Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/IHnrOdaK-Us7yC429Ad4wLvE-To.roa
File: IHnrOdaK-Us7yC429Ad4wLvE-To.roa (raw, json)
Hash identifier: m5DgxC8cNx+Iz3SruQ6GhTgM9nwrkgWHYq+5HUoSG/I=
Subject key identifier: 20:79:EB:39:D6:8A:F9:4B:3B:C8:2E:36:F4:07:78:C0:BB:C4:F9:3A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE3713421D673777A24555527B6E3
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/IHnrOdaK-Us7yC429Ad4wLvE-To.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206946
IP address blocks: 2a06:e881:260a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e3:71:34:21:d6:73:77:7a:24:55:55:27:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2079eb39d68af94b3bc82e36f40778c0bbc4f93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:65:7b:f2:47:83:b2:0d:be:ac:72:08:69:
a1:e5:9f:50:4f:db:16:cd:bf:27:73:58:b1:25:59:
e6:57:29:32:aa:a0:dc:a7:d9:9e:b9:87:3a:a5:28:
4d:49:c2:1d:2b:9b:01:2c:66:3a:fe:d9:9f:46:a7:
60:c2:04:14:af:50:5a:1d:d7:31:dc:ba:d5:64:e8:
ee:50:78:c1:68:61:9b:91:53:f6:7d:d4:57:3b:1c:
a0:57:58:82:e7:1f:44:bf:93:ab:80:63:e4:7d:f5:
29:62:11:ef:e0:e4:fe:40:b8:cb:38:ee:69:25:bb:
e8:13:cc:95:53:71:3d:55:ed:25:06:17:b5:b3:54:
55:6f:f6:23:f3:00:e0:0c:0b:37:98:63:dc:40:3b:
3a:5a:e5:43:ef:84:e3:c8:a2:f3:c1:8d:02:e5:2b:
3d:f4:09:f0:d6:a1:e7:34:1b:be:39:0c:2a:ef:8e:
15:e0:2c:fa:6e:0f:b0:58:5b:5a:a6:3d:d6:f5:df:
c4:4a:37:01:c2:7c:0d:eb:6a:bf:b9:5a:ac:79:da:
5d:b4:f5:fb:68:b8:9d:29:9d:05:38:da:95:56:c2:
66:0f:71:3b:e2:ae:3f:67:47:68:d7:54:84:e4:ba:
9e:9b:e0:3a:ca:5b:9c:23:2f:6a:1c:a6:3f:7c:9d:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:EB:39:D6:8A:F9:4B:3B:C8:2E:36:F4:07:78:C0:BB:C4:F9:3A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/IHnrOdaK-Us7yC429Ad4wLvE-To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:260a::/48
Signature Algorithm: sha256WithRSAEncryption
5f:73:83:3e:6e:f6:a7:91:38:95:34:4d:4d:60:2b:62:1d:e7:
66:22:76:a6:83:51:71:ae:8e:d0:1a:16:bb:3b:a0:0a:94:d4:
fd:57:4b:ef:97:c5:6c:ca:d0:c7:a6:d8:9c:03:c0:b6:67:0a:
9e:95:a1:bc:f8:11:f1:89:9b:7a:51:bc:4a:4a:76:08:c0:79:
de:57:50:2b:46:ae:32:77:01:65:ff:0c:ff:9b:fb:d6:54:1e:
60:af:c3:60:80:b2:75:09:1d:5a:0a:7a:b2:fc:d2:9b:28:f8:
81:96:dd:27:e2:78:05:c5:ba:d4:65:74:35:40:63:c9:ed:9d:
ae:f4:fb:ff:54:e0:96:c5:23:aa:f1:3b:1a:7e:54:0e:32:21:
2a:ca:a4:47:ef:35:1b:cf:8a:c0:21:da:4c:81:5d:60:fc:87:
97:22:26:eb:eb:bd:84:fb:03:ba:14:fd:92:78:e7:e8:7a:b5:
f4:74:20:4d:c4:23:93:67:b4:80:e6:61:ba:02:04:8b:10:e3:
c7:cb:33:31:2a:cc:a9:99:9d:2d:77:c3:e8:d7:b1:70:45:45:
42:67:0a:d1:e5:4c:9a:0e:1d:62:a1:8b:3b:9d:e5:33:6c:ce:
08:86:0e:d0:57:1a:b4:45:5d:78:65:c6:36:8a:5f:ba:8d:f1:
0e:cb:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:05 2025 by rpki-client