Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jxj8b0640c4Oh-qHriPlI0nIB0I.roa
File: jxj8b0640c4Oh-qHriPlI0nIB0I.roa (raw, json)
Hash identifier: X6vDheH/U/P2mxAvb1Cy8PzPYFwA5lC2nYbP+AC5zz8=
Subject key identifier: 8F:18:FC:6F:4E:B8:D1:CE:0E:87:EA:87:AE:23:E5:23:49:C8:07:42
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448C321EA5CE608E96571EA1327304
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jxj8b0640c4Oh-qHriPlI0nIB0I.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39220
IP address blocks: 2a09:7:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8c:32:1e:a5:ce:60:8e:96:57:1e:a1:32:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f18fc6f4eb8d1ce0e87ea87ae23e52349c80742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:20:fd:cd:4a:18:af:13:86:ee:06:d7:0d:
40:ad:71:2a:b8:b3:00:9d:d6:7b:22:f8:5c:5c:33:
83:b9:07:75:c6:ba:ea:0c:1a:92:71:4b:58:eb:a9:
ae:5d:9a:da:b5:eb:eb:f9:5d:9e:fa:27:0a:8e:ed:
49:10:26:77:2c:19:3b:c8:e2:60:43:ed:dd:6c:96:
66:15:42:38:b6:4f:e6:49:f0:b8:ab:07:1a:dd:01:
4a:33:d0:df:21:58:f3:24:f1:7b:8e:9a:61:18:1f:
45:b0:c2:4f:2b:23:2f:45:ae:88:d8:a5:a0:91:08:
0c:4e:1a:8d:f7:28:e4:4e:17:43:ed:ff:d2:93:6e:
35:5e:93:8e:f5:b0:9a:77:91:80:40:cf:1f:18:60:
eb:ba:ee:4d:10:79:88:d0:b2:2a:ae:c4:17:a0:30:
77:ce:ce:e9:dd:18:b3:e4:cc:be:af:9c:7e:38:cd:
db:13:85:90:b9:72:56:38:84:79:92:ab:94:19:16:
77:f9:a3:76:04:3d:57:e5:f3:12:ea:9c:0f:13:09:
00:46:4b:d4:42:cd:9c:91:17:d6:2e:78:18:ca:76:
b2:22:3d:02:4d:90:bd:f5:5d:7d:ac:d7:92:29:07:
82:f7:1b:4c:19:2f:b9:b6:e9:03:c3:d8:3e:cf:9d:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:FC:6F:4E:B8:D1:CE:0E:87:EA:87:AE:23:E5:23:49:C8:07:42
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/jxj8b0640c4Oh-qHriPlI0nIB0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6c:f2:c8:62:5b:32:bb:44:4b:08:7a:b7:dc:26:38:3b:d2:d6:
2a:5d:42:50:bb:be:15:48:8c:97:62:27:a4:a5:84:26:da:99:
35:f8:b5:99:47:e5:b2:2d:62:ea:4f:02:ff:c5:22:14:fd:cd:
cc:0d:3c:d7:ec:99:9b:a5:4f:e3:9f:01:a0:2c:c6:c2:fc:aa:
60:7a:46:31:a6:b3:1f:28:0c:31:e5:fa:05:cb:55:ea:8d:25:
4f:85:43:3e:f8:f2:dd:bb:c2:9a:57:6e:a4:3b:51:09:dc:56:
63:fd:19:30:09:25:85:da:32:6e:d0:e8:b7:b2:5e:d5:b9:7d:
5d:94:aa:82:74:d1:db:16:05:6e:cd:7e:95:ab:3b:c6:07:ed:
cc:9a:fc:c2:2f:13:4d:b9:b6:24:1d:08:78:ec:61:11:32:cd:
ff:41:54:3e:34:4e:79:8f:14:6e:ac:5e:de:87:82:5a:e3:b9:
3d:d0:70:db:66:a9:29:45:88:48:5a:e6:ec:df:ba:5b:06:6f:
4e:ca:0e:da:02:21:79:54:be:8f:3f:b0:53:1b:45:f6:f9:02:
71:1d:fc:05:1d:62:95:ef:cf:42:ec:20:95:d6:73:b6:bc:68:
75:f6:d2:dc:13:0b:e0:af:c4:68:dc:67:70:ca:2b:91:93:32:
39:dc:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:12:02 2025 by rpki-client