Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/2moa6mH80qm3IguzeOVfriRFI-w.roa
File: 2moa6mH80qm3IguzeOVfriRFI-w.roa (raw, json)
Hash identifier: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=
Subject key identifier: DA:6A:1A:EA:61:FC:D2:A9:B7:22:0B:B3:78:E5:5F:AE:24:45:23:EC
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D7277AF91761A74496988DBD24229B
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/2moa6mH80qm3IguzeOVfriRFI-w.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202512
IP address blocks: 2a0e:1cc0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:7a:f9:17:61:a7:44:96:98:8d:bd:24:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6a1aea61fcd2a9b7220bb378e55fae244523ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:05:5d:d2:45:bd:0a:98:21:29:ca:84:e9:
d4:e2:ac:b0:24:e5:80:b9:31:3f:09:be:90:f8:4e:
dc:c9:fa:e3:64:97:b5:ea:dd:fb:f8:ba:ee:f4:a9:
49:49:a1:85:47:c1:25:6c:71:76:99:5b:49:ee:50:
72:84:4b:87:18:d4:15:7a:9e:2f:26:85:e0:51:7d:
1d:48:8d:00:b4:95:9e:1a:72:53:61:82:a8:18:1c:
fc:45:34:83:54:10:6b:cd:fd:2d:5f:1a:8f:3b:62:
a9:6f:87:3d:69:39:f2:1c:98:69:29:ca:35:90:5e:
05:80:a6:03:ee:08:63:be:38:d8:3b:78:62:dc:b3:
cf:72:cf:a7:79:c2:ae:dc:a3:a2:9f:f8:8e:40:7a:
c6:5d:96:cc:7a:e0:2a:c4:87:fa:c3:6a:2e:2e:25:
7a:38:d0:7e:66:28:41:00:44:d5:56:11:88:4d:ec:
22:ee:d7:50:a7:3e:17:a0:87:c9:01:40:f9:04:d9:
8d:73:56:2c:48:a2:dd:9c:48:7f:02:66:9f:68:02:
43:d8:de:61:9b:52:bb:70:92:4c:ec:71:85:42:14:
8b:d2:42:e8:ec:a5:46:7c:4c:2a:3a:14:69:ce:f0:
ee:1f:dd:15:bb:57:20:79:2f:7f:51:ca:e4:88:00:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:1A:EA:61:FC:D2:A9:B7:22:0B:B3:78:E5:5F:AE:24:45:23:EC
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/2moa6mH80qm3IguzeOVfriRFI-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1cc0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
78:71:d2:c7:1e:1a:af:22:ff:a4:65:bc:22:2f:a4:90:71:7d:
c8:09:5c:94:f6:e4:08:76:9a:1a:e4:da:96:b8:19:f2:59:0b:
cb:03:1b:44:6e:c2:2d:e0:16:33:0a:6d:67:54:2b:97:2a:d2:
17:84:f3:6d:e4:e4:7e:31:d8:57:6c:2d:b4:71:50:31:68:c0:
eb:bc:01:8d:72:2f:1b:ee:be:6c:ea:55:11:70:eb:d9:d6:5c:
7c:8c:7b:99:ce:2e:e7:e2:01:d0:37:b8:95:ee:46:95:4b:e0:
a9:90:4c:6c:36:10:4c:68:d9:8a:2b:f1:b0:07:9d:5e:8f:54:
a2:a6:b8:df:54:02:18:0a:15:29:76:b6:e3:77:52:67:fa:19:
5e:a1:17:1d:08:f5:5b:27:51:6f:12:c2:07:b7:e0:cc:47:98:
fe:eb:92:71:c8:c6:5c:d3:18:f8:3d:42:f8:88:39:4c:f6:1d:
a4:b3:fa:3a:1a:ff:76:1a:7a:20:e5:9e:c8:a7:aa:ea:02:3c:
cd:30:1c:69:62:7e:43:40:5e:fe:67:d2:6a:16:1a:22:96:b6:
75:41:0b:48:67:10:ee:b2:6d:a5:2b:38:b8:1f:eb:98:b9:3e:
fd:3a:36:df:c3:11:c9:9c:3e:34:fa:a2:bc:db:15:de:bb:67:
81:25:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:53:08 2025 by rpki-client