Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-FDGt4Rp1frZ7O9F1BEHug_b08U.roa
File: 1-FDGt4Rp1frZ7O9F1BEHug_b08U.roa (raw, json)
Hash identifier: wyEG9a5byTCiM/XRIHkjK16hkShzhrLtL1O8H6so8Us=
Subject key identifier: F8:50:C6:B7:84:69:D5:FA:D9:EC:EF:45:D4:11:07:BA:0F:DB:D3:C5
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01945F130D8E4C700BE4E6BBBF47F15F3039
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-FDGt4Rp1frZ7O9F1BEHug_b08U.roa
Signing time: Mon 13 Jan 2025 09:51:11 +0000
ROA not before: Mon 13 Jan 2025 09:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214022
IP address blocks: 2a0a:79c7:f001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:13:0d:8e:4c:70:0b:e4:e6:bb:bf:47:f1:5f:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 13 09:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f850c6b78469d5fad9ecef45d41107ba0fdbd3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:2d:47:4b:ad:33:91:06:c8:87:89:66:e0:
52:81:a7:4a:00:1b:58:2b:52:8e:44:e8:f2:6f:09:
b3:55:df:e9:92:6a:fc:b9:16:ca:8a:e4:df:1f:18:
08:73:59:de:45:9b:71:a0:e2:e5:b0:da:98:d1:7b:
03:25:97:91:a7:e9:3e:49:2b:99:08:df:5e:7a:fe:
d3:bc:86:72:17:17:1c:0f:a4:3f:e5:45:29:ee:d6:
44:d5:db:4d:82:8f:55:22:75:c2:5a:e3:79:b3:e2:
8f:e0:b5:f6:03:61:8e:15:22:7c:b7:6d:c1:ec:42:
c9:e2:57:ed:52:6b:ae:33:15:6c:92:3d:7c:18:df:
c0:d0:e6:93:6c:88:e3:2b:ba:14:fa:4c:ae:03:a6:
be:24:dd:a8:09:f1:a0:3a:ea:a5:25:ab:3c:67:65:
70:f9:98:61:5d:77:0c:73:d9:d9:e4:f9:a5:59:06:
16:dc:11:27:21:38:04:97:44:a7:0d:63:8c:2c:46:
8b:b8:ba:71:d6:90:fa:49:f8:b2:81:91:88:2c:5f:
88:3b:6a:7d:ee:dc:84:17:9b:bc:48:7f:cf:c2:22:
92:0c:a7:22:c8:a8:4b:68:da:6d:0c:10:fb:39:3c:
10:d4:0b:48:8d:2a:3b:c6:95:cb:42:c1:4f:c4:d2:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:C6:B7:84:69:D5:FA:D9:EC:EF:45:D4:11:07:BA:0F:DB:D3:C5
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1-FDGt4Rp1frZ7O9F1BEHug_b08U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f001::/48
Signature Algorithm: sha256WithRSAEncryption
08:48:cd:13:cb:06:84:7e:7c:88:08:31:b5:3f:a1:a7:4d:74:
96:d8:9d:79:22:f6:b7:b6:1f:fd:45:79:17:aa:eb:0a:80:e1:
18:86:3e:7d:ad:1b:45:70:88:9c:2b:9b:3c:e4:81:ff:cf:3a:
da:1e:92:e5:e4:8c:6e:35:7a:7c:86:61:8e:cf:78:0d:27:62:
94:a9:1a:8d:80:a6:b4:86:e5:73:2e:a8:a7:46:96:91:27:38:
02:63:01:a5:15:5b:02:2d:ca:36:39:27:ac:1f:11:a5:b7:43:
02:ba:a0:30:6a:34:25:45:3f:e1:be:49:52:0f:c1:4a:28:db:
c8:de:43:63:71:15:2e:79:04:76:29:6a:32:81:5b:93:75:65:
1c:95:06:50:13:75:2d:a2:69:d1:52:57:03:f5:5b:7e:19:5a:
b0:a0:be:74:91:3e:cf:e4:91:c4:ea:ee:33:99:07:d0:53:06:
14:11:69:2f:6b:42:61:aa:05:33:b2:ce:71:4b:42:bd:9b:08:
8e:a4:c0:dd:20:49:69:0c:c8:6f:62:ce:c8:d7:5a:19:c7:71:
92:39:d6:4f:9c:0f:ac:01:6f:04:d0:ec:ae:ef:f4:af:27:f0:
53:2f:64:7f:58:0a:92:09:50:b3:3d:d0:d6:98:4e:13:53:38:
fc:a7:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:44:03 2025 by rpki-client