Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/r-0V_SwzHfcVsVfwpCnYdUWZGYU.roa
File: r-0V_SwzHfcVsVfwpCnYdUWZGYU.roa (raw, json)
Hash identifier: UNwvPTDDYX2tkJUZT9e+Hb40LH7+wrKvS2yuwY1uyLU=
Subject key identifier: AF:ED:15:FD:2C:33:1D:F7:15:B1:57:F0:A4:29:D8:75:45:99:19:85
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDC4AB397693C0EAE5598CBBC4624
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/r-0V_SwzHfcVsVfwpCnYdUWZGYU.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203478
IP address blocks: 2a06:e881:5600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:4a:b3:97:69:3c:0e:ae:55:98:cb:bc:46:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afed15fd2c331df715b157f0a429d87545991985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:6c:03:06:0f:90:99:c0:f8:2b:45:d3:b1:
45:a7:12:f1:b9:dd:88:c4:7a:65:de:94:b1:5f:49:
c4:4c:da:92:6b:13:38:fd:86:45:22:3a:7b:a1:da:
e9:d0:16:37:8c:13:c8:e0:d4:4c:47:e5:f7:ab:2d:
6c:1b:be:4b:a6:b7:4e:06:45:bc:b4:37:c5:e8:ad:
51:e0:cc:cf:46:0e:7d:4f:5e:60:5a:16:95:22:34:
6a:0b:16:d7:2b:d5:54:9d:62:9c:83:b2:d6:6e:59:
a3:64:8b:2b:3f:bd:bf:c1:06:c0:39:72:88:09:6b:
cc:2d:b1:d8:79:00:60:1b:8d:64:e6:4a:6c:b0:fa:
6e:f5:f5:ba:fc:b5:81:b2:b2:2c:f0:ab:01:50:59:
a0:e9:71:09:e4:ce:e7:01:9c:5f:d3:47:f7:09:dc:
78:7b:44:1f:60:88:f5:d1:6d:47:f1:7a:27:67:4b:
de:3c:6f:95:1b:54:78:a0:25:80:e0:d0:f4:7f:47:
84:3c:68:e2:4e:0c:b1:b4:44:29:02:48:4c:9a:8f:
22:bf:20:b1:bd:79:61:65:fd:86:ce:fc:10:70:a3:
74:9e:66:07:c8:03:c8:49:ae:f3:de:f5:11:89:fa:
39:64:8d:98:dd:6c:29:b9:23:de:a1:c6:3f:9a:ba:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:15:FD:2C:33:1D:F7:15:B1:57:F0:A4:29:D8:75:45:99:19:85
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/r-0V_SwzHfcVsVfwpCnYdUWZGYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5600::/44
Signature Algorithm: sha256WithRSAEncryption
48:7c:f4:17:9a:ad:3b:16:e4:f4:31:ad:76:dc:5c:ff:a5:4f:
61:0b:c1:2e:9e:3a:28:4a:86:43:31:8a:bd:5f:ec:ed:b3:c1:
07:32:54:74:31:ed:ee:70:72:fb:1a:f4:1b:59:78:6a:32:ea:
49:1f:80:32:80:6b:d3:fe:1e:eb:3d:de:78:08:2d:54:c2:88:
9b:fb:c5:b4:b9:81:04:61:25:38:7f:dc:03:a0:48:de:77:fc:
d6:34:e3:08:43:36:62:16:3c:59:18:13:41:2e:e1:7b:a9:ac:
26:91:fd:0b:73:1b:9a:2d:be:18:c6:b0:01:19:c8:b4:61:85:
a5:4a:20:cf:fd:34:b8:18:06:f0:87:e8:dc:88:f0:c1:82:c4:
cf:d1:d6:6a:1b:60:06:28:be:dc:a4:4f:69:c8:a0:23:0f:4a:
c1:c2:41:ea:33:3b:d5:68:d7:57:8d:b7:1a:13:23:a5:72:31:
a1:33:33:06:4a:47:72:ef:da:de:6d:65:b4:19:13:c3:ee:2d:
14:cd:d6:76:8f:91:49:3c:10:e3:77:8f:5e:6a:73:e4:60:64:
64:43:56:1f:14:f2:f2:7c:ce:6d:5a:41:53:c4:31:65:ba:20:
eb:91:a7:f6:b9:00:41:75:85:81:48:ec:04:36:e1:30:c0:ab:
6a:dc:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:37 2025 by rpki-client