Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dftd-VryWzb6u-zeQqdEZiplGRU.roa
File: Dftd-VryWzb6u-zeQqdEZiplGRU.roa (raw, json)
Hash identifier: tFA23PL3qRC+vkOFJ+TEse6iryWAsUjncx2TDaX6Vc0=
Subject key identifier: 0D:FB:5D:F9:5A:F2:5B:36:FA:BB:EC:DE:42:A7:44:66:2A:65:19:15
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274633FCB7AE0E449E6784B9538D5AEB
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dftd-VryWzb6u-zeQqdEZiplGRU.roa
Signing time: Thu 02 Jan 2025 13:48:19 +0000
ROA not before: Thu 02 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209300
IP address blocks: 2a05:1085::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:33:fc:b7:ae:0e:44:9e:67:84:b9:53:8d:5a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dfb5df95af25b36fabbecde42a744662a651915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:dc:c3:00:f6:3f:d5:db:3e:b8:3f:f6:1c:
b3:06:c6:69:5f:20:ea:b0:db:0f:49:94:39:97:1e:
0e:65:9b:8e:93:c4:51:5f:d0:10:ad:53:79:bd:7a:
82:92:15:ad:d5:a1:75:b2:c1:85:1f:62:74:e8:b6:
f5:f7:f6:b3:15:4b:30:94:e2:6e:af:dd:a9:f0:72:
50:5a:be:ad:80:2d:16:45:67:4a:24:3f:fe:68:11:
ab:c0:60:30:06:ab:da:17:59:fc:ed:3e:10:95:1f:
bd:72:a8:19:2e:d2:03:3a:4c:ed:6f:08:f9:f0:4d:
b4:0b:e9:8a:18:64:f2:db:a3:e4:c9:45:c9:41:23:
89:b9:c9:d7:e9:81:72:9a:93:77:b1:1e:59:5e:21:
ee:6a:4c:d0:83:3e:72:9d:ed:90:89:c2:1a:52:0a:
c1:a6:86:1c:a9:64:22:04:4d:77:b0:c3:12:b4:95:
cb:aa:d0:41:98:80:c8:0a:d8:db:47:7c:83:ef:f2:
27:fe:fa:21:67:7d:1f:fa:f5:ed:f7:18:ab:a4:1f:
08:ad:a2:90:bb:52:2d:09:a3:17:b9:82:43:76:fc:
17:b6:0c:4f:87:ac:05:80:50:c6:74:f6:93:63:8e:
fd:5d:f2:cc:dd:86:ab:6a:90:56:56:6d:ee:16:66:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:5D:F9:5A:F2:5B:36:FA:BB:EC:DE:42:A7:44:66:2A:65:19:15
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dftd-VryWzb6u-zeQqdEZiplGRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1085::/32
Signature Algorithm: sha256WithRSAEncryption
cb:07:75:b3:0b:d2:94:e6:f7:dc:ee:9d:27:e6:0b:40:1c:f6:
62:ac:96:ef:d2:14:8d:a9:63:5b:a7:af:93:e6:d3:c4:f7:19:
00:ff:7c:3c:7e:ea:82:d4:ab:cf:71:31:86:93:49:a4:da:e3:
3f:18:79:d9:78:64:21:df:a0:a8:cb:47:81:05:b9:78:a5:78:
e9:38:3f:26:b4:02:15:84:22:af:48:a5:32:ba:6a:a4:b9:de:
5c:a1:8d:4e:0a:c6:be:b2:6a:7b:3c:b5:c6:dd:97:3b:9f:d9:
30:ff:85:4c:fc:8e:a5:56:f3:90:45:8c:8c:63:f2:f7:43:8f:
7a:cc:87:71:f4:b1:21:1a:c3:0f:53:64:f3:28:67:f4:04:4b:
b8:db:46:22:dc:f1:2b:2e:a9:8b:d0:f0:c3:f3:29:2b:2d:9c:
89:05:9b:16:5e:a2:06:32:df:7a:9e:74:3e:d1:71:d3:2e:80:
cd:6d:52:ba:2d:5a:72:71:64:b0:58:97:47:9f:04:a7:b4:d7:
a7:2b:4c:29:24:4f:09:8a:db:b8:2e:59:f9:38:ea:82:52:29:
4c:82:8d:d3:a1:94:66:6f:1a:da:af:50:c5:4c:aa:b0:35:ac:
1d:6c:02:a3:17:f7:5b:92:0e:04:08:2e:9a:5e:5f:55:1d:5a:
d2:34:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:14:03 2025 by rpki-client