Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/beAFyhqFvuFjdXVUNjFjACkebr4.roa
File: beAFyhqFvuFjdXVUNjFjACkebr4.roa (raw, json)
Hash identifier: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=
Subject key identifier: 6D:E0:05:CA:1A:85:BE:E1:63:75:75:54:36:31:63:00:29:1E:6E:BE
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EF05A5DA206066E06951716092A0
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/beAFyhqFvuFjdXVUNjFjACkebr4.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41047
IP address blocks: 2a0e:a6c0::/32 maxlen: 32
2a0e:a6c1::/32 maxlen: 32
2a0e:a6c2::/32 maxlen: 32
2a0e:a6c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ef:05:a5:da:20:60:66:e0:69:51:71:60:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de005ca1a85bee16375755436316300291e6ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:92:67:7e:05:9b:14:04:7e:7e:9f:56:8f:
a2:4a:e0:c2:2f:a2:d5:7f:5c:1a:d5:69:6c:16:7a:
0b:ee:1b:6e:ac:fe:0f:3b:26:30:f5:9b:2e:29:56:
a1:8a:dc:9c:ce:12:e8:bd:a6:32:21:13:93:90:1c:
1d:22:a9:0a:6b:fa:5a:18:4b:b1:46:aa:bc:ad:57:
ab:42:50:d1:f8:6d:af:6a:cc:13:9d:74:a7:73:76:
eb:0a:a9:e1:e6:a2:b4:db:56:cb:01:2c:4a:bc:c5:
3f:06:cd:f6:5d:5e:fe:fb:dc:99:ad:38:cb:d2:23:
b3:8e:19:e9:40:a8:e1:25:02:0d:35:e9:54:77:43:
8f:f4:f2:42:63:8e:40:c9:08:cf:3c:92:a6:31:cc:
da:bd:37:c2:b2:b8:e6:b2:83:f9:ae:82:94:ea:09:
12:f2:80:17:ff:d5:c6:5c:4b:52:f9:7b:26:cc:08:
83:98:05:96:87:1d:f1:fa:55:fc:41:0f:7c:4f:6b:
f6:c0:df:f7:e7:85:22:fe:33:92:91:9b:ed:b9:80:
4f:fd:b6:44:a3:0c:95:aa:e0:4d:1b:39:07:e9:25:
e5:9b:94:0d:df:3f:d5:8e:d2:6b:a0:54:5c:47:03:
7a:88:80:3e:ed:41:af:00:24:80:ec:bb:d3:93:1c:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:05:CA:1A:85:BE:E1:63:75:75:54:36:31:63:00:29:1E:6E:BE
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/beAFyhqFvuFjdXVUNjFjACkebr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a6c0::/30
Signature Algorithm: sha256WithRSAEncryption
3f:9f:a9:f1:51:39:25:e5:99:6d:a0:5c:d8:91:6c:9d:76:27:
88:0c:00:03:fd:20:cc:06:9f:83:21:d2:a8:f2:7d:f3:3d:fd:
51:72:f8:63:f5:dd:b3:3c:b1:0d:36:b3:2c:30:d2:2f:0a:73:
55:3b:9e:5e:68:41:6b:af:0d:c4:8f:8c:35:73:1f:86:65:07:
3a:d7:10:27:34:79:70:32:a0:6f:14:91:8f:91:b5:e2:e6:ad:
3e:a0:22:23:77:c1:f6:e8:a4:94:cd:02:e3:e3:c2:a9:98:66:
0d:7d:c9:76:06:e4:c1:4e:73:29:e6:1d:8c:00:68:d0:12:37:
36:10:e0:04:63:f0:a5:5d:45:7c:02:df:39:37:97:71:3c:f4:
71:5b:2c:19:6b:4a:c9:72:2b:f9:1b:f6:ca:db:a6:23:82:cd:
12:9f:21:a9:b7:22:14:48:f4:67:de:67:83:dc:92:e2:9e:c8:
4d:08:71:56:a1:66:7b:52:0b:6f:d9:eb:f7:98:7f:17:45:ac:
ed:25:5a:6c:b2:2f:ee:d4:1e:46:93:63:73:b4:9c:0b:44:00:
d6:66:e2:1e:29:ba:4f:0b:8d:55:0a:bb:66:bd:62:f0:7b:67:
ed:0f:9f:e2:74:e4:39:0f:04:f4:7a:0b:28:9b:ee:e7:ff:8b:
d7:c6:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:31:00 2025 by rpki-client