Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa
File: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (raw, json)
Hash identifier: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=
Subject key identifier: C7:F3:77:86:92:6D:45:23:D6:12:33:B4:9F:AA:3A:B1:0A:F2:D4:98
Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial: 019426D8F0A1740653F2146B8A94DEDC3DE7
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa
Signing time: Thu 02 Jan 2025 11:48:59 +0000
ROA not before: Thu 02 Jan 2025 11:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 2a0c:b100::/48 maxlen: 48
2a0c:b100:1::/48 maxlen: 48
2a0c:b100:2::/48 maxlen: 48
2a0c:b100:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:f0:a1:74:06:53:f2:14:6b:8a:94:de:dc:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
Validity
Not Before: Jan 2 11:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7f37786926d4523d61233b49faa3ab10af2d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:4a:49:7b:7f:a2:62:bc:e6:85:4e:e7:e9:
24:80:3e:bf:a7:55:92:88:88:39:3f:6c:cc:49:51:
28:85:ba:12:16:11:f8:61:b1:4b:07:66:cd:70:ba:
c5:80:72:e3:7d:7f:bc:2b:0f:2f:43:42:77:12:ee:
9f:3d:f4:d1:5a:b8:24:cc:37:82:07:60:9c:31:7d:
01:ef:3f:a7:44:b2:62:c2:6f:ea:bc:11:7f:a2:99:
3f:b3:1d:04:2d:73:9d:28:c5:f2:aa:fd:b0:bd:f3:
fe:cc:f7:62:de:9d:f3:3e:45:36:14:4d:15:e9:36:
96:1e:38:ad:92:d1:10:d6:98:5b:20:1a:f6:95:03:
a5:cd:f5:c0:a8:9b:95:0f:c2:39:71:12:7e:d9:8a:
dc:78:e0:ae:69:35:3f:d2:7e:ef:7a:3b:9d:5f:64:
52:34:9e:fe:02:5d:ad:a1:98:ae:65:2a:32:d2:26:
50:42:1e:d1:a0:44:69:5e:7e:8b:fd:31:66:76:3c:
41:9c:0a:3a:f0:d8:49:28:fe:5a:9f:c6:b4:a3:bf:
34:92:c7:f3:de:41:82:42:58:58:f0:a5:d9:ff:e4:
e4:b6:b2:db:bc:48:83:a6:c9:f9:c3:5d:1d:7f:cf:
af:50:51:82:a4:d3:53:4e:0e:61:48:71:25:c4:dc:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:77:86:92:6D:45:23:D6:12:33:B4:9F:AA:3A:B1:0A:F2:D4:98
X509v3 Authority Key Identifier:
keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b100::/46
Signature Algorithm: sha256WithRSAEncryption
83:8c:f1:e9:54:11:90:04:58:f5:0b:d0:cf:f8:53:c4:50:fe:
01:ef:ab:4d:b2:47:af:7d:84:84:81:7c:10:8f:b6:b0:f6:bf:
22:98:9f:da:5d:51:91:ec:28:db:6a:f6:0e:ee:a5:c2:57:3c:
37:d0:d7:2a:ed:45:5a:ee:7c:d2:ce:d8:3b:f3:31:ab:1b:4f:
4d:f0:bf:0d:99:21:c7:b7:c9:7e:05:a9:1f:46:97:42:6c:ef:
90:b0:f2:3d:39:7c:44:89:6a:a7:cb:d1:5b:36:21:05:91:ae:
57:e3:b6:8d:dd:fe:82:b0:5f:36:ea:95:4a:7f:4b:a8:30:c5:
55:17:2f:13:8b:88:06:a9:b0:a3:59:65:c4:76:bf:66:0e:33:
d5:d7:1d:0b:1a:a2:3c:d4:31:9c:91:9d:aa:bd:d2:4d:1c:4d:
47:b3:b1:0e:b2:64:9f:ce:5a:4a:8a:65:e5:44:49:94:92:a4:
0d:d4:be:dd:66:82:40:df:88:2d:48:7f:12:0d:03:9f:0d:8c:
d1:da:cd:e7:73:de:d9:8c:16:fe:96:68:22:0a:e1:5a:b2:c2:
c6:f8:2a:6e:6b:34:c1:6a:1b:ce:7d:5e:1c:ae:0d:7b:0d:2d:
25:52:9d:51:87:b9:6b:87:e8:31:74:17:a0:b2:9c:b9:a7:80:
95:5c:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:24 2025 by rpki-client