Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/A0FZmhpB9d9XNNZISNL4Xwgb_6g.roa
File: A0FZmhpB9d9XNNZISNL4Xwgb_6g.roa (raw, json)
Hash identifier: NVfgu7gbzQWBho11pRzVXpn5qn0n9ufgmq0nGORfAx0=
Subject key identifier: 03:41:59:9A:1A:41:F5:DF:57:34:D6:48:48:D2:F8:5F:08:1B:FF:A8
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B269AA9E1A60DB88DFD994A0BB9126
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/A0FZmhpB9d9XNNZISNL4Xwgb_6g.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:69:aa:9e:1a:60:db:88:df:d9:94:a0:bb:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0341599a1a41f5df5734d64848d2f85f081bffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:94:5e:84:6d:6a:00:83:d5:c9:fd:46:19:
4d:f7:d2:a3:69:65:e4:14:58:f3:87:9b:e7:02:da:
57:8f:7f:31:b9:e7:58:f8:c5:9e:a5:1e:d2:f1:13:
61:ce:dc:89:64:0b:5a:db:e8:24:e1:3c:a8:5d:dc:
00:b6:90:fd:e2:21:d1:f0:d0:61:c6:04:ab:f1:56:
da:18:27:15:ed:74:4d:78:3a:7c:ef:bd:c0:f8:03:
12:a9:13:d6:c6:4e:61:d7:49:02:33:4c:86:c9:ce:
9c:02:f6:29:37:9e:92:4a:17:17:1c:91:bd:40:e2:
9a:59:87:32:7a:09:9f:9e:b6:d9:8a:02:71:24:f6:
3b:5e:88:76:38:f6:42:ed:7c:c7:6e:8b:59:42:90:
9e:b0:1d:e4:d8:e5:6b:14:cf:be:d8:fa:03:0d:9d:
b4:97:a4:54:cd:12:49:40:7f:47:85:29:70:db:09:
a8:8b:83:a4:b0:51:9a:1f:52:d9:b5:26:9f:bd:34:
a8:1a:bb:ee:82:c1:f0:2c:5b:e1:30:32:6d:ba:41:
f2:bd:82:cc:14:34:6e:50:95:07:6f:ba:01:cf:81:
ab:86:ae:dd:af:ac:58:e4:7c:27:53:62:85:3b:d3:
2d:23:62:64:dc:a3:c2:db:d6:df:1d:b8:df:48:cc:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:59:9A:1A:41:F5:DF:57:34:D6:48:48:D2:F8:5F:08:1B:FF:A8
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/A0FZmhpB9d9XNNZISNL4Xwgb_6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:74:a7:7c:1a:52:b8:dc:8d:74:5b:2e:4a:cc:ca:2c:d5:61:
e6:2d:82:30:95:67:31:db:e1:09:88:19:7b:1c:0f:e9:80:d3:
f0:e1:85:65:92:cb:49:09:63:7e:a0:90:e1:c9:40:3b:f6:88:
f1:e2:0f:ae:e2:41:6b:15:cc:66:98:5e:18:d8:0b:9e:4f:74:
cf:b6:bf:3d:38:5d:3e:7e:31:07:6c:d6:a7:57:e9:35:3e:3d:
b9:fc:44:5e:f2:98:4a:0d:e4:dd:ad:3f:6c:95:c6:dc:86:4b:
ba:1e:d4:98:ae:91:a7:d6:e4:05:13:0e:18:0e:c2:67:af:84:
51:dd:2c:f7:ff:e3:69:bb:8e:5f:21:2e:ce:d1:5e:aa:d9:a9:
8d:54:f7:fd:eb:d3:80:a3:f1:8b:0c:75:59:1f:d5:ae:c8:9f:
32:ca:10:65:d4:d5:0f:26:f2:e6:2f:7a:83:9e:27:ea:58:87:
a6:5e:d7:98:e3:ae:e8:62:89:b8:cb:54:98:c7:7b:17:03:f0:
28:9d:32:99:eb:0d:4a:34:a1:9d:5e:15:3e:45:af:ce:4f:96:
38:fe:f3:92:e1:54:e6:3c:50:f6:02:98:47:8c:95:70:38:eb:
cf:40:5a:c8:85:6e:68:a0:b1:fc:72:e4:2a:1c:f9:4d:5e:e8:
7d:2a:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:13:32 2025 by rpki-client