Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/aFoaX0lsIl1KXFtWqKV2711VQFg.roa
File: aFoaX0lsIl1KXFtWqKV2711VQFg.roa (raw, json)
Hash identifier: 06resvueR4bBS6CS3B/3L4c/SIdk4cRUVDO4dwBpGlg=
Subject key identifier: 68:5A:1A:5F:49:6C:22:5D:4A:5C:5B:56:A8:A5:76:EF:5D:55:40:58
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01946FB7D7A417E31E62F68666F68489E24D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/aFoaX0lsIl1KXFtWqKV2711VQFg.roa
Signing time: Thu 16 Jan 2025 15:25:06 +0000
ROA not before: Thu 16 Jan 2025 15:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f500::/40 maxlen: 48
2a0a:79c7:f600::/40 maxlen: 40
2a0a:79c7:f7c0::/44 maxlen: 48
2a0a:79c7:f801::/48 maxlen: 48
2a0a:79c7:f802::/48 maxlen: 48
2a0a:79c7:f900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:b7:d7:a4:17:e3:1e:62:f6:86:66:f6:84:89:e2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 16 15:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685a1a5f496c225d4a5c5b56a8a576ef5d554058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:78:75:64:ec:62:78:02:8c:3a:27:f7:f7:
8c:35:bb:0f:40:d0:a3:e5:1b:c7:b3:fb:14:c8:fe:
4d:18:65:b2:36:4e:6d:63:93:22:ee:ef:38:53:8a:
8b:33:6d:70:ca:a4:dc:5b:3c:13:44:f8:bc:41:eb:
8f:86:7f:7f:2b:f5:8f:9a:b0:db:d9:b1:d3:f3:ec:
36:0d:86:2e:19:27:32:71:24:41:ff:ff:a5:62:70:
b1:c6:cc:a6:f7:2b:e1:bf:c4:fe:c1:07:99:ce:1d:
c9:e2:80:12:0e:1b:17:19:9e:c7:fa:63:be:21:1d:
22:ed:de:85:bc:26:8c:e5:12:5a:b4:60:46:55:79:
32:90:61:5f:ef:a0:6e:06:67:99:36:ed:1a:97:34:
f8:56:58:91:6e:1e:fc:46:1e:bc:af:be:7a:46:c6:
96:fb:49:d1:2c:a5:26:ce:2e:43:fb:d5:ba:bc:c1:
c5:86:f3:e5:a9:49:33:6e:12:5c:7b:a6:6f:d8:fd:
c8:31:cd:0d:ae:e2:c0:7b:4f:2d:1c:e5:46:62:81:
84:9c:51:02:55:bf:db:69:94:08:5e:86:da:41:1c:
3c:9c:c8:b8:9a:b6:3d:52:24:52:9b:2f:3e:03:32:
d2:a1:11:4b:ed:de:7f:26:ab:5f:e7:ac:7f:e1:6f:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:1A:5F:49:6C:22:5D:4A:5C:5B:56:A8:A5:76:EF:5D:55:40:58
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/aFoaX0lsIl1KXFtWqKV2711VQFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f500::-2a0a:79c7:f6ff:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f7c0::/44
2a0a:79c7:f801::-2a0a:79c7:f802:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f900::/40
Signature Algorithm: sha256WithRSAEncryption
33:48:ae:96:11:18:84:a3:21:9e:3c:64:60:8c:ab:0a:a9:08:
1a:a1:4c:3b:56:0c:db:72:95:a7:7d:62:e1:1d:2e:71:16:70:
9a:2c:74:56:6a:c1:3e:92:b4:bc:9b:4e:7a:64:cb:1c:55:e5:
07:33:9d:24:1f:db:0b:f5:a5:a6:a0:a9:e8:b1:03:1a:58:42:
18:40:47:dd:98:d7:59:a3:5e:df:6b:17:f8:ae:5e:18:01:09:
f3:b6:e0:c6:e4:c3:db:3e:89:6b:30:0e:40:a0:63:2c:a3:07:
05:cf:5f:cd:9f:59:d3:8e:ae:aa:78:4e:45:ea:62:49:ab:23:
ac:dc:cf:c7:d7:ca:eb:92:a0:f6:ff:fb:9a:40:ff:d8:46:90:
02:f8:d3:05:f4:a0:14:b9:91:54:16:01:d5:38:d0:b4:be:0a:
a9:38:39:0b:91:7c:ad:88:c2:c4:6f:4c:74:ba:06:c1:1e:f5:
9f:27:85:84:9e:4c:30:c4:4d:97:38:8b:96:8d:c8:07:30:36:
2f:42:13:78:95:0b:b3:e2:22:ca:ce:a6:c8:23:c8:54:cf:03:
bf:aa:48:5b:6f:d0:f5:f6:03:03:b4:78:9f:5f:3c:b3:6a:15:
19:32:20:90:89:83:5e:c2:19:d5:5b:b4:98:cc:81:a2:0a:aa:
72:0b:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:11 2025 by rpki-client