Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/m-hWiIopr_dof5Yl3AUEPR9ZQxE.roa
File: m-hWiIopr_dof5Yl3AUEPR9ZQxE.roa (raw, json)
Hash identifier: uCnxVWla0uOf9ncq0An5L7n4Inumwvh2vMNWQFX3y20=
Subject key identifier: 9B:E8:56:88:8A:29:AF:F7:68:7F:96:25:DC:05:04:3D:1F:59:43:11
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEA34A0A59F6447C0437A7D7F4FBB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/m-hWiIopr_dof5Yl3AUEPR9ZQxE.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210286
IP address blocks: 2a06:e881:9000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:34:a0:a5:9f:64:47:c0:43:7a:7d:7f:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be856888a29aff7687f9625dc05043d1f594311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:6a:7f:6f:1a:c7:2d:44:d2:d0:0c:54:91:
d9:d4:ce:53:5c:97:cb:c5:9b:96:70:f9:22:be:50:
9d:52:1b:a9:6a:95:d3:42:dc:7e:c5:f2:39:d3:7d:
04:5e:5b:83:a7:08:5b:bc:34:43:4b:d0:16:e2:2b:
3d:96:d0:fc:c9:c0:65:78:5f:60:4c:0b:cb:15:7a:
09:c9:f6:3b:ba:25:27:72:5b:03:04:a8:ae:8d:18:
6b:33:e0:03:7a:47:5e:b6:3f:56:91:3d:77:59:33:
7a:8d:25:e6:26:36:ba:2f:33:8a:00:4d:b6:b5:91:
1e:4a:a1:fe:2a:0e:c3:b9:72:44:af:c3:d9:f6:3e:
55:5f:b9:43:42:21:77:13:b2:fe:57:78:19:c1:85:
c3:58:9f:97:02:db:21:78:02:2f:d2:43:25:d1:13:
ef:fb:9f:e3:a1:34:16:38:1a:96:8b:20:96:8b:9f:
22:10:b4:10:1b:ad:5a:5b:e3:c8:96:8e:4d:09:ca:
6c:a6:1a:83:dc:dc:07:a5:52:2c:34:27:f4:5f:b6:
c6:a0:1f:c9:3d:6a:1e:c2:a3:b4:73:07:a4:0a:21:
cb:7c:49:0d:26:b8:cc:4b:d0:47:68:f6:77:cf:f5:
3a:e1:83:26:9d:ca:0d:3b:1f:f3:bc:91:47:ba:b3:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:56:88:8A:29:AF:F7:68:7F:96:25:DC:05:04:3D:1F:59:43:11
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/m-hWiIopr_dof5Yl3AUEPR9ZQxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:9000::/44
Signature Algorithm: sha256WithRSAEncryption
da:9b:a3:37:ea:2b:8d:4c:c0:09:b6:19:77:12:e7:26:cb:ec:
41:4b:eb:19:8d:31:6c:2b:6b:7a:f9:89:54:d2:4e:0f:5f:1c:
ec:39:55:c2:1d:95:28:12:9e:95:8b:fb:91:40:f3:98:41:fb:
bd:51:80:ca:7c:62:4d:dd:11:fa:ae:e8:d1:71:d3:74:f4:59:
c4:d6:e7:08:07:b3:81:04:9d:50:e8:5a:3d:c8:53:c2:3d:e7:
39:67:71:54:fc:10:1f:3b:da:1e:76:b1:46:6b:3c:5e:6b:ee:
de:33:a1:2e:54:07:b6:e3:2c:39:bc:a6:75:c6:1a:50:34:28:
7e:e4:51:09:3d:1c:de:5f:5f:3b:f7:36:bf:b0:6f:35:9a:88:
b5:ea:0f:65:62:25:0b:4e:68:cf:9b:0b:85:5f:1b:c8:08:51:
56:0a:4f:f7:05:d4:33:41:52:a1:86:8d:82:04:fd:8a:aa:a0:
a3:5e:60:40:bd:09:bd:a1:52:9a:4c:75:e4:46:4c:77:f6:5c:
cc:44:dc:32:1b:c2:05:4f:1c:5b:c8:45:92:71:f8:b7:e6:50:
95:85:4d:0d:dc:d9:e7:fb:e6:bc:b0:28:20:3c:f2:af:37:39:
4b:5f:e9:78:2f:db:38:35:ec:3c:48:00:96:ba:63:2a:4c:50:
63:8e:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:56 2025 by rpki-client