Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa
File: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (raw, json)
Hash identifier: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=
Subject key identifier: 92:05:94:70:B5:70:9E:51:D0:F4:DD:1E:75:85:3E:98:F4:E2:85:84
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019421B2311BD72965E670E65734417EEFC3
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43617
IP address blocks: 2a0f:3784::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:31:1b:d7:29:65:e6:70:e6:57:34:41:7e:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92059470b5709e51d0f4dd1e75853e98f4e28584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:26:29:a5:a0:94:7c:2b:f3:b6:2d:58:70:
54:0f:27:9a:11:70:f1:29:24:d5:a0:5b:37:89:7d:
f5:40:e9:29:62:f7:fe:ec:de:36:1a:38:bf:5d:dd:
0a:97:a0:1e:b7:2a:37:b6:c4:04:a9:16:b7:1a:84:
44:0c:0a:63:2b:cb:49:d5:3c:36:86:ec:68:66:73:
ca:5f:3c:74:6f:f0:3d:84:38:67:f0:19:75:91:38:
27:96:70:79:71:b2:f9:16:28:fa:17:34:83:44:90:
cd:8b:cb:d6:4c:eb:31:e1:07:ed:a5:87:5a:e1:95:
c4:91:33:ed:c0:b0:f5:e7:68:a9:85:6d:0c:cf:84:
a1:bc:d0:e3:21:ba:bf:5b:8c:ad:d2:1e:41:cc:59:
5d:5c:c5:0e:f0:54:79:69:b6:24:08:15:23:56:9d:
2f:32:e4:b3:49:8d:f3:8a:be:45:ae:e3:79:e1:71:
5b:5f:4c:a3:85:d4:57:b7:89:77:76:d6:99:38:e6:
a2:53:68:47:77:25:e8:01:d6:f6:b1:c6:bb:22:c1:
19:18:26:77:66:3c:f4:65:d1:db:cb:3a:e3:95:f0:
6c:74:22:b0:93:b3:72:8c:2c:3f:70:e7:5f:f4:09:
9b:53:54:28:a8:15:ea:26:89:a9:94:03:f8:53:35:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:94:70:B5:70:9E:51:D0:F4:DD:1E:75:85:3E:98:F4:E2:85:84
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3784::/32
Signature Algorithm: sha256WithRSAEncryption
45:60:c0:da:87:03:cb:1c:43:fb:ff:ae:6b:cd:ef:ea:ac:5f:
e0:29:55:33:ff:7b:e7:16:b8:1d:a2:51:17:7b:82:56:0e:15:
9c:27:aa:73:a8:b3:80:d2:65:52:41:c4:36:6e:79:13:40:07:
82:df:73:cd:3f:24:5c:22:70:ca:a5:6f:d6:07:65:9f:6a:d6:
e6:79:56:4b:c9:8c:50:13:95:19:52:b0:55:1a:a5:07:fa:a8:
7d:47:92:d5:3b:94:3a:40:ca:3c:b2:a7:28:80:39:0d:44:6d:
8d:10:75:bb:31:18:97:07:2f:7d:dc:5e:55:9b:95:22:9b:65:
30:a0:64:f2:3c:d2:62:54:3a:30:91:bf:37:47:fc:1f:ae:2d:
fb:17:bb:11:90:b7:23:79:33:d6:57:c3:1f:b2:cd:50:d7:e4:
57:9d:55:fa:63:7a:7c:89:8f:f3:4d:e2:7c:8b:53:13:4f:7c:
d3:4e:f1:6f:e7:a5:24:46:be:ab:05:3c:46:7e:c3:d7:ed:ee:
11:97:af:4d:9d:a2:e9:0e:2d:5f:3b:87:95:ab:5a:a7:df:0c:
3c:e9:53:bf:1a:ef:f3:d7:62:fc:c4:ba:4d:53:23:a7:c3:c2:
a8:07:31:38:06:a6:73:92:cb:65:56:fb:bf:67:36:e9:27:f6:
28:8a:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:17 2025 by rpki-client