Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/8eAv8sSKqCobRHi1pPcWZI3QV5o.roa
File: 8eAv8sSKqCobRHi1pPcWZI3QV5o.roa (raw, json)
Hash identifier: me5Ypddt6zuTrOyc9m6TejNlArKlNxDqSv65dSh/DKk=
Subject key identifier: F1:E0:2F:F2:C4:8A:A8:2A:1B:44:78:B5:A4:F7:16:64:8D:D0:57:9A
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01942747AB252E9E33AA8C4126EC479197CD
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/8eAv8sSKqCobRHi1pPcWZI3QV5o.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a03:efc0:4900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ab:25:2e:9e:33:aa:8c:41:26:ec:47:91:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1e02ff2c48aa82a1b4478b5a4f716648dd0579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:16:f9:74:60:46:5e:62:e0:be:39:ba:84:
a7:7e:96:59:29:d8:5a:8d:69:81:65:35:c9:8d:95:
0f:16:6d:b5:02:05:68:a8:ee:0a:04:1f:38:d2:18:
8b:85:0e:c7:cb:74:96:4f:63:7e:35:d4:f9:90:c6:
45:20:34:ad:bc:9d:8f:90:82:ac:be:8d:4c:94:8c:
1b:4c:6c:26:8e:96:e6:0d:2e:86:b2:51:41:5c:1b:
56:ab:6a:8a:d8:37:fb:b8:f2:75:7c:c0:56:f1:8a:
91:70:9d:a4:27:03:06:31:65:35:30:e4:ad:c7:67:
b2:f5:8f:69:33:32:2a:a6:ae:f0:1d:5e:4f:7c:9d:
93:0f:91:c3:7a:6b:1c:57:4e:d4:d5:10:26:1b:c2:
cb:f2:ae:97:a4:75:de:57:64:71:31:07:05:9a:c8:
a3:37:47:f9:97:0e:81:d5:8a:fa:71:df:3c:bb:28:
d2:51:f3:9c:9b:07:bb:16:10:e5:5f:5d:30:0d:ae:
b1:bb:86:dc:0e:5b:1f:b8:b0:34:a9:74:d4:e1:cb:
83:b6:1d:a0:bd:86:c6:3e:37:e3:b8:03:31:28:7f:
b7:73:06:41:ab:14:83:7a:9d:31:5d:40:8d:64:f4:
c5:79:f7:6d:20:34:43:f2:ad:a7:7a:fe:94:62:c3:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:2F:F2:C4:8A:A8:2A:1B:44:78:B5:A4:F7:16:64:8D:D0:57:9A
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/8eAv8sSKqCobRHi1pPcWZI3QV5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:4900::/40
Signature Algorithm: sha256WithRSAEncryption
98:43:5f:2e:0a:df:72:f3:3a:ef:04:7d:0f:99:d4:82:72:3c:
4e:7f:7b:90:7d:b0:4b:18:6f:b8:de:41:41:c5:05:b6:84:91:
69:dd:1e:1f:55:87:73:0d:54:be:e4:ce:97:00:8e:72:dd:8d:
b6:99:aa:8e:b6:8c:b4:89:b8:a1:96:29:ea:fa:28:fd:d9:f9:
19:9d:b1:49:de:eb:18:ed:b7:7a:8b:49:f3:08:42:bb:5d:70:
c7:79:fe:85:94:f9:85:c9:95:5f:b0:05:f1:20:d6:18:60:cf:
0b:a5:4a:93:0b:40:2c:cf:2b:06:ab:e2:fd:26:fd:da:e3:f1:
b0:0d:3f:0b:91:9a:3b:a8:28:b0:7e:98:56:8c:13:30:95:93:
f9:d9:fe:3f:b6:7a:7c:3c:06:a5:33:1d:37:e0:2d:3e:51:bf:
8d:5e:30:4b:c5:c6:f7:44:cf:a8:81:86:fd:2f:92:ce:93:62:
32:b5:48:77:25:51:59:6e:42:d0:8d:64:06:bc:85:12:e2:dc:
bc:e6:d4:43:f7:c1:e8:80:6f:78:2a:53:62:b1:f4:4e:0f:6b:
b8:1e:61:27:a8:5e:54:a6:bf:ec:d1:f9:44:09:89:2a:bc:c3:
a7:65:7b:fa:06:00:31:1e:0e:d7:1d:21:55:e6:03:10:74:20:
4f:7a:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:00 2025 by rpki-client