Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/z2d2Mw7miuWFdU_P46UFHbkasZ8.roa
File: z2d2Mw7miuWFdU_P46UFHbkasZ8.roa (raw, json)
Hash identifier: 21+pe0pks7wZ7X5bbq8pzKTK+MxtB/4l81Qmzo8CJcM=
Subject key identifier: CF:67:76:33:0E:E6:8A:E5:85:75:4F:CF:E3:A5:05:1D:B9:1A:B1:9F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDCE6FC99443D4441EAB24B9A128F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/z2d2Mw7miuWFdU_P46UFHbkasZ8.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203801
IP address blocks: 2a06:e881:4400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:e6:fc:99:44:3d:44:41:ea:b2:4b:9a:12:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6776330ee68ae585754fcfe3a5051db91ab19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:5e:b2:5b:8e:79:06:07:e4:24:ea:72:8e:
4c:7f:f8:8b:a3:a7:42:36:68:77:7b:2c:23:1d:a9:
18:2f:23:00:5d:d1:f8:7d:93:2c:df:a9:e5:2d:02:
ab:31:ef:ca:58:1b:fe:79:77:83:ed:22:1c:81:80:
c0:26:3b:f0:ac:b3:29:aa:55:33:af:ca:d3:65:77:
f2:c0:f3:d7:4b:11:02:3e:12:08:d2:09:12:f6:f0:
fe:86:53:82:04:36:5b:aa:59:4d:64:38:3e:36:0c:
4c:96:14:9a:06:9d:a4:73:3e:43:5b:68:6e:65:91:
ce:c3:23:31:3f:de:3e:d7:40:d8:6b:aa:55:f4:24:
17:30:c2:a3:9e:b6:04:ef:dc:70:f7:0e:25:b2:ad:
b3:2f:1e:d0:e1:68:c1:5e:17:cd:0c:fd:76:98:8a:
11:8f:5b:5a:d9:c0:fe:f8:98:33:af:af:41:09:29:
b8:2f:c7:be:03:39:3a:aa:03:a7:e9:53:9c:cd:82:
98:ad:9a:36:0d:0b:ca:83:fd:fc:53:89:da:06:4a:
f3:34:46:a8:8f:d4:37:38:88:b0:c2:20:a3:6a:8b:
13:19:01:a5:7f:d2:df:9f:06:21:06:1d:4a:7c:c3:
f6:fa:07:b8:4a:8d:a6:2d:f5:bb:f3:10:21:03:e3:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:76:33:0E:E6:8A:E5:85:75:4F:CF:E3:A5:05:1D:B9:1A:B1:9F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/z2d2Mw7miuWFdU_P46UFHbkasZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:4400::/44
Signature Algorithm: sha256WithRSAEncryption
cf:d6:ec:de:30:85:21:c8:b6:08:0b:53:96:7e:6a:27:ae:2e:
4c:0e:a4:ed:fb:88:10:1e:74:a5:e4:7c:df:54:92:bf:01:14:
50:9b:f7:cf:e1:d8:63:39:65:f1:f8:43:56:07:a0:9e:41:3d:
df:c7:ff:91:75:f6:b6:6c:60:f2:21:6c:42:a0:82:fb:e5:05:
ac:50:19:89:df:b0:58:2d:a5:fc:fb:5b:7e:25:1f:68:c6:49:
aa:d4:71:dd:be:c9:1d:bc:6d:ac:ef:c4:7b:18:33:83:cf:d7:
55:67:90:84:7e:71:4a:9c:ce:18:2a:41:8e:ff:09:bf:61:56:
bb:6c:17:3e:1c:b9:0b:f2:6a:dd:d4:19:d3:c1:7b:38:f9:36:
c2:5f:c4:60:21:81:7f:2c:fb:95:fc:42:b9:21:9d:b9:d5:9e:
67:35:14:83:6b:c1:67:b7:46:7c:74:65:c7:a4:5c:92:db:a9:
fd:2f:36:05:a8:f6:48:cb:0a:64:92:9c:44:e3:20:51:d8:b4:
7d:47:e6:c4:e4:c4:f0:36:05:61:de:b0:1a:14:fd:68:d3:72:
6e:b4:90:8f:e4:16:74:65:96:72:9e:8e:6b:66:7e:c2:b5:55:
14:2e:68:74:63:52:c2:b9:cb:b5:1b:c4:e6:ab:c6:3d:59:a6:
4c:ea:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:49 2025 by rpki-client