Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hDNzgalAQxImhA0XS8nCTcFINFM.roa
File: hDNzgalAQxImhA0XS8nCTcFINFM.roa (raw, json)
Hash identifier: 5yApEvO+gNPV4Gbr6IXMLGNBOKEDkrTzbGseLTpCSIs=
Subject key identifier: 84:33:73:81:A9:40:43:12:26:84:0D:17:4B:C9:C2:4D:C1:48:34:53
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDBE640282E1A517D63A774F3DE91
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hDNzgalAQxImhA0XS8nCTcFINFM.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208680
IP address blocks: 2a0e:aa07:f0e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:db:e6:40:28:2e:1a:51:7d:63:a7:74:f3:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84337381a940431226840d174bc9c24dc1483453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:66:fb:8c:a3:62:26:0b:23:cf:fa:1f:11:
2d:c5:86:d6:e4:be:e7:6a:df:4c:90:06:2c:74:f1:
10:05:a3:1d:72:30:9c:cf:06:70:82:fb:16:1f:84:
df:28:0f:18:dc:a7:ec:d4:88:59:9e:e7:a9:16:39:
d1:6e:03:b3:e1:b5:c8:29:8c:2e:2a:b1:0e:f1:6b:
f9:a8:66:c0:e3:30:d4:fa:62:7b:ab:00:76:39:bd:
88:c9:7d:08:0f:de:1a:61:5a:f7:ab:81:e3:b5:76:
aa:bb:cd:ab:3b:1a:58:4c:c5:3a:a6:1a:c3:d9:05:
2a:72:9a:d2:c6:15:85:4a:a3:ff:4b:7e:0e:a8:b1:
b7:08:71:d5:e0:2e:af:14:aa:14:09:e8:e6:ff:17:
f3:00:c2:c6:05:ea:88:e2:9c:be:a8:f3:7b:d9:6f:
ce:7b:8d:18:54:7c:4c:ce:5a:5d:36:68:65:ba:54:
6e:b0:f4:aa:bc:0c:ea:35:80:3a:84:d8:00:fb:75:
4d:18:c6:f8:60:71:f6:f9:c6:07:38:37:9d:36:c7:
40:8a:3d:0c:9f:bf:c4:d5:87:e3:32:fd:aa:43:04:
b7:7a:94:32:3f:34:dc:d4:45:68:a0:00:fe:53:d8:
16:38:e0:03:6d:0d:91:ff:a1:b2:95:d2:65:e2:ac:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:73:81:A9:40:43:12:26:84:0D:17:4B:C9:C2:4D:C1:48:34:53
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/hDNzgalAQxImhA0XS8nCTcFINFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f0e0::/44
Signature Algorithm: sha256WithRSAEncryption
92:7f:82:7e:02:15:d3:7b:0a:c0:8c:51:1a:04:8b:2f:3f:92:
18:17:35:1a:e7:c9:8a:5c:10:3a:0e:a6:7e:c6:c9:a6:77:6f:
af:0d:5b:4b:d9:30:05:f9:6f:48:8e:a3:3d:b2:04:54:ad:6f:
0f:32:55:27:b3:93:93:40:46:74:3f:39:01:5c:b7:93:26:88:
aa:a9:4d:2e:c1:b3:7c:a8:3b:73:74:14:46:92:48:5d:a0:4f:
00:93:f6:76:3f:70:e6:1a:81:7f:10:83:dc:54:3f:46:a6:0f:
33:75:b6:e0:af:61:a4:dd:c4:9c:c3:72:27:a8:53:88:5a:46:
08:78:01:0a:b8:a1:a9:4b:4a:a4:24:2c:87:72:3c:d1:78:6d:
6d:fe:6c:ef:19:43:84:35:dc:86:94:7d:fd:3d:c7:34:75:a4:
2f:ea:58:50:a2:4c:3e:88:79:bd:90:a5:62:c1:0d:7c:32:41:
24:6b:a8:7d:e8:2c:9a:12:a0:c3:9d:59:23:64:e7:55:7d:8d:
2c:ba:60:ca:6c:62:34:54:78:7e:60:69:ab:f5:a4:2a:a7:4d:
c2:7c:f3:06:d2:70:ed:a2:65:12:7d:c3:da:26:47:4a:92:f7:
8c:99:51:ec:5e:a0:d8:73:6f:64:98:7d:2c:ab:2b:16:a4:25:
2a:51:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:49 2025 by rpki-client