Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4WN9fqU3I4hNJCZo5HJKxP13_oU.roa
File: 4WN9fqU3I4hNJCZo5HJKxP13_oU.roa (raw, json)
Hash identifier: Q+4Mb+nQiUdQlBGfg/3uzr6bSqWOim2XpqoGfuiVHaI=
Subject key identifier: E1:63:7D:7E:A5:37:23:88:4D:24:26:68:E4:72:4A:C4:FD:77:FE:85
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEFC7B60BD3D3C1ACA9AC8CD4D52A
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4WN9fqU3I4hNJCZo5HJKxP13_oU.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f500::/40 maxlen: 48
2a0a:79c7:f600::/40 maxlen: 40
2a0a:79c7:f801::/48 maxlen: 48
2a0a:79c7:f802::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ef:c7:b6:0b:d3:d3:c1:ac:a9:ac:8c:d4:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1637d7ea53723884d242668e4724ac4fd77fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:36:70:f6:95:3f:62:04:cf:77:30:1a:95:
f5:97:e9:fe:43:f7:82:44:46:25:e6:33:06:19:55:
40:ea:76:c3:29:e8:c6:32:51:6c:05:a1:b0:38:62:
e7:43:83:a4:20:c2:5a:65:94:66:9d:c4:ab:14:06:
3a:30:0d:17:d0:6c:77:67:c4:b2:54:8b:96:b2:37:
98:87:a3:d2:ad:82:c7:ef:9f:41:8e:e8:94:f1:85:
3a:a5:5d:66:2d:98:d8:fc:b4:e9:7a:99:a8:be:28:
1e:df:b9:02:08:36:8b:34:51:ea:d7:c5:1d:6d:9d:
97:2a:9c:20:84:a2:14:79:1e:94:26:b0:51:02:de:
9c:33:0d:0f:3c:ba:7e:c3:cc:82:45:b6:84:ef:d2:
a8:ac:8c:59:5a:8d:8e:37:05:09:59:6f:98:b6:14:
fa:0d:f3:45:73:e9:bb:83:22:42:b7:ac:a1:a2:49:
f0:a8:c7:72:ba:6f:9f:cd:13:20:86:cc:66:af:d7:
be:2e:57:6a:ad:f5:02:44:7e:fe:42:6f:d6:a0:ed:
9b:7a:4d:7f:73:7c:27:9f:c1:50:59:f3:54:d0:fa:
66:67:cf:4c:22:d1:c1:6f:1f:27:7d:d5:0c:62:ad:
a1:63:5c:9a:c8:ef:8f:8f:0f:dd:65:dc:7b:c9:39:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:7D:7E:A5:37:23:88:4D:24:26:68:E4:72:4A:C4:FD:77:FE:85
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4WN9fqU3I4hNJCZo5HJKxP13_oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f500::-2a0a:79c7:f6ff:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f801::-2a0a:79c7:f802:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cc:2e:c3:2a:b8:b2:b6:7f:85:0a:57:7b:08:da:95:00:58:5b:
35:0e:6f:56:ca:b1:3c:c7:40:cb:70:78:2e:c0:8b:f0:d2:ee:
1e:b5:23:4e:83:01:ac:f5:58:e2:08:f3:76:b3:01:75:0f:c6:
a7:82:34:15:5d:ee:2c:cc:cd:8e:7a:72:32:7a:3f:5e:ec:39:
8e:4f:01:d5:c7:d6:b0:8d:28:e5:d5:b7:7d:01:eb:f8:5d:68:
42:d0:d7:3f:01:c0:27:d0:f8:b1:10:14:60:57:65:3c:57:e9:
1b:34:0c:aa:3b:aa:e0:85:fa:6f:9b:3c:77:d4:20:88:4c:80:
b4:44:3e:24:c7:72:d9:aa:b7:50:ab:65:4a:7d:c7:bb:51:4d:
2a:84:d1:92:2f:cb:c0:58:8d:68:9e:19:1f:f7:c0:9e:23:13:
3b:20:1d:7d:6c:dc:23:56:3c:16:e0:a8:20:8b:72:e8:c6:9c:
a1:95:bd:83:01:04:21:c3:fe:6e:62:bc:4d:cc:8b:49:dd:64:
3c:87:f9:73:1d:ed:20:9e:3a:c6:43:8f:57:a9:97:3f:d6:e9:
78:81:39:a4:43:51:d1:80:f1:eb:d3:0a:e3:e6:d6:5a:b7:e2:
f4:f5:e5:ae:c6:88:29:94:71:7a:ff:f5:9b:1b:03:49:dd:b5:
8f:c1:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:22 2025 by rpki-client