Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R3qzvSu0lSoRo8_WSF9vP8dBf7A.roa
File: R3qzvSu0lSoRo8_WSF9vP8dBf7A.roa (raw, json)
Hash identifier: 2PjBPSJ4mjFUSEEMNsi3YTgiGNGykKRqXbGdIpRARaI=
Subject key identifier: 47:7A:B3:BD:2B:B4:95:2A:11:A3:CF:D6:48:5F:6F:3F:C7:41:7F:B0
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE966FEA687C76F6E403580570D69
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R3qzvSu0lSoRo8_WSF9vP8dBf7A.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210090
IP address blocks: 2a06:e881:5100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e9:66:fe:a6:87:c7:6f:6e:40:35:80:57:0d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477ab3bd2bb4952a11a3cfd6485f6f3fc7417fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:55:23:3e:84:ba:43:f2:92:9c:4e:e0:f1:
38:63:33:a4:f2:0f:96:c7:89:43:8f:2a:0e:c9:8c:
06:f5:2e:20:35:55:d0:0d:72:95:79:b1:d3:0e:a3:
e2:12:71:3d:d4:c2:41:05:6c:97:25:14:cb:1d:cc:
24:ca:24:a1:82:a7:c1:0f:b0:be:9b:fa:fb:ab:c5:
46:76:de:87:fd:db:df:26:fe:e5:de:c0:e0:ff:d3:
d1:5a:17:cd:bd:83:a8:49:93:2d:41:68:ac:33:6e:
6e:46:89:8d:a7:0c:46:d5:42:fc:91:76:e4:8d:75:
be:32:61:5a:81:af:3a:1e:67:6b:73:da:c4:9d:2b:
2d:d5:68:a8:0b:0e:8a:cc:f1:a6:32:c0:69:26:11:
12:3d:8c:72:50:13:ea:85:0c:b2:e6:32:95:16:fb:
b1:25:83:95:7c:e3:5d:86:29:57:6a:d7:e3:a1:f7:
0f:1f:99:8d:b2:1b:a1:89:bb:b6:88:9d:5b:e4:da:
bf:9e:64:38:15:83:cd:fe:e2:98:da:66:af:53:0a:
5f:17:d1:fc:0c:03:73:71:0f:1c:31:e5:01:12:d6:
93:cd:10:90:d2:99:ac:a6:02:9b:3e:4b:4a:e4:3b:
42:b7:ab:22:38:60:5f:72:be:69:80:7a:ac:6b:69:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:B3:BD:2B:B4:95:2A:11:A3:CF:D6:48:5F:6F:3F:C7:41:7F:B0
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/R3qzvSu0lSoRo8_WSF9vP8dBf7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5100::/44
Signature Algorithm: sha256WithRSAEncryption
7c:cf:ac:52:c8:f7:82:2d:da:c2:66:d8:bd:3b:3b:0a:ea:fa:
02:a5:4b:aa:ab:d3:cc:e5:05:af:46:43:4a:98:21:f3:05:8b:
1a:bf:1d:6e:9e:75:0f:f0:6d:33:3a:cd:34:a9:6c:bc:75:dd:
48:48:64:ca:a4:38:8b:94:93:a7:59:a9:ab:38:f4:7e:5b:26:
17:b5:41:46:fe:52:60:60:9e:cf:5e:ee:e5:10:22:d2:86:83:
d8:42:ba:3c:f3:56:21:3a:e8:14:f6:e7:03:12:91:9e:54:e7:
71:6e:04:66:01:33:04:0b:61:11:3f:3f:fc:23:18:51:72:2a:
32:c5:25:ee:17:a2:eb:28:09:b2:1f:29:0d:db:eb:58:24:ac:
6a:1d:6a:97:73:46:53:63:d2:7f:e7:bc:f0:d3:08:2e:b9:62:
e6:19:a7:41:3d:44:30:a0:23:21:39:6f:3c:62:53:36:56:14:
26:92:a8:29:1d:a9:f0:a3:4f:04:c4:72:b6:24:df:ba:1a:84:
97:b1:70:d8:73:dd:81:63:c7:33:ee:76:1c:7e:fb:b0:be:14:
5e:de:58:37:92:43:2e:84:f0:4c:8c:12:19:0d:1b:33:08:48:
93:f1:e9:87:ab:ca:d2:f4:0a:b1:c1:2f:91:d6:ff:00:35:2a:
8b:ac:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:20 2025 by rpki-client