1b:22:f7:a3:c3:10:fd:65:c9:a2:fa:c0:8d:9a:67:61:4f:6c:
bd:4a:1a:97:71:e7:b3:65:fe:b2:b8:70:93:d7:ca:70:aa:76:
c3:ac:3e:92:4c:5d:4e:14:32:2f:b6:9e:03:72:c9:44:98:26:
0d:30:91:2b:28:5e:09:8f:30:f8:43:ed:dd:12:38:3c:a3:b3:
0e:6a:1f:d1:dd:1c:dc:1c:f6:bd:b9:49:33:d0:7f:2d:73:0f:
1b:d8:63:0c:a2:83:15:b3:a9:53:f7:43:05:f8:70:e0:68:9e:
3b:e8:54:1b:ae:a3:1c:d1:b7:38:f0:56:24:86:01:06:bd:ff:
63:14:4c:68:d4:73:34:6f:b5:aa:99:c8:5c:1d:b6:7d:7b:76:
67:8f:e3:d9:98:44:52:bb:1f:3f:95:c7:ee:6e:e7:35:65:72:
e4:0d:b8:51:24:e2:56:3d:c4:a4:ec:b8:03:b3:f4:e4:f3:64:
f0:33:dd:5c:c5:82:c1:32:d9:ad:d2:fe:90:fd:38:54:16:f6:
86:d8:f2:88:02:f7:c6:f7:e3:be:8e:bd:4f:0d:8d:d3:b7:2a:
b0:8e:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:01:02 2025 by rpki-client