Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/9UEtadLY-agViKRUcbVzmb_0mzg.roa
File: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (raw, json)
Hash identifier: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=
Subject key identifier: F5:41:2D:69:D2:D8:F9:A8:15:88:A4:54:71:B5:73:99:BF:F4:9B:38
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01941FFA429361292A3F0CACED0FFFD085D8
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/9UEtadLY-agViKRUcbVzmb_0mzg.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59922
IP address blocks: 2a0a:8887:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:93:61:29:2a:3f:0c:ac:ed:0f:ff:d0:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5412d69d2d8f9a81588a45471b57399bff49b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:ce:b3:0a:9a:8c:ef:e7:b1:a4:23:e4:24:
18:39:eb:13:df:5b:14:41:b9:73:ef:eb:60:bb:12:
ac:35:5c:b1:e6:37:1e:74:bc:ea:b4:f8:24:51:f1:
26:16:af:15:ad:47:95:3b:f8:0b:fe:c7:2f:cf:0a:
cf:30:e0:e7:e7:58:c8:aa:ff:50:ef:e8:7e:7e:1a:
e6:c8:b3:dc:6c:30:5d:e6:54:b4:d0:42:e6:3f:7a:
3a:05:04:64:f7:20:c1:47:a1:5a:57:46:3d:1d:a8:
e2:33:05:0a:ba:d6:0a:13:22:6a:fc:1e:4e:ba:35:
5c:da:0c:a8:f0:fb:f8:8c:78:2f:cf:ad:fd:4f:75:
d3:35:8c:9d:93:19:f5:17:95:89:d9:b5:6c:4c:1a:
c0:65:86:75:39:a5:46:b2:bc:50:15:b9:c4:c8:36:
2b:1c:41:21:73:45:9a:c5:14:2d:df:08:d0:db:4d:
c8:c7:d0:44:d4:1d:81:0f:19:cc:6e:1f:ec:f3:f9:
bb:b5:d4:5b:cc:8e:97:41:3f:26:38:e1:c6:74:ee:
36:e8:b5:1e:70:e4:09:c8:25:40:dc:32:c5:c3:0b:
c4:7c:0d:66:1a:81:d6:23:d6:cf:02:4e:b2:b9:23:
4c:7d:c8:6b:28:a6:f9:61:52:e0:3b:7d:0e:fe:b5:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:2D:69:D2:D8:F9:A8:15:88:A4:54:71:B5:73:99:BF:F4:9B:38
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/9UEtadLY-agViKRUcbVzmb_0mzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8887:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:1d:59:96:49:7d:9c:c8:f3:0b:95:45:b0:72:33:a6:d6:a5:
51:df:5a:23:59:85:f7:c6:ef:06:57:35:32:30:7c:31:9d:5d:
d8:e3:ea:7e:55:59:86:66:d3:29:ad:16:31:8e:b1:4b:43:ef:
97:6d:5a:2f:90:5b:13:45:34:2e:97:1d:e2:a6:3f:7b:e1:9f:
b1:c6:92:9c:aa:fa:bf:33:7e:2b:45:04:40:58:1b:ef:6e:ae:
43:e1:da:14:32:02:a3:68:09:15:db:7b:8f:fd:d8:3c:5b:78:
01:8a:6f:72:7e:5b:35:a5:a3:61:c0:0e:a0:f6:76:37:f8:fc:
54:57:16:91:e0:88:b5:ea:eb:5f:f7:47:36:ae:50:b8:ec:44:
43:83:bc:a1:68:c0:da:67:71:f0:e1:c9:84:a2:db:21:a6:d2:
3d:a6:bf:ca:8c:8f:e8:02:b0:90:37:01:01:af:4f:fd:6c:bf:
76:a5:4a:ea:95:d6:9d:69:3b:0b:4d:b8:27:0e:bf:64:e8:ee:
6f:89:bf:e9:20:9c:f3:3a:db:22:8b:4a:b4:7d:69:32:93:a2:
48:6c:52:e1:dc:9f:cc:9b:28:f4:c2:45:da:88:50:88:b6:da:
bc:b0:d5:2f:6e:33:4d:12:34:53:c8:4c:c9:86:11:f6:0f:27:
dc:cf:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:53 2025 by rpki-client