Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/d6c0USc4oI3BMhtUQd7R1VcvNKM.roa
File: d6c0USc4oI3BMhtUQd7R1VcvNKM.roa (raw, json)
Hash identifier: 1YHxxaMQlx6z59gTojA0B+iclm8hr8N0Hxq/0cQhGJ4=
Subject key identifier: 77:A7:34:51:27:38:A0:8D:C1:32:1B:54:41:DE:D1:D5:57:2F:34:A3
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D9892756748930ECD99354819FBB0D
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/d6c0USc4oI3BMhtUQd7R1VcvNKM.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210348
IP address blocks: 2a03:5840:150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:89:27:56:74:89:30:ec:d9:93:54:81:9f:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a734512738a08dc1321b5441ded1d5572f34a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:48:32:2a:fc:fb:b1:0e:9f:f4:0f:64:b2:
c0:7b:d0:85:73:e6:fa:30:79:39:36:b6:33:08:05:
eb:20:b3:07:6d:eb:fd:19:c1:34:cc:b9:09:eb:76:
f5:93:f4:1a:f2:c8:21:c4:6d:b1:67:62:0b:ef:30:
61:9f:0b:8f:94:58:2d:e1:54:39:f4:28:93:2d:ce:
9c:94:df:f8:7c:33:4d:c2:97:d9:80:e5:9e:93:ec:
df:f6:2b:3f:72:a3:b7:d2:e9:4b:cc:34:8d:7c:d5:
38:26:ec:b0:bf:f9:ff:a6:23:73:3f:27:af:fc:98:
11:ff:fd:b1:10:13:94:52:56:e3:48:f3:e9:e9:53:
e0:39:04:3b:c3:e4:f4:d2:72:4c:3d:01:74:75:8b:
43:f3:a7:aa:a8:8b:cf:78:33:4d:76:93:37:8e:ba:
c0:b1:07:dd:52:e8:af:46:4b:ea:50:b8:5c:5d:8c:
8f:63:23:06:b3:46:e8:c4:b7:5d:1b:23:15:f1:ed:
c4:b3:66:76:4f:e0:40:10:a1:e2:0f:4b:37:c0:59:
38:c9:f8:d8:f5:10:9a:a4:f8:70:7b:7a:bf:7e:a8:
fc:c3:fe:21:e3:9b:7d:f0:70:39:b7:74:bd:ac:21:
d4:d9:7c:00:84:d9:25:fc:4a:3a:61:73:9a:22:32:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:34:51:27:38:A0:8D:C1:32:1B:54:41:DE:D1:D5:57:2F:34:A3
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/d6c0USc4oI3BMhtUQd7R1VcvNKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:150::/44
Signature Algorithm: sha256WithRSAEncryption
85:37:f9:b4:e1:9c:db:18:75:ad:a6:de:bf:24:5a:e0:e1:c6:
eb:d2:32:d6:42:c9:9e:63:10:b1:e2:a1:00:cc:e5:6a:66:e1:
b4:93:85:b2:67:59:16:8d:c1:81:63:3b:93:1b:42:8a:84:49:
11:05:ae:34:13:3c:31:82:20:80:40:53:5d:38:4e:3f:44:8c:
99:d5:16:1e:7a:65:64:e3:55:5c:af:0b:b3:21:94:57:cb:d8:
4b:d7:12:30:59:3f:11:cf:93:25:29:d8:6f:d0:b8:16:5a:35:
38:9c:f2:f7:c7:4f:e2:b1:0e:b2:d0:67:94:4e:29:48:6b:9c:
6f:92:2e:00:a8:87:61:68:89:a0:94:58:95:27:ae:13:c6:c5:
1b:3a:e6:aa:2d:66:4c:15:ee:87:f0:43:97:22:2a:77:a0:74:
3c:66:d0:9e:1c:85:f3:70:31:ea:7a:b2:af:91:f2:cb:09:e4:
41:c9:6d:a8:f5:87:f0:e2:66:32:c9:91:32:8c:00:a6:60:db:
09:63:3b:87:e9:80:ed:57:23:41:2e:79:a8:75:63:c2:db:9b:
10:00:16:0c:e7:19:e7:8c:3a:ec:2d:4d:7a:90:02:d6:01:4f:
e7:5d:13:bc:c8:99:ec:18:52:00:78:67:f2:77:06:87:b9:a6:
81:93:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:27:04 2025 by rpki-client