Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JMuA_SE4InzW1qKeTVpx_3oL0q8.roa
File: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (raw, json)
Hash identifier: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=
Subject key identifier: 24:CB:80:FD:21:38:22:7C:D6:D6:A2:9E:4D:5A:71:FF:7A:0B:D2:AF
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 01941FFA215FB8809114DF1EBCB0715F7042
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JMuA_SE4InzW1qKeTVpx_3oL0q8.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61992
IP address blocks: 2a0e:eac0:1003::/48 maxlen: 48
2a0e:eac0:2030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:5f:b8:80:91:14:df:1e:bc:b0:71:5f:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24cb80fd2138227cd6d6a29e4d5a71ff7a0bd2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:9a:7f:eb:be:71:09:35:2f:51:05:d4:1c:
b6:29:91:2c:b3:d3:56:da:f1:85:a4:fd:9b:1a:7a:
c0:eb:68:b1:3a:9c:e5:d9:ee:76:e8:ee:de:9a:10:
53:2e:80:0b:21:35:f2:73:8b:96:6b:b9:63:a4:11:
22:c2:ed:0f:cd:23:a9:88:ed:36:2b:dd:69:83:e5:
0f:8e:31:f5:57:8e:a0:ab:a3:54:3d:e9:99:8f:82:
cd:81:fb:b0:ac:1d:4d:44:e3:fa:ac:59:10:c8:f2:
ca:9a:41:79:a6:28:38:a6:7a:31:26:cb:91:14:47:
62:93:43:21:38:f3:92:55:3f:9d:0f:ec:12:4e:32:
dc:51:45:d2:d4:9c:a1:80:b6:4e:f8:d6:6d:59:0e:
9c:45:07:32:1a:fe:80:41:41:45:6d:20:11:38:53:
97:48:da:99:e3:6a:46:2f:46:7f:3b:88:27:5e:f8:
3c:82:c5:43:ca:62:88:16:9c:60:3d:a1:d7:54:4e:
10:cf:49:0b:0d:bc:f4:1c:0f:c5:11:4d:4f:c1:24:
fc:21:51:93:c5:5e:0e:95:ae:17:37:0f:13:3b:b4:
69:f1:af:5e:1b:84:1e:d6:e0:8b:45:04:7f:1a:33:
7c:2f:35:9d:27:2d:b6:2d:a1:7d:31:b1:11:f3:e0:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:80:FD:21:38:22:7C:D6:D6:A2:9E:4D:5A:71:FF:7A:0B:D2:AF
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JMuA_SE4InzW1qKeTVpx_3oL0q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eac0:1003::/48
2a0e:eac0:2030::/44
Signature Algorithm: sha256WithRSAEncryption
09:34:96:de:d5:2d:f1:86:03:67:14:49:40:ee:a9:c0:e5:ea:
9b:17:95:92:0d:f5:97:b2:59:40:7b:7e:e2:67:4e:8c:ab:8f:
52:69:df:33:6f:6b:40:71:9d:a8:8d:d2:75:b0:9b:10:fc:9c:
ef:f7:fc:92:b4:53:7c:7e:94:08:e8:8e:90:8c:ca:f7:f6:f9:
10:48:28:dc:52:ca:4d:bb:d8:21:80:25:90:85:04:10:d7:83:
d1:3d:05:21:f9:f9:d3:c6:54:d4:02:75:05:8b:d2:31:25:87:
d4:9c:5a:3d:6b:af:cd:ef:4b:e9:b4:e7:f0:fe:87:05:16:26:
6f:84:c2:85:23:79:6f:96:d1:d1:3a:9d:a1:44:20:a6:f0:c5:
c8:4e:1e:73:64:5c:ca:24:d5:81:d5:da:9c:f9:bb:eb:19:f5:
bf:87:05:93:55:74:11:7b:43:49:e1:44:81:ca:93:d9:ce:08:
7e:e2:51:22:6a:a5:e3:74:e7:6e:00:d6:87:4f:57:5b:3e:c9:
2e:e8:86:21:29:4f:df:68:44:30:ab:41:c4:f8:ce:d1:0c:49:
79:98:f0:ec:53:1c:45:36:99:de:4d:e7:99:12:1b:e2:91:19:
94:73:56:46:56:aa:7d:6b:c0:86:26:21:37:d4:c1:1a:26:43:
3c:56:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:45 2025 by rpki-client