Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa
File: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (raw, json)
Hash identifier: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=
Subject key identifier: EC:71:F0:D5:31:88:29:91:93:E0:E3:10:5C:9D:A4:71:1A:56:A2:44
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 019422FB3083F1B337B8FF9BD62FA85DCE23
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa
Signing time: Wed 01 Jan 2025 17:47:54 +0000
ROA not before: Wed 01 Jan 2025 17:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207983
IP address blocks: 2a0e:5e44::/31 maxlen: 31
2a0e:5e46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:30:83:f1:b3:37:b8:ff:9b:d6:2f:a8:5d:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Jan 1 17:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec71f0d53188299193e0e3105c9da4711a56a244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:c5:e6:71:61:a6:ac:13:35:7a:2b:96:4b:
e2:e1:17:75:22:c0:78:a1:6e:b9:69:e2:e1:88:f1:
1b:25:fa:9e:9a:ce:72:e1:46:62:68:0d:cf:02:6d:
d0:2f:9d:f0:6c:87:1f:3d:a0:bd:58:c7:da:a7:13:
79:21:0d:6f:bf:df:73:b9:7b:1d:28:94:6c:df:09:
c3:81:eb:62:3e:3d:b6:a5:16:8c:cb:96:67:c8:90:
d0:8d:a0:7d:c2:23:11:a6:4d:8c:1c:1b:83:31:c3:
41:96:ce:e4:e2:aa:66:dd:27:5b:90:4b:db:6a:ed:
fa:dd:1e:6f:e7:9f:f9:f5:cc:0f:a5:59:79:2d:57:
31:32:a4:83:7a:cd:ff:d4:6f:0f:90:bb:22:03:22:
8d:a3:11:c4:3c:61:24:53:40:69:0a:ea:23:70:0f:
e1:6b:9d:c9:90:b1:15:a3:4b:67:3c:05:d4:15:a1:
b3:10:21:70:42:bf:10:cd:de:42:5a:c0:d2:1d:81:
8c:f2:d2:3d:81:be:4c:65:42:3a:1a:44:1e:ee:4d:
d4:f8:3c:93:be:95:f3:d5:09:e7:33:b7:dd:9c:c5:
ff:ff:88:ec:18:93:a8:cd:fe:f1:63:fb:b8:ea:8e:
1e:aa:97:6b:91:3f:6a:d4:1f:a3:6e:00:6b:99:b2:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:F0:D5:31:88:29:91:93:E0:E3:10:5C:9D:A4:71:1A:56:A2:44
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5e44::-2a0e:5e46:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:be:7c:3f:7a:1b:43:6e:01:3f:fd:f5:54:ce:44:35:d7:a4:
51:cd:0c:25:ba:f2:0f:39:dc:23:8c:4b:e4:82:4c:fe:8c:78:
65:5c:9e:fc:e8:65:05:89:ac:5e:2b:e5:8c:42:24:bb:b9:fa:
fb:40:a4:53:de:ac:97:45:9d:c3:f2:0d:c5:62:8a:7b:ff:12:
b9:6c:d1:a7:ec:13:8b:8d:4a:49:e7:c9:70:34:ed:84:ac:4e:
57:c0:1d:50:87:47:82:03:a1:73:fe:be:7b:a8:5d:a2:a7:e7:
5b:6b:b7:d4:12:28:64:ba:cc:c7:52:74:2b:b7:0c:d9:97:92:
6b:10:55:97:0c:15:a8:35:ee:b0:97:7b:09:1a:f2:2b:6d:b3:
5f:e9:de:7c:db:97:a3:38:ac:52:0b:95:0a:b6:97:32:0f:cb:
8f:5a:e0:41:4d:fe:23:30:73:48:95:59:db:35:d8:2c:43:15:
6e:0b:8f:5e:af:33:73:48:c6:35:cd:ac:eb:1f:3f:55:2e:49:
62:72:09:ab:2a:43:17:b4:9a:0c:8e:ca:b7:59:a9:17:50:a0:
2c:43:6f:70:c4:be:52:99:09:2a:eb:95:77:7f:71:5d:ed:20:
5d:be:2d:77:cc:d6:35:1a:62:ef:d5:11:bd:fe:c6:bd:80:22:
24:fb:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:51 2025 by rpki-client