Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa
File: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (raw, json)
Hash identifier: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=
Subject key identifier: 9B:41:5D:11:DE:EA:03:94:E3:6C:4E:AE:F8:A3:C6:C5:5B:AA:77:3A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 01942747922940D467D496FE7375B5966F4A
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214285
IP address blocks: 2a01:f480::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:92:29:40:d4:67:d4:96:fe:73:75:b5:96:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b415d11deea0394e36c4eaef8a3c6c55baa773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:cb:62:79:19:41:9b:e3:c3:db:71:3a:23:
bf:01:1b:0d:ed:86:31:60:58:87:8d:e1:a9:88:ed:
4e:a2:a2:74:18:4f:5f:d5:29:4e:8d:92:bc:d3:66:
9c:b7:f9:6b:ca:ab:de:f0:d6:2b:cf:3c:44:c7:2f:
c3:ac:b0:89:0f:ea:c5:ed:1d:06:71:f3:f2:5e:58:
aa:0c:0a:d1:9e:28:75:73:1b:22:65:9c:75:ed:a0:
d8:e6:da:32:f8:ab:99:cd:bc:1a:72:8a:5f:7f:43:
35:17:c0:4f:8f:18:0c:92:64:d2:58:fe:3c:06:00:
59:42:78:16:af:6a:7b:e4:98:50:4c:f2:eb:3e:a6:
6d:e8:fc:53:a1:fa:52:d6:37:71:e0:a0:30:21:db:
8a:18:b1:73:7f:0c:72:89:62:41:02:4a:d7:e2:13:
64:49:8d:0f:f9:6f:67:1d:26:96:bd:3b:6e:35:54:
03:88:a3:b8:51:78:51:03:74:39:9a:54:95:f6:f4:
88:c0:9e:38:4e:8e:90:9b:b5:4b:ef:71:23:2d:6d:
77:0f:b9:5d:db:eb:b5:b8:a2:a0:22:41:eb:88:7b:
e1:2b:ed:94:79:5a:29:40:07:90:37:d5:6c:fb:09:
92:a4:e8:53:1a:da:83:ff:c4:f0:52:1f:ee:db:92:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:5D:11:DE:EA:03:94:E3:6C:4E:AE:F8:A3:C6:C5:5B:AA:77:3A
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f480::/32
Signature Algorithm: sha256WithRSAEncryption
10:30:c3:0b:37:bf:68:1b:3f:1f:7d:8f:22:c4:c6:91:d1:2f:
6e:7c:1f:72:47:f8:87:6e:5c:8c:c7:41:55:7d:a0:99:25:f6:
b5:13:bc:b2:5d:81:1a:0f:86:d9:9e:f7:ff:da:f7:b6:6c:d0:
ab:b7:e4:e7:e1:5d:3a:5a:e7:38:b3:c1:7f:e9:84:dc:c5:14:
47:e1:c2:6b:7e:d4:5e:e8:d7:bf:75:33:72:fd:c1:41:0d:4b:
16:05:bd:d5:e2:e9:f6:79:f7:b1:14:d5:5d:46:5a:24:cf:a9:
12:eb:ce:15:41:20:76:65:33:12:b7:eb:b7:70:18:e8:23:7a:
71:f3:2a:8d:43:b4:30:00:6e:f1:cc:cf:72:fa:34:b7:96:4d:
5d:44:31:bd:07:9c:19:3e:ce:50:c1:94:d9:7f:58:f3:21:c0:
4d:9e:65:c9:98:6c:e4:b8:d7:a3:fb:cb:8a:42:a1:71:0d:6a:
78:2b:b5:dc:00:c8:61:95:3c:84:e1:21:a9:f7:28:21:a9:c7:
12:eb:3d:19:89:76:5a:04:df:1a:db:33:a2:1a:be:0c:d7:12:
e7:d6:c3:41:c2:67:4b:05:fc:82:1c:4d:9d:43:2c:9c:ef:b1:
f2:ed:79:fe:3e:00:cc:2b:d6:7c:8b:e2:46:8c:51:bf:a9:7a:
7e:62:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:21:19 2025 by rpki-client