Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DLJUu5D-Cv2y-D2Cy0Y1s7nY0lA.roa
File: DLJUu5D-Cv2y-D2Cy0Y1s7nY0lA.roa (raw, json)
Hash identifier: pFeAJX5d7MARiVlHnB11cJHPjLULcXie8Rf2rUg8xsE=
Subject key identifier: 0C:B2:54:BB:90:FE:0A:FD:B2:F8:3D:82:CB:46:35:B3:B9:D8:D2:50
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019498FC1C26FBE6D2B500310C1BD4BAEA00
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DLJUu5D-Cv2y-D2Cy0Y1s7nY0lA.roa
Signing time: Fri 24 Jan 2025 15:44:06 +0000
ROA not before: Fri 24 Jan 2025 15:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210464
IP address blocks: 2a0a:79c7:f400::/38 maxlen: 48
2a0a:79c7:f7e0::/44 maxlen: 44
2a0a:79c7:f800::/48 maxlen: 48
2a0a:79c7:f898::/48 maxlen: 48
2a0a:79c7:f899::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:fc:1c:26:fb:e6:d2:b5:00:31:0c:1b:d4:ba:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 24 15:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb254bb90fe0afdb2f83d82cb4635b3b9d8d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:78:fa:3b:89:99:91:af:d6:2f:e1:62:3c:
93:cc:5c:05:bf:11:00:47:43:08:9e:ec:19:5a:02:
63:5c:7e:bf:af:22:e2:e7:ef:a2:3f:7d:6f:cb:ff:
2a:6d:ac:b8:df:67:d5:04:ba:34:60:75:c6:54:5e:
6f:6d:57:ca:bd:0b:6b:06:d5:ac:1e:2b:53:98:cc:
14:a2:b7:e3:7a:8b:bb:b5:74:2b:85:8b:4f:2a:bc:
7f:a5:62:e2:1c:9e:80:62:1b:4f:ce:62:cc:cb:6e:
b8:8c:df:73:52:40:13:7e:87:13:7f:a0:3f:ce:cc:
88:81:07:91:57:04:19:09:87:9a:41:7e:fa:ac:63:
9c:6b:a3:cb:a7:a2:33:dc:71:1f:64:4a:1c:e4:3d:
6d:a8:43:17:34:8b:ea:f0:7c:6e:b9:13:13:5a:df:
54:1a:fe:49:f2:ed:47:79:ae:3d:4d:85:3e:21:d3:
b7:03:97:9c:31:84:19:e5:95:81:cf:c9:c6:b3:3c:
c2:1e:d0:27:ff:20:37:52:e6:fc:3b:34:0f:5f:50:
ec:ec:1c:02:15:5b:3d:e3:04:2f:b7:2e:74:09:db:
ec:dd:ca:3d:3d:b7:5b:d1:0d:21:cd:6c:5b:f8:ab:
39:4e:74:6c:94:07:ff:7f:3c:80:86:a3:be:0c:4e:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:54:BB:90:FE:0A:FD:B2:F8:3D:82:CB:46:35:B3:B9:D8:D2:50
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/DLJUu5D-Cv2y-D2Cy0Y1s7nY0lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f400::-2a0a:79c7:f800:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f898::/47
Signature Algorithm: sha256WithRSAEncryption
d8:32:e4:74:ac:25:b9:a9:15:7b:7a:eb:33:19:38:2e:cd:03:
59:2e:f6:76:28:b0:57:5a:e9:b5:d5:88:21:f4:71:9c:6d:aa:
ec:58:cb:5a:6f:ed:26:43:49:0c:5a:97:cb:3a:67:ef:06:55:
d5:44:6e:ad:4a:4c:3e:ed:bc:52:71:aa:3e:f2:af:fa:21:52:
d9:74:6c:2e:e4:64:8e:33:b6:b5:54:2d:45:76:aa:d4:ae:83:
5a:81:59:a8:6c:93:da:16:23:8c:36:fb:b8:6a:f3:d0:1c:b8:
69:b0:1d:a4:4d:ed:54:37:b7:5e:21:b6:1a:a1:70:00:37:c6:
ff:99:38:93:f8:e1:a3:23:bd:bb:8e:30:98:9b:13:35:a7:46:
76:00:d9:18:da:43:37:30:31:46:ae:c6:42:92:10:0b:6d:6a:
2b:25:f0:c6:4b:56:7a:15:5b:ab:7d:d0:5e:63:5b:7d:83:68:
08:25:af:1e:74:ec:a4:db:db:9d:6e:79:8f:14:90:c0:17:4e:
43:c5:5b:70:86:2a:08:0b:29:78:78:c0:e6:c5:66:3c:3b:90:
ca:2b:b9:d7:7a:5f:45:43:f1:4b:be:a4:a2:07:ff:ce:22:3b:
21:9a:52:47:fb:e6:e5:6f:72:4a:70:d5:46:82:8f:ed:1a:02:
ba:3e:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:35:33 2025 by rpki-client