Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/j_v3DreB41osLA0rpROg_l8bhGA.roa
File: j_v3DreB41osLA0rpROg_l8bhGA.roa (raw, json)
Hash identifier: W4Uzxp7LVLw7QwdTDGWsxk9F4Oza/078Nz1J0YfRrZs=
Subject key identifier: 8F:FB:F7:0E:B7:81:E3:5A:2C:2C:0D:2B:A5:13:A0:FE:5F:1B:84:60
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDC10FD9779974277ED313A6058C3
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/j_v3DreB41osLA0rpROg_l8bhGA.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202197
IP address blocks: 2a0a:79c7:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:10:fd:97:79:97:42:77:ed:31:3a:60:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffbf70eb781e35a2c2c0d2ba513a0fe5f1b8460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:13:cd:07:8c:75:4a:31:3a:18:a2:f0:df:
a8:1c:5c:e7:0f:dd:86:ca:01:d3:6c:7b:7f:04:9e:
5a:ce:5e:8b:56:6f:e3:45:3e:4f:3a:f3:e9:ec:30:
6b:4c:60:55:94:d1:de:e6:ea:63:94:b7:0a:a9:be:
de:61:3e:d5:c1:ea:d9:a5:c9:c3:14:12:9b:67:5e:
74:7a:a8:16:ca:af:3e:40:36:69:0f:eb:17:39:28:
54:a3:70:b9:62:d4:d5:ba:de:cc:9d:53:6d:8c:02:
83:aa:9a:a1:4c:2a:e1:6e:68:82:95:f6:82:aa:03:
54:0d:89:9c:7d:fa:e7:40:bb:5c:8d:81:01:f3:5c:
98:f0:aa:79:71:db:1d:e1:59:9f:4c:95:0d:71:66:
7c:20:10:97:a5:7b:af:fc:ff:1d:7d:10:32:7f:fc:
26:75:9e:f0:ed:1c:0a:b9:1d:34:18:6b:c4:6c:41:
28:1b:7e:51:68:e2:d1:c2:bc:da:55:19:c3:e0:89:
b6:88:de:d6:0e:d6:70:d6:5c:96:49:c9:12:7b:9c:
f7:63:bb:c4:29:b9:62:84:7e:82:20:d3:05:67:4e:
b9:53:4d:9e:23:d8:c7:c6:70:25:fc:5f:f6:04:67:
ff:ce:a5:d1:08:1a:3f:65:31:75:5e:b3:ff:30:5e:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:F7:0E:B7:81:E3:5A:2C:2C:0D:2B:A5:13:A0:FE:5F:1B:84:60
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/j_v3DreB41osLA0rpROg_l8bhGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
28:b9:d6:43:d6:50:1a:24:f8:b1:b2:a6:90:c2:4e:b7:92:df:
0b:35:05:6e:2a:22:e2:6f:f1:f2:14:b8:71:e1:2a:4a:cf:15:
21:bd:41:da:ce:ed:6f:19:28:70:db:31:8e:61:ac:31:7b:9f:
4d:38:d3:e4:23:eb:24:25:fc:2f:da:17:1c:3e:c9:6e:0a:2d:
c7:7f:12:80:63:73:99:ca:7e:8d:4c:2b:b6:1d:47:c1:dc:c3:
5c:5e:6a:08:3b:03:d5:56:3a:c9:d3:ab:56:80:5d:21:b6:4a:
08:bc:db:85:2a:45:e4:16:01:e9:fb:b1:e0:ee:0c:af:34:f5:
5b:4c:00:f9:df:7c:db:64:88:e0:c1:46:8e:90:cc:6d:b7:bb:
f9:93:f7:da:97:a4:57:52:a1:90:35:5f:e7:46:a7:f8:9a:0a:
85:0d:2b:5e:7b:bf:2f:8f:f3:d3:0b:8e:c3:86:95:d5:cb:d2:
62:87:cf:57:3f:53:d0:f6:87:52:0d:04:7e:3c:2a:56:7e:13:
86:48:52:26:7f:c4:2e:57:fd:f2:ab:46:b9:d1:e0:fe:78:93:
cc:e9:06:71:dd:2c:83:36:82:d3:6b:0e:45:af:6d:dd:fb:61:
7a:cc:23:c9:1b:f3:ed:ee:e4:3a:38:b0:84:9d:c2:64:0b:65:
e3:80:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:36 2025 by rpki-client