Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/24lEKB10zz7SWBTVz9q6ez1L_Kg.roa
File: 24lEKB10zz7SWBTVz9q6ez1L_Kg.roa (raw, json)
Hash identifier: +v6VfXMdQxAy8BGX5hFZxiA3ZHJflUdR/7aKrM+AQ6w=
Subject key identifier: DB:89:44:28:1D:74:CF:3E:D2:58:14:D5:CF:DA:BA:7B:3D:4B:FC:A8
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019426D8CC8D84898B98BFCA3FADF89D3D31
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/24lEKB10zz7SWBTVz9q6ez1L_Kg.roa
Signing time: Thu 02 Jan 2025 11:48:49 +0000
ROA not before: Thu 02 Jan 2025 11:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197789
IP address blocks: 2a12:9ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:cc:8d:84:89:8b:98:bf:ca:3f:ad:f8:9d:3d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Jan 2 11:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db8944281d74cf3ed25814d5cfdaba7b3d4bfca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:75:9d:59:02:83:cf:de:29:88:81:dd:cb:
46:87:57:e7:4f:f7:1a:e0:a6:4c:e6:82:99:ff:29:
e5:92:7e:66:b5:19:2a:46:4b:97:34:93:91:33:02:
0f:ee:98:19:df:8d:3e:52:09:c8:7c:09:b5:81:81:
d1:01:52:0e:38:9e:0d:79:8a:92:ea:d1:46:34:f9:
9b:9f:fc:33:d9:03:9f:2b:b4:76:83:6e:44:d7:16:
5e:9d:02:18:6b:b9:70:82:24:f8:cb:66:da:ad:26:
34:d5:12:8a:ad:ef:74:3f:e6:88:e0:e2:77:92:aa:
5b:59:ff:7d:23:f8:0e:44:b3:a6:86:44:d3:aa:c4:
4e:3e:5f:31:de:38:03:9a:4e:65:64:1d:c7:2f:7f:
e2:36:25:1a:d0:e9:71:e1:93:ee:67:bd:77:5c:1a:
d0:28:37:0d:93:2e:13:66:36:6f:43:d4:77:ed:95:
18:15:96:9d:76:2a:fa:1f:89:a8:37:30:49:32:95:
cc:6e:51:1b:98:0d:fd:a5:d1:ef:4f:e9:dc:02:5c:
9b:7f:0e:86:56:ed:fe:c2:7a:ea:09:b4:96:48:a6:
57:75:69:bc:5b:27:09:63:08:02:e9:39:66:99:24:
c0:c7:16:66:95:8e:da:a2:6c:29:ca:9a:5c:3a:58:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:44:28:1D:74:CF:3E:D2:58:14:D5:CF:DA:BA:7B:3D:4B:FC:A8
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/24lEKB10zz7SWBTVz9q6ez1L_Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
60:39:46:66:d5:d9:d2:7f:8c:00:9a:3a:a7:77:4c:cc:e9:b3:
08:4d:a6:f9:c9:15:7f:64:40:e0:c2:91:5e:45:f4:f5:9d:f0:
f8:1a:76:3c:12:c9:3b:71:a6:e0:e1:50:e8:ec:5c:3f:22:a3:
86:2a:18:1f:58:d3:0e:cd:5c:6e:b4:84:5a:07:7b:5c:05:83:
0e:76:d5:8a:bc:49:a9:bc:b7:d5:09:ba:14:c9:80:d8:54:52:
13:b0:f3:ad:eb:9b:1f:33:92:b6:a9:68:32:00:5f:e6:4b:e4:
a6:c0:7a:60:95:3a:32:7b:34:f7:6b:7a:46:a4:be:9d:79:97:
80:7f:5d:1f:da:01:ef:3f:ec:ed:6e:5d:3c:dc:96:2a:19:5d:
e6:bf:83:8e:27:f4:23:ba:c1:c4:f0:42:1e:c0:3b:7f:2e:86:
79:69:68:a7:11:36:ef:6b:79:55:98:dc:8e:78:92:14:9b:62:
52:03:ef:02:a8:af:a8:f0:b6:e1:93:78:1a:9b:f2:6d:b4:73:
05:ca:dc:4b:b6:7c:56:66:ad:8d:f1:9c:10:5a:b3:5b:a7:60:
e0:2a:2f:d6:b0:a9:33:6b:66:4b:28:ed:1f:52:64:f3:7b:b7:
86:63:06:d0:14:80:f3:7c:cb:d7:97:c4:41:7c:e3:2f:38:7d:
10:ac:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:54:34 2025 by rpki-client