Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kLZU9hk6Yk1-F_5G3c_P4wkthT8.roa
File: kLZU9hk6Yk1-F_5G3c_P4wkthT8.roa (raw, json)
Hash identifier: BSS5bi6yjvvg7oWyitYCRQZ1xQt05+yzuU7Ru8Oac/8=
Subject key identifier: 90:B6:54:F6:19:3A:62:4D:7E:17:FE:46:DD:CF:CF:E3:09:2D:85:3F
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 018773AFC69F429428F95619DF271189C50B
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kLZU9hk6Yk1-F_5G3c_P4wkthT8.roa
Signing time: Wed 12 Apr 2023 04:18:32 +0000
ROA not before: Wed 12 Apr 2023 04:18:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a0b:1000::/29 maxlen: 29
2a09:c400::/29 maxlen: 29
2a11:f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:73:af:c6:9f:42:94:28:f9:56:19:df:27:11:89:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Apr 12 04:18:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90b654f6193a624d7e17fe46ddcfcfe3092d853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:5d:ae:56:e0:38:7c:ae:35:d8:c2:f3:1b:
a6:a9:56:25:36:17:01:11:6f:e9:d7:96:2a:0b:35:
2d:f7:af:25:3e:46:19:3d:76:88:e6:88:70:a9:32:
c9:11:6b:42:6b:c5:9c:a3:bc:7a:d3:96:4f:f9:f2:
d8:1d:1c:41:cd:74:83:33:b5:0c:ed:85:9c:2f:86:
3c:47:ff:18:b9:f4:f7:3f:7d:4f:22:e4:a1:4f:2a:
4a:15:a9:75:f1:08:20:34:54:7f:5c:df:36:bb:43:
c0:f8:dc:6b:31:cf:ce:17:3a:9e:ec:c0:f4:84:62:
cf:f5:1c:53:99:9b:f6:4d:96:29:21:50:bb:dc:76:
3d:03:c5:2a:32:82:a9:90:99:d5:d5:31:d8:94:08:
d7:ca:b7:de:65:b5:3a:6e:40:5b:7b:c7:09:ef:19:
df:cb:c2:7b:a6:9a:32:68:82:81:37:89:5d:ea:66:
3e:08:5a:36:92:52:a0:0a:0d:bd:bc:f4:a4:e6:8b:
fd:ae:92:b2:40:3d:ce:57:f0:a1:2a:47:3c:2c:05:
40:3c:0a:38:ee:48:c5:fe:ea:73:34:9b:13:74:8a:
d4:d9:18:dd:9a:62:62:52:32:0a:27:ae:10:0f:00:
1a:a7:37:e7:0a:c7:35:eb:1c:8b:a5:e2:3b:42:c4:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:54:F6:19:3A:62:4D:7E:17:FE:46:DD:CF:CF:E3:09:2D:85:3F
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kLZU9hk6Yk1-F_5G3c_P4wkthT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c400::/29
2a0b:1000::/29
2a11:f80::/29
Signature Algorithm: sha256WithRSAEncryption
98:12:71:65:21:9f:00:fb:22:89:47:13:d2:78:b7:1c:a5:31:
2f:3b:1a:9f:fc:08:7c:b2:d1:5d:1c:86:e3:19:80:94:41:d6:
8f:a3:67:87:ac:c2:99:a6:02:ac:ff:74:93:02:f2:c4:89:c6:
a2:e5:7a:17:64:5e:04:e7:98:b3:17:c0:94:e6:24:f0:14:44:
ea:24:2a:f1:0b:1e:fa:4c:8b:3e:b7:3e:50:6f:3d:ae:1d:7c:
17:91:dd:fc:1f:d2:be:b7:cd:53:cf:2b:fc:7c:ad:54:a7:a2:
51:bd:94:ac:20:eb:9c:b1:27:87:c2:c4:44:26:be:55:3f:4c:
3f:c6:22:ff:87:7b:7c:09:76:80:05:f5:6c:1b:c7:12:39:73:
ba:d1:08:15:df:9b:9f:9f:1c:c6:c3:f0:be:aa:27:fe:38:cc:
15:b5:27:b2:72:b8:84:4f:3c:b4:a2:16:de:e1:b8:69:0d:a9:
fc:77:28:26:cc:2a:9c:44:89:44:89:ad:79:0e:96:a7:bf:fe:
8d:21:2a:fc:38:03:16:2a:d7:55:0b:b4:92:81:70:d5:e8:a7:
3c:a1:2c:25:5e:5b:93:df:15:da:84:24:ee:0f:9c:28:20:c0:
64:de:4a:87:d5:ee:87:17:03:f3:a7:9a:ad:98:40:8d:d1:17:
d2:07:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:30 2025 by rpki-client