Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6cB-6qB6zRibUfBfpAKkp5TE1wQ.roa
File: 6cB-6qB6zRibUfBfpAKkp5TE1wQ.roa (raw, json)
Hash identifier: rB4ErH+K2GGG82Lp5K9pq9BeXf51yCyqAlKzco7n+co=
Subject key identifier: E9:C0:7E:EA:A0:7A:CD:18:9B:51:F0:5F:A4:02:A4:A7:94:C4:D7:04
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC182B102F9F8C3FAD7D99C0000DD
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6cB-6qB6zRibUfBfpAKkp5TE1wQ.roa
Signing time: Thu 02 Jan 2025 05:48:20 +0000
ROA not before: Thu 02 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:aa02::/40 maxlen: 40
2a0e:aa06:52a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c1:82:b1:02:f9:f8:c3:fa:d7:d9:9c:00:00:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c07eeaa07acd189b51f05fa402a4a794c4d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:16:d9:8d:4d:a8:d9:bf:20:4d:8a:61:45:
fb:bb:d9:5b:b1:ed:43:de:89:03:ff:e8:00:ba:ef:
8a:a4:d1:ed:81:1b:d0:ff:2e:5a:88:be:52:bc:70:
a8:62:81:67:b0:1b:f4:f3:c2:02:45:2f:04:61:3d:
54:f6:7a:cf:68:6b:32:91:ca:fb:23:c9:f6:6f:e2:
f1:95:69:40:65:dc:fb:4b:6a:cb:7c:11:f3:db:14:
e5:5a:08:ab:96:1d:97:7d:15:56:e4:e7:6a:86:84:
fc:0b:a0:9f:dd:fe:85:7d:0e:86:c3:d2:51:10:3d:
27:0b:02:f6:a7:e7:66:2c:6c:4b:aa:11:61:18:9d:
6c:b7:e3:13:ee:d2:bd:4f:03:b0:d8:3b:1c:4d:0b:
ac:31:4c:34:76:9d:f8:6e:e3:da:a5:b7:63:7a:ec:
25:e2:14:2b:b1:bc:3b:aa:bd:19:01:fc:2d:b6:11:
91:bd:56:4f:d5:ef:8d:dd:ad:24:8b:1f:25:db:a9:
54:9b:a6:dd:6f:d9:0c:b3:05:75:f9:44:93:3c:6a:
aa:89:f0:40:79:64:01:c9:ba:77:66:d2:52:27:11:
ce:c4:36:34:08:7b:a4:ae:bf:39:b9:68:2c:e4:30:
b3:fc:c4:96:f0:26:5c:99:82:49:d7:3f:52:c9:e1:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:7E:EA:A0:7A:CD:18:9B:51:F0:5F:A4:02:A4:A7:94:C4:D7:04
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6cB-6qB6zRibUfBfpAKkp5TE1wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa02::/40
2a0e:aa06:52a::/48
Signature Algorithm: sha256WithRSAEncryption
b6:28:73:34:e2:3e:75:da:97:88:53:de:33:c0:29:95:55:24:
3e:94:5b:53:28:99:98:d8:19:cc:a6:fa:68:bf:48:d5:09:71:
70:3c:8b:68:5f:81:bb:a3:9b:e1:c5:15:c2:f1:e4:c0:a9:9c:
fe:2f:93:01:9d:c3:c1:29:fa:8e:45:39:2e:e4:1c:c0:f0:81:
7d:ee:c0:f4:04:99:ee:da:04:c1:44:1b:26:f3:3a:5e:06:e0:
91:2d:85:db:e4:60:c1:f3:4c:da:13:89:3c:10:0e:7a:9f:2e:
f9:6e:a9:58:ae:7e:f2:a3:67:a0:57:fe:7e:3e:80:d8:a0:bb:
48:a3:e8:7a:52:12:3b:60:77:a3:cd:ad:a7:81:ec:b7:a7:20:
6d:30:c7:e9:62:17:eb:f4:b2:62:37:18:60:fa:fc:0b:60:78:
b1:3f:f8:23:7a:fc:8d:b7:80:34:0b:eb:40:47:17:fa:e7:33:
b5:27:78:70:b5:98:1b:f8:24:60:42:9a:27:20:86:09:9f:bd:
7d:09:ac:c6:8b:7f:05:19:c8:1e:a3:59:32:10:02:25:74:b2:
b1:0f:35:ec:39:61:8c:c3:22:25:cd:d2:b6:93:ab:7c:d9:f2:
23:11:6f:af:c0:c0:9b:21:87:f9:f1:e9:32:24:08:d0:d8:39:
98:2c:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:04 2025 by rpki-client