Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-buam4cvzrUESLjjB1PACZifMOE.roa
File: 1-buam4cvzrUESLjjB1PACZifMOE.roa (raw, json)
Hash identifier: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=
Subject key identifier: F9:BB:9A:9B:87:2F:CE:B5:04:48:B8:E3:07:53:C0:09:98:9F:30:E1
Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial: 01941F8C24D726B5A40DFEDACA0834C69400
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-buam4cvzrUESLjjB1PACZifMOE.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20766
IP address blocks: 2a0f:e580:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:24:d7:26:b5:a4:0d:fe:da:ca:08:34:c6:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9bb9a9b872fceb50448b8e30753c009989f30e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:4f:3a:80:30:5b:65:57:83:15:5e:e5:cc:
96:d5:db:ce:2a:53:00:65:b4:fe:a7:12:99:cc:26:
5e:c8:62:11:b6:2a:d5:7d:a7:0f:b6:9f:92:8f:28:
54:3f:c5:53:58:52:16:d6:13:f4:cc:ed:6b:e3:fb:
d1:60:7c:97:d6:59:f4:16:72:e2:09:9b:d7:51:13:
c2:83:c8:2f:8d:5b:15:1b:94:0b:ff:4a:b9:ea:7e:
63:d8:33:93:f4:eb:79:74:0f:13:93:7b:a4:0d:be:
1a:c6:87:66:be:7e:32:4c:04:81:ec:28:e4:17:50:
3b:f1:8c:b8:66:8b:73:fd:02:6b:85:4a:23:ea:c7:
f5:57:e9:6a:4d:9a:2d:e5:67:a3:33:77:bf:32:7d:
7a:d4:a1:32:1d:e2:ec:d0:2d:b8:d4:5e:d9:a1:c1:
3c:db:54:03:b0:d9:31:bd:86:38:39:d0:86:d7:c3:
cb:c9:b4:36:18:8a:9c:f0:5f:5e:e0:b9:8d:1a:a4:
46:ef:03:41:eb:9f:d4:03:35:86:74:49:43:2b:0f:
60:3e:cb:2d:82:52:5f:c1:a8:5d:54:af:f7:8c:55:
a7:8b:85:26:d8:91:f5:f2:94:54:a2:4e:f6:47:b0:
90:98:5f:2c:0f:2e:f4:98:32:50:03:92:ba:8a:e9:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:9A:9B:87:2F:CE:B5:04:48:B8:E3:07:53:C0:09:98:9F:30:E1
X509v3 Authority Key Identifier:
keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/1-buam4cvzrUESLjjB1PACZifMOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e580:b::/48
Signature Algorithm: sha256WithRSAEncryption
d2:23:c8:4f:c8:58:ff:71:3e:df:7f:33:d0:7e:50:5a:de:48:
81:4d:b5:f9:f7:04:8c:17:0e:cc:76:d7:27:f5:ce:b9:56:06:
5a:c6:a1:dd:28:32:ba:de:c6:ae:6c:cd:e7:53:17:f2:17:2c:
59:d0:0c:29:91:bc:70:9e:c3:74:9b:90:cf:c7:de:44:bd:65:
1d:d6:b5:27:d6:ba:af:fa:8c:77:af:19:bf:53:70:9a:2a:af:
a8:bd:74:af:54:42:d2:50:68:87:63:75:0a:4c:4a:63:b1:0e:
aa:6a:d6:c4:3e:a5:f5:ad:33:05:be:75:72:f7:7e:a3:0a:d6:
b6:4d:30:2a:b6:8b:14:38:9d:7b:07:70:31:56:8f:28:ff:6d:
47:87:a0:4e:64:7c:6d:26:01:5e:f9:59:41:a8:e5:a3:8b:5a:
27:40:cf:ec:95:e2:69:63:3e:63:b7:66:26:cc:a5:11:c1:de:
bf:0f:ab:35:92:6f:b3:c9:39:c1:97:67:0a:f8:71:ae:15:0b:
45:bb:e0:a1:b8:a3:83:37:ef:87:e6:0f:51:49:6d:f6:0d:02:
99:09:b3:25:ba:6e:e4:66:65:3d:61:a2:a5:ab:9b:9c:8a:25:
6d:31:0d:bc:87:71:bf:f8:6a:1a:00:46:f2:96:b0:b5:d8:92:
f9:de:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 15:44:15 2025 by rpki-client