Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fTiYv5KFOqofQscxLcbvRl6nfhs.roa
File: fTiYv5KFOqofQscxLcbvRl6nfhs.roa (raw, json)
Hash identifier: 1Qai1GmAtA4D2xof4vfmR+C8aRaSIxWheH4wnUqyFJA=
Subject key identifier: 7D:38:98:BF:92:85:3A:AA:1F:42:C7:31:2D:C6:EF:46:5E:A7:7E:1B
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE32D1E60A8867804260701C3469A
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fTiYv5KFOqofQscxLcbvRl6nfhs.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206633
IP address blocks: 2a06:e881:108::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e3:2d:1e:60:a8:86:78:04:26:07:01:c3:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3898bf92853aaa1f42c7312dc6ef465ea77e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:33:46:d2:01:c8:28:fa:e9:6e:f1:96:0a:
86:88:b2:02:46:42:b2:d4:bb:e8:73:60:62:ce:ee:
28:b5:eb:66:bd:28:1f:ff:98:51:fe:8e:5f:2d:e3:
a1:7a:86:1c:c7:e4:bd:ac:39:28:d3:b8:5f:75:bd:
59:89:fc:d6:ac:87:e8:de:af:af:53:81:82:ee:60:
1a:66:5f:44:8e:ec:aa:7c:65:a8:67:ba:73:09:65:
5d:f5:cc:24:fb:69:14:cc:f0:90:40:f2:dc:72:4f:
c6:47:20:21:c2:ae:34:4e:4f:24:e1:89:cb:4b:a0:
a0:87:9d:e7:3d:be:55:02:e2:8f:8b:f7:1c:43:71:
03:92:71:51:80:5d:62:09:a1:f8:5b:8c:3a:80:87:
b5:e8:40:0d:1d:ef:99:3d:2e:df:82:00:88:dd:cc:
aa:7d:dc:a6:b1:1e:1d:64:c8:f0:44:ea:b8:16:96:
d0:44:59:4d:85:7d:e8:3d:7f:8d:78:10:81:4e:51:
3f:4b:7f:14:67:f6:8a:71:bf:9f:24:c0:e2:e8:99:
97:e9:01:91:c7:e1:fb:2f:00:c5:fd:0b:7e:98:71:
87:13:cc:2e:8c:4c:5a:68:82:f3:43:bd:91:e7:dc:
7c:56:c5:56:5b:b4:5f:c6:eb:25:3f:2f:73:4b:4f:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:98:BF:92:85:3A:AA:1F:42:C7:31:2D:C6:EF:46:5E:A7:7E:1B
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fTiYv5KFOqofQscxLcbvRl6nfhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:108::/48
Signature Algorithm: sha256WithRSAEncryption
cc:0a:6e:9c:f6:4b:e2:1a:c8:41:56:48:e4:6a:ac:4b:18:ce:
0e:85:24:c0:01:e0:cc:92:1d:b0:c1:fb:ba:91:82:c8:ad:d2:
a9:47:cd:bc:38:8d:d8:5e:c4:31:26:9b:46:37:56:aa:8f:3a:
e1:fa:d4:a7:bc:a0:69:00:e9:9c:d6:7c:2b:05:13:80:77:fc:
9b:08:54:73:d6:95:56:31:bd:a9:6c:35:1d:89:b7:25:34:be:
a0:3e:f8:54:2c:24:4d:b9:20:d8:2f:5c:aa:c4:82:ba:59:ae:
6f:61:4b:f5:18:63:33:9f:96:7a:ee:56:9d:fd:6d:81:c9:18:
13:a7:75:69:86:ae:5b:2e:3a:72:dc:3e:97:6a:39:f2:fc:79:
0d:e2:a0:fa:97:70:e5:51:16:5b:4f:ea:17:04:b1:56:65:4b:
9b:78:b3:ec:d3:33:56:cb:2a:f3:30:dc:08:ed:5e:19:42:b4:
d0:a2:80:b5:68:8a:42:af:ec:3d:25:3c:ae:ce:f5:1e:16:e2:
d0:d2:85:20:95:1f:99:24:81:e7:be:fe:85:35:c0:fd:83:f8:
1f:ce:a4:38:a1:81:43:32:4c:5c:1e:bd:3c:ec:c6:ec:03:1b:
9e:09:9c:95:7a:e4:da:28:5b:d0:fe:98:63:49:34:a3:78:48:
86:b1:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:56 2025 by rpki-client