Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/iZS0QA1yC9FLBck4FKpodWGaBn8.roa
File: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (raw, json)
Hash identifier: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=
Subject key identifier: 89:94:B4:40:0D:72:0B:D1:4B:05:C9:38:14:AA:68:75:61:9A:06:7F
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 019424B39095731ABA96C852DDDBBEE6F852
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/iZS0QA1yC9FLBck4FKpodWGaBn8.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 2a03:afc0:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:90:95:73:1a:ba:96:c8:52:dd:db:be:e6:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8994b4400d720bd14b05c93814aa6875619a067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:5e:8c:7f:28:e1:5f:57:c1:f0:3c:a1:48:
06:79:55:94:58:ec:fa:2e:18:96:89:b3:24:c7:7a:
f7:73:45:ee:1b:87:5f:88:6e:74:2d:92:07:9c:25:
85:93:bd:4f:21:c4:56:50:80:8d:42:23:cc:da:9f:
18:db:4b:12:ea:56:7c:2f:5f:e4:c9:d0:44:0f:07:
0f:26:a1:5a:ed:2b:ad:57:3f:1e:98:bc:39:25:18:
f7:45:df:74:f4:14:85:a6:b4:dc:e6:6d:96:75:15:
f6:1a:17:7c:7a:67:fd:7c:90:89:ab:33:ab:f2:2b:
ed:e4:64:ac:84:24:71:58:d6:45:c3:c6:06:18:0a:
39:a3:e6:a8:3b:51:d8:f2:dd:92:0e:6b:6c:1e:99:
ea:6c:9e:33:6b:a1:a9:02:ea:59:46:67:b4:49:56:
4e:c5:90:ca:f5:8e:a9:74:2b:27:e6:c7:0f:f8:5e:
c1:79:45:26:b8:ed:70:f4:ef:41:c5:79:70:bd:fc:
96:f9:ed:56:53:10:8b:ce:2f:51:f7:ac:01:1c:f1:
54:9f:1a:a3:7b:4b:2d:18:bf:79:15:fc:f6:73:f9:
6f:5e:ea:db:ac:f4:4e:5c:b6:7d:34:90:fd:96:83:
f3:8b:3f:fa:dd:93:2b:bf:e5:10:57:b8:ce:55:88:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:B4:40:0D:72:0B:D1:4B:05:C9:38:14:AA:68:75:61:9A:06:7F
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/iZS0QA1yC9FLBck4FKpodWGaBn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:afc0:9::/48
Signature Algorithm: sha256WithRSAEncryption
a9:8a:e0:12:b0:0a:1f:f2:7a:0f:61:54:a3:0b:a2:f1:c0:73:
a9:80:1d:a0:d6:71:24:33:a8:5c:fa:28:f4:c7:43:96:dd:cc:
53:2c:3a:eb:30:48:ef:b1:3d:4d:99:62:5a:64:6e:75:18:9b:
de:6b:af:89:3b:11:c5:00:c0:48:b2:09:51:91:ec:3f:58:36:
2c:fe:c2:79:9f:8d:f0:c1:3c:7f:0a:2e:fc:3a:23:d4:5d:d7:
58:07:6a:1c:c0:55:a6:8a:23:c4:40:12:b2:47:ac:ac:1a:78:
b1:11:37:1c:ce:29:f6:32:77:eb:84:0b:37:54:5b:d7:55:82:
a1:7d:88:67:bc:90:43:3a:3d:ee:aa:84:4e:c7:b6:d4:da:4d:
92:2c:36:3c:db:10:8e:17:53:43:63:7f:04:6f:c0:a4:84:e3:
18:b2:40:66:7f:77:4e:3c:8b:0b:b2:fe:cd:08:2e:f6:3d:ad:
b0:ad:b6:54:60:26:48:70:25:81:39:94:9c:05:e2:f5:8f:59:
d4:90:36:75:39:a8:57:02:42:56:c9:05:7a:aa:bd:07:a5:6d:
ba:e6:0b:44:2a:54:f9:37:e2:fa:07:a7:3e:88:a5:53:21:e0:
e6:d2:dd:90:45:f9:ab:fe:5d:ab:88:d1:72:91:48:1e:73:3e:
f0:2e:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:07 2025 by rpki-client