Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b3abeoTYTHVUUDPXNQCabxUyrs4.roa
File: b3abeoTYTHVUUDPXNQCabxUyrs4.roa (raw, json)
Hash identifier: qhidRz+p5SCEN1qIhsxtF/zy6CRmLEjtMEOa6QqhE8I=
Subject key identifier: 6F:76:9B:7A:84:D8:4C:75:54:50:33:D7:35:00:9A:6F:15:32:AE:CE
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019499CF984E27257D78FA45B13FBC3FAD61
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b3abeoTYTHVUUDPXNQCabxUyrs4.roa
Signing time: Fri 24 Jan 2025 19:35:06 +0000
ROA not before: Fri 24 Jan 2025 19:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210464
IP address blocks: 2a0a:79c7:f7e0::/44 maxlen: 44
2a0a:79c7:f800::/48 maxlen: 48
2a0a:79c7:f898::/48 maxlen: 48
2a0a:79c7:f899::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:cf:98:4e:27:25:7d:78:fa:45:b1:3f:bc:3f:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 24 19:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f769b7a84d84c75545033d735009a6f1532aece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:df:de:9e:35:39:55:e9:9d:c2:ba:ba:69:
58:82:f1:0e:e8:48:95:12:c5:96:52:74:72:45:c4:
f2:e4:ea:e6:b6:33:01:36:c9:df:a1:6c:c8:cb:a8:
12:2b:1a:28:02:98:89:85:94:66:a2:7c:63:ba:e4:
ea:ad:a6:50:55:14:ca:25:a1:1f:f0:50:ff:1c:28:
4e:00:f4:c0:66:ca:76:6e:bd:89:ce:ef:f0:b4:8a:
47:a1:48:b0:2a:a0:58:e9:8e:65:59:4f:ee:8e:c0:
62:7a:95:a2:aa:98:8e:03:d0:7d:da:72:47:1a:57:
9b:d7:2a:79:3a:6e:f0:e8:30:ef:f5:3d:a3:f7:f9:
1d:ef:14:f5:50:70:72:85:f9:fc:71:f0:27:89:08:
6d:de:35:62:a8:29:b7:02:2b:c2:8b:0a:a6:c9:ea:
60:25:95:30:96:14:6a:b6:28:5c:74:fb:4c:f0:04:
5f:fe:4c:26:b0:08:97:b4:92:fb:d3:7f:08:e2:dd:
d3:d9:03:13:2e:86:cd:76:0d:39:48:4e:ea:87:39:
6c:b3:86:3c:4c:57:5e:cb:df:d8:cd:08:fa:7b:eb:
e2:db:7b:0c:60:f2:e9:88:34:e0:d3:ba:8c:2e:bf:
fc:e9:83:60:c8:fd:44:cf:04:3c:8a:73:db:fe:b2:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:9B:7A:84:D8:4C:75:54:50:33:D7:35:00:9A:6F:15:32:AE:CE
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b3abeoTYTHVUUDPXNQCabxUyrs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f7e0::/44
2a0a:79c7:f800::/48
2a0a:79c7:f898::/47
Signature Algorithm: sha256WithRSAEncryption
d0:d9:04:bd:23:be:18:9a:91:ac:dd:ba:52:27:da:be:2a:4f:
ce:9f:8a:42:bc:38:09:29:b4:f6:4d:77:42:e9:09:ad:8d:32:
e6:86:5b:20:29:98:37:05:ee:e0:86:12:ec:f7:93:a4:95:93:
ec:35:cc:4d:eb:29:e3:db:91:98:af:7c:22:1d:72:e3:55:a1:
0a:d7:e4:55:1d:f4:d7:e9:4d:f7:a5:02:e8:4e:32:ae:3c:3e:
34:24:40:47:70:e5:df:bf:2b:75:ed:d8:2e:ec:61:75:48:11:
45:b4:18:98:29:9c:dc:a3:13:8d:bf:0b:fd:33:58:69:cc:78:
d5:c2:85:65:36:a4:86:63:59:6c:ba:70:66:73:5b:47:8e:7b:
da:be:c8:f7:14:2c:f8:57:99:c7:2b:4c:eb:c8:2e:c2:58:88:
39:ae:c1:9d:27:80:41:a6:99:84:38:58:ef:23:d4:3b:a4:51:
f5:f0:85:2e:45:be:77:b6:6b:76:93:8c:3e:91:0a:86:93:e2:
23:2b:bc:56:41:b5:68:f2:f6:fc:c7:c7:93:0e:80:c8:93:72:
43:2d:d5:56:11:3b:28:40:ea:8f:77:46:81:46:9e:79:f6:51:
d5:d7:31:45:71:0a:fb:72:9e:c5:c7:1a:83:de:81:99:74:e9:
ca:07:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:34 2025 by rpki-client