Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa
File: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (raw, json)
Hash identifier: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=
Subject key identifier: B3:42:63:8B:17:BB:81:C9:F3:87:CA:1E:91:F2:FE:EB:37:94:CB:94
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EE63EA7DD6510E0032A5F95E1A19
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34936
IP address blocks: 2001:4ba7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:63:ea:7d:d6:51:0e:00:32:a5:f9:5e:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b342638b17bb81c9f387ca1e91f2feeb3794cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:b7:1a:22:85:2c:82:a5:a4:e3:dc:65:47:
37:7b:3e:c3:d0:a3:06:3b:8b:4f:ec:10:ea:94:ab:
bd:6b:b8:27:72:ae:a0:f2:4e:06:d0:21:ea:1f:a1:
cc:1b:ae:83:61:d0:e2:1c:c0:4a:77:08:0a:5a:1a:
77:52:01:ca:24:5e:01:7c:d8:02:59:0e:cb:51:98:
24:78:84:1d:64:f8:af:f7:9f:dc:0d:64:20:3c:7b:
d8:30:5e:ac:59:78:bc:9c:13:50:2e:69:1b:d4:8c:
d1:b3:4c:95:33:64:9a:ec:5d:7d:c7:9e:4c:72:be:
54:07:1e:0c:68:c5:e4:ea:ce:ca:d1:49:07:c7:02:
d6:ca:8d:c5:95:ec:3e:63:44:f5:2d:1d:ff:f3:87:
91:40:fa:79:e6:42:85:79:08:2a:b9:3a:96:75:f6:
62:eb:3d:73:b7:ac:16:f1:6f:91:18:20:c9:84:a2:
29:8e:8f:39:7f:46:01:b5:79:5b:d2:93:0e:bd:3c:
80:86:b5:bd:d5:70:59:be:ce:5d:3c:b9:24:5a:88:
cf:55:77:41:49:4f:46:7e:18:9a:3c:81:fc:0e:c8:
b7:c4:c8:ee:b9:da:63:36:03:0c:f4:81:92:dd:e9:
d2:1a:e7:bd:9d:0b:48:bc:ec:15:67:fa:c8:9b:0f:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:63:8B:17:BB:81:C9:F3:87:CA:1E:91:F2:FE:EB:37:94:CB:94
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4ba7::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e5:cb:00:23:4e:dd:36:46:f2:9d:aa:c4:b8:a6:8b:dd:3d:
50:b1:1a:87:07:bc:32:bd:38:00:d8:05:38:9e:25:67:4e:61:
5b:80:43:6e:7d:53:47:86:eb:b0:31:24:c5:77:3b:9d:db:fa:
d1:f8:0c:90:d4:eb:75:82:c3:b9:67:67:0e:5f:a6:70:c6:cf:
ba:1e:fe:d2:a0:e7:8b:23:5b:d5:2e:9e:d2:ad:17:7b:28:9f:
c4:6e:35:1f:ad:a8:61:da:d3:b9:88:89:20:81:88:6c:70:90:
96:ae:b1:75:b7:2f:64:b8:bc:81:41:6d:26:ed:93:15:1a:c6:
1d:1d:de:c3:e9:6c:32:74:cb:ac:d9:b8:26:41:c7:49:bc:f3:
b0:e8:57:71:52:94:e9:7b:a5:d5:a6:c2:74:d8:7e:64:98:52:
1f:2f:5a:95:f4:a4:ca:c5:cf:a3:d7:83:50:b9:bc:ba:10:ba:
23:19:ea:89:71:8b:72:d2:00:4c:41:a8:df:c6:fb:92:01:33:
e3:f7:36:08:6f:fb:80:25:2b:38:05:9a:fa:8a:ac:06:50:1d:
b5:44:f5:6a:e4:e0:6b:cd:fa:e8:c2:c6:3a:46:a3:b6:f6:42:
87:5e:7d:f4:c1:cf:6b:71:6a:2c:46:fd:48:cc:37:7c:1f:ce:
21:a2:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:41 2025 by rpki-client