Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/6NvbAT4RMJYDBf6360dj0cmbOC4.roa
File: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (raw, json)
Hash identifier: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=
Subject key identifier: E8:DB:DB:01:3E:11:30:96:03:05:FE:B7:EB:47:63:D1:C9:9B:38:2E
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019424458BB08F56EC812C8808A1A2C223EB
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/6NvbAT4RMJYDBf6360dj0cmbOC4.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a0c:4144:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:b0:8f:56:ec:81:2c:88:08:a1:a2:c2:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8dbdb013e1130960305feb7eb4763d1c99b382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:45:5e:09:60:60:5c:f6:53:85:e5:45:2e:
dd:74:83:af:8b:b6:89:07:67:ec:f4:e3:77:5c:65:
10:d1:5b:c4:93:10:01:8f:7a:4c:7b:6f:a9:0d:a2:
cb:46:d7:2e:12:a5:f0:14:13:29:5e:1d:75:cc:ad:
87:41:d4:12:47:bb:71:6b:70:2e:95:bc:92:43:c0:
44:e2:12:84:6c:ef:40:bc:59:bc:93:33:12:ba:92:
98:08:03:21:4d:66:e3:ea:1e:6b:7a:68:ba:f8:88:
81:44:e8:57:46:5f:84:31:a3:f4:8a:ad:ce:5d:ed:
22:ec:c0:0f:25:a2:01:40:9f:29:e2:6a:49:e1:6e:
6a:f0:10:98:29:56:bf:34:14:b2:21:46:9e:f9:3d:
fc:f3:56:68:b4:3d:e6:30:2f:7f:b9:65:a1:02:07:
f5:1a:b4:e6:74:59:73:88:2c:61:9a:0a:63:dc:91:
48:27:01:dd:53:59:60:53:3b:9d:f6:2d:15:6a:62:
b4:e0:84:47:48:f5:fd:ef:0c:15:a5:25:29:cd:3d:
ca:fc:ec:10:82:4e:27:4f:98:69:55:fb:b9:c8:67:
dc:34:14:9c:a1:90:9d:3c:d8:83:a6:c3:19:27:10:
fc:16:23:23:b8:17:2c:5e:ff:98:ad:5e:88:f2:89:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:DB:01:3E:11:30:96:03:05:FE:B7:EB:47:63:D1:C9:9B:38:2E
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/6NvbAT4RMJYDBf6360dj0cmbOC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4144:200::/48
Signature Algorithm: sha256WithRSAEncryption
89:6b:4b:54:93:f9:23:a8:6c:ae:8d:35:7d:8e:85:1e:9a:97:
ce:ca:73:e5:e2:d0:db:3c:e8:cf:fa:c8:34:3b:d3:39:91:e6:
75:86:fb:65:e6:c6:41:90:11:b9:3e:77:4c:7e:30:ce:70:ca:
b4:90:cc:e9:23:fc:3d:f1:13:1b:71:7e:66:f4:3a:88:01:1d:
f8:25:05:ab:30:65:19:39:c6:d5:96:e0:86:16:e2:8c:75:a4:
68:e4:0d:9b:22:80:8d:76:2b:72:8a:8c:40:2e:8d:40:2d:25:
8f:b5:bc:bf:41:f5:f9:16:51:a6:c2:99:47:3e:42:fd:91:68:
36:ac:3b:a2:0a:8a:b1:69:5b:93:99:13:0b:f7:b0:eb:21:d3:
48:18:91:2a:5f:d0:0a:95:e0:18:e2:81:24:64:96:f8:f5:60:
9a:c1:bf:72:c7:ce:07:46:c7:a2:81:79:43:c1:29:36:98:af:
f5:43:16:74:64:e3:d1:6a:71:d8:9a:cc:cb:4a:a9:26:b9:06:
a7:79:96:73:da:d9:7d:7c:73:f7:91:85:91:ff:f1:39:9e:e0:
6c:a5:73:5e:85:16:b5:8a:8f:8a:fb:50:d8:b7:d0:6e:1c:c6:
be:23:94:7f:93:d3:ab:99:fe:a4:ce:35:71:f8:7d:c2:cf:3d:
64:3f:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:03:27 2025 by rpki-client