Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/blIEGjjI7Qwwp8xl1KpE-pu64y0.roa
File: blIEGjjI7Qwwp8xl1KpE-pu64y0.roa (raw, json)
Hash identifier: YlTipBdhIBVnH6HfnNfH5DD2sl4phrQ/DoOdj+zXVao=
Subject key identifier: 6E:52:04:1A:38:C8:ED:0C:30:A7:CC:65:D4:AA:44:FA:9B:BA:E3:2D
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01859EC6FDE6BFC006304ADAAB1EAC90502D
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/blIEGjjI7Qwwp8xl1KpE-pu64y0.roa
Signing time: Wed 11 Jan 2023 03:01:59 +0000
ROA not before: Wed 11 Jan 2023 03:01:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3280
IP address blocks: 2a0e:d480::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9e:c6:fd:e6:bf:c0:06:30:4a:da:ab:1e:ac:90:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 11 03:01:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e52041a38c8ed0c30a7cc65d4aa44fa9bbae32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:ae:67:1f:7e:46:78:1d:d7:e9:9d:23:8f:
9a:89:d1:8d:f4:81:29:c3:e8:50:56:47:41:c2:d1:
79:45:f2:a4:25:b4:28:87:c8:89:13:e6:d9:d4:35:
8d:30:70:fb:1b:22:fd:62:c4:71:b3:9f:79:35:87:
36:40:86:c4:a5:38:24:60:17:3b:3f:73:d6:bf:c6:
17:d8:78:40:77:c5:d1:c9:ef:96:16:48:e0:15:43:
ed:fa:eb:87:2c:0a:a9:ad:c1:7b:b8:54:aa:14:90:
fb:26:c9:90:2f:f3:de:87:0f:cf:3a:90:a8:a1:94:
fd:12:ad:da:8f:e4:ea:05:a8:e4:23:12:09:41:df:
75:50:b2:c2:0c:ce:73:02:50:18:83:44:62:41:74:
bc:6d:c2:cc:a1:b4:5d:3b:07:f7:e5:c0:45:19:95:
d5:80:8f:bc:48:e3:ce:ab:7f:1a:e0:de:34:09:b6:
b7:d7:fe:06:61:c9:48:ad:51:e2:05:68:62:c2:f4:
50:84:85:8f:ff:5b:eb:63:de:09:f9:0d:1c:ed:d4:
0f:51:6d:3e:01:ef:88:f3:c8:ee:de:51:87:a1:23:
df:bb:21:e2:17:b2:71:09:6b:93:c2:bb:ad:ba:a3:
c9:2a:e3:1e:fb:99:67:39:99:e2:7d:de:80:f8:fe:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:04:1A:38:C8:ED:0C:30:A7:CC:65:D4:AA:44:FA:9B:BA:E3:2D
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/blIEGjjI7Qwwp8xl1KpE-pu64y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d480::/40
Signature Algorithm: sha256WithRSAEncryption
46:cc:36:41:f5:13:be:18:9f:77:b2:6b:0c:38:0b:c7:64:4c:
38:81:7b:b7:4d:ae:2c:5f:0d:57:d2:b9:6b:1e:24:6e:2a:16:
42:7b:88:6e:8a:21:15:6a:4d:25:1f:6e:91:bd:03:55:dc:49:
70:d1:27:53:e0:80:e6:61:bb:37:6f:83:7b:46:cf:50:67:2a:
f2:3f:53:2f:d9:85:57:25:4e:3a:b0:7d:4b:a8:94:79:e5:b2:
74:fc:9b:c3:e5:f2:74:e8:88:0f:3e:2d:80:86:74:92:d6:09:
eb:ec:50:5a:c9:da:f6:ea:01:50:98:19:43:4a:06:40:f4:39:
8e:5c:36:33:62:45:0c:14:8a:a0:21:77:b0:39:06:e9:2e:30:
cd:50:48:18:dc:0d:cb:89:16:c2:f4:76:11:5f:8b:fe:8d:0a:
10:d4:8e:69:ad:e8:61:78:b1:08:ba:64:34:ac:0f:77:e7:e8:
1c:fa:4b:a8:c3:72:b9:f6:ca:92:cf:e2:b5:11:64:72:71:23:
ae:b3:b1:07:35:67:99:0a:60:de:94:2c:a9:9b:3e:f9:f2:06:
14:9a:0c:57:05:6a:96:b2:0f:b2:76:50:ae:54:91:a4:7a:d0:
2b:a1:3d:12:95:34:09:73:35:47:be:fa:23:28:1b:cc:f8:66:
e9:f8:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:56 2025 by rpki-client