Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6g0u8ii_ubEFcz8QzIr37qFoCzc.roa
File: 6g0u8ii_ubEFcz8QzIr37qFoCzc.roa (raw, json)
Hash identifier: 8efXrYKN7cq+ZvMKrQYbtuuPjgVICREzK31kg4OdIUg=
Subject key identifier: EA:0D:2E:F2:28:BF:B9:B1:05:73:3F:10:CC:8A:F7:EE:A1:68:0B:37
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEC6E430BD93430030D7309816FF7
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6g0u8ii_ubEFcz8QzIr37qFoCzc.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213891
IP address blocks: 2a0e:aa07:e150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ec:6e:43:0b:d9:34:30:03:0d:73:09:81:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea0d2ef228bfb9b105733f10cc8af7eea1680b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:f2:77:ab:a0:7d:ff:02:47:af:a3:46:f2:
cf:45:f6:dc:f1:dc:b9:82:d0:9d:c7:56:f2:e9:0b:
df:62:e1:0f:d1:19:f3:64:4e:7f:98:3b:50:29:92:
de:11:a4:4e:ca:8a:ed:43:98:5f:85:32:a1:13:61:
b1:89:04:5a:b4:59:56:6a:2b:81:e0:d4:df:d7:4f:
0b:ea:f5:a3:ff:fe:1c:6d:11:1f:76:1d:ef:98:a9:
4b:69:36:61:97:17:53:b0:1a:59:c3:1d:8b:5e:d1:
76:1c:6b:39:93:a0:97:6f:f9:b7:29:df:4f:e5:76:
0f:86:bd:39:bf:da:7f:83:21:cb:2e:43:e0:61:f4:
86:06:3c:9c:89:3c:a9:85:59:02:e4:4f:a4:a5:9b:
c4:60:cf:6f:f7:2e:95:c1:f7:7b:18:c2:c4:14:7c:
3b:5e:57:7b:70:3c:51:0c:c9:4d:9f:8d:37:4e:b4:
62:97:c7:72:6d:63:49:20:8d:9b:2a:e3:64:92:96:
a6:03:62:3c:da:bd:11:11:b9:40:82:40:f4:18:c7:
70:e8:35:5f:c0:0c:73:9a:8a:42:2f:54:50:f2:29:
57:2f:46:7f:78:23:4e:33:a8:49:4f:ee:6a:e1:92:
c4:78:e4:b2:ca:66:fb:4f:d8:bf:bd:4d:eb:8f:44:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:2E:F2:28:BF:B9:B1:05:73:3F:10:CC:8A:F7:EE:A1:68:0B:37
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6g0u8ii_ubEFcz8QzIr37qFoCzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e150::/44
Signature Algorithm: sha256WithRSAEncryption
bc:c5:6c:7a:56:d4:20:b7:cd:32:79:5d:03:87:78:f7:a7:d3:
a0:b9:cb:b9:85:7f:f7:6a:e1:d9:74:69:2b:34:a1:13:1c:73:
35:81:5c:1b:23:4b:bb:fa:99:b8:17:af:0f:1b:42:a7:4e:56:
d6:9e:1c:f2:38:ae:cb:7d:99:7b:6d:30:0d:32:a0:c4:cd:1b:
fa:69:28:d4:97:34:96:65:8c:b1:de:7b:e7:58:90:a9:13:1e:
c8:a1:67:4e:1f:82:33:29:b0:ef:ab:0f:7f:0d:f1:d2:38:80:
b9:c1:b7:e5:9b:1c:8d:77:97:ca:d9:8c:a0:04:d8:48:80:b2:
6f:69:a9:ee:fe:ab:9c:3d:70:cf:76:65:93:d4:d3:5d:ef:ca:
76:99:87:64:35:53:04:b4:ba:2f:0a:72:db:06:c8:6a:bb:b4:
0e:fc:01:a2:2e:42:4c:01:f9:ba:82:28:91:37:49:6f:43:9c:
d0:f5:83:5a:cb:ec:5b:65:ac:36:a0:94:cc:cb:44:bc:9d:06:
9f:a4:7d:47:d2:c2:ad:e3:0d:fc:dc:a8:a7:e3:f3:79:d0:ec:
76:5e:9a:63:17:d7:d3:dc:4e:ba:c5:92:fe:e8:6d:aa:bd:a2:
22:64:5f:31:ad:e5:ea:f0:8a:31:73:7d:3b:86:e9:a2:4e:31:
0e:e2:5c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:52 2025 by rpki-client