Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/K4f9udK49aLwQPt9X1Cj4BYhNF8.roa
File: K4f9udK49aLwQPt9X1Cj4BYhNF8.roa (raw, json)
Hash identifier: syURQGAiOuMDRN/dgQDnkUdGvOJkJOZZvKX4MS1QYEw=
Subject key identifier: 2B:87:FD:B9:D2:B8:F5:A2:F0:40:FB:7D:5F:50:A3:E0:16:21:34:5F
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 0194853ABCA4C119DFED6BB2273197BB6FF4
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/K4f9udK49aLwQPt9X1Cj4BYhNF8.roa
Signing time: Mon 20 Jan 2025 19:40:06 +0000
ROA not before: Mon 20 Jan 2025 19:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80:2::/48 maxlen: 48
2a09:2b80:3::/48 maxlen: 48
2a09:2b80:4::/48 maxlen: 48
2a09:2b80:5::/48 maxlen: 48
2a09:2b80:6::/48 maxlen: 48
2a09:2b80:7::/48 maxlen: 48
2a09:2b80:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:85:3a:bc:a4:c1:19:df:ed:6b:b2:27:31:97:bb:6f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jan 20 19:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b87fdb9d2b8f5a2f040fb7d5f50a3e01621345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:09:d9:3b:f4:77:a4:17:6c:16:76:1b:f2:
19:5e:70:6c:5e:f5:d2:75:cc:df:eb:f0:43:1e:98:
ba:71:f6:4a:2e:3a:14:80:00:8a:ec:7e:28:36:0e:
3d:dd:e5:f1:28:f9:f0:05:1f:2d:64:1f:0b:66:9b:
12:7f:0f:8f:7d:41:67:37:2d:36:ab:5c:21:94:f6:
6d:89:0f:6c:ee:c0:8b:bb:53:56:b6:45:24:1a:66:
73:e0:47:4e:cf:69:09:65:b9:86:70:ba:fa:3c:2c:
13:78:9d:dd:48:64:a3:52:75:38:bc:ae:6b:fb:ab:
10:2e:8f:d9:61:46:5c:1b:6e:16:0d:40:4c:4d:13:
0c:03:29:66:80:9b:97:be:33:2e:10:84:4d:50:d3:
05:cf:21:3a:92:9f:22:a1:76:de:8f:bc:be:0a:cf:
5d:59:f0:fa:4e:81:0e:65:6e:ba:26:01:71:2a:d8:
ee:b6:2f:e6:5d:cf:a8:c0:0e:82:29:81:6a:bb:1a:
b1:ff:1b:c5:9b:8b:15:29:84:b1:dd:1f:e9:b2:5f:
a5:3a:ac:19:63:e3:2e:00:e9:e0:f5:08:b4:bb:1e:
05:b9:aa:09:4e:f2:df:95:fa:61:6e:1b:bc:32:87:
66:11:40:57:6d:7c:d8:bd:f2:b1:96:dd:66:54:52:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:FD:B9:D2:B8:F5:A2:F0:40:FB:7D:5F:50:A3:E0:16:21:34:5F
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/K4f9udK49aLwQPt9X1Cj4BYhNF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:2::-2a09:2b80:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:d1:43:95:17:4a:c6:f6:5c:e2:ae:96:06:c1:aa:d3:fb:b1:
c5:a5:c7:ce:0b:61:1e:dd:aa:da:53:0c:1a:12:2c:7a:cf:75:
c9:08:c3:db:d3:d7:ff:7b:9d:98:e6:0a:3d:ee:41:10:0a:1c:
11:ee:e7:de:84:f3:ff:9b:6f:08:4d:19:02:1f:ef:2e:e0:4a:
35:8d:1e:38:fe:1e:4c:5f:0c:27:ae:26:da:aa:9b:d6:b3:d3:
ee:09:77:1f:f3:94:30:a8:07:76:40:1c:09:c6:03:a4:5f:86:
12:74:a3:52:eb:2c:ce:52:26:a4:41:82:28:6b:0a:e6:39:17:
ca:9e:0a:2b:7e:48:f1:78:b3:eb:c0:5c:c0:4c:b2:85:df:9c:
14:e9:17:85:61:48:a4:1f:bb:f0:3c:b4:ba:ed:17:36:52:44:
34:c4:2e:c2:d0:59:a9:88:8f:00:78:a7:4b:b8:fe:ec:74:ab:
0d:10:cc:b5:c7:3a:84:d8:40:71:a8:77:8c:40:a7:5d:83:3d:
b5:16:7d:b3:72:f8:02:36:25:4f:ad:d4:7d:87:ae:fb:f9:15:
f8:76:8b:70:d6:02:33:9e:1b:8f:c6:85:5f:ed:24:27:44:d9:
85:ee:f3:f9:93:5b:f4:49:72:b3:77:f8:23:e0:94:88:05:73:
e8:1c:1e:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:56:26 2025 by rpki-client