Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/ChVY_yTwqfm0VnhsyIrbJGaer18.roa
File: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (raw, json)
Hash identifier: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=
Subject key identifier: 0A:15:58:FF:24:F0:A9:F9:B4:56:78:6C:C8:8A:DB:24:66:9E:AF:5F
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 019423D72B7F5B778D9EE32BBF01BB458FE8
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/ChVY_yTwqfm0VnhsyIrbJGaer18.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36383
IP address blocks: 2a00:79e0:3fc::/48 maxlen: 48
2a00:79e0:3fd::/48 maxlen: 48
2a00:79e0:2000::/35 maxlen: 35
2a00:79e0:2000::/38 maxlen: 38
2a00:79e0:2200::/39 maxlen: 39
2a00:79e0:2400::/39 maxlen: 39
2a00:79e0:2600::/39 maxlen: 39
2a00:79e0:2800::/38 maxlen: 38
2a00:79e0:2a00::/39 maxlen: 39
2a00:79e0:2c00::/39 maxlen: 39
2a00:79e0:2e00::/39 maxlen: 39
2a00:79e0:3000::/38 maxlen: 38
2a00:79e0:3200::/39 maxlen: 39
2a00:79e0:3400::/39 maxlen: 39
2a00:79e0:3600::/39 maxlen: 39
2a00:79e0:3800::/38 maxlen: 38
2a00:79e0:3a00::/39 maxlen: 39
2a00:79e0:3c00::/39 maxlen: 39
2a00:79e0:3e00::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:7f:5b:77:8d:9e:e3:2b:bf:01:bb:45:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1558ff24f0a9f9b456786cc88adb24669eaf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:87:8f:54:9f:e2:ea:f4:c3:cb:ff:fd:92:
4e:c0:04:7e:fa:9e:be:10:5c:39:13:19:9e:a2:b8:
9e:ef:d5:99:35:3a:bf:c5:70:f1:c9:77:67:61:01:
3c:e6:c2:f2:84:88:4e:22:4c:e8:09:9d:53:88:6f:
7e:2e:f1:82:54:51:5f:6a:68:81:63:05:bd:c8:4e:
81:2e:c4:0b:7f:de:c0:40:df:ce:ee:21:2b:82:c9:
81:35:ea:b2:5b:75:90:b5:71:35:15:79:1f:b5:52:
45:93:0a:1a:e7:45:67:c0:26:8c:17:88:1a:15:46:
76:62:09:b1:a8:f5:70:74:59:32:3c:32:77:10:e9:
04:98:4c:bc:de:f6:1c:55:de:15:e8:ea:c6:23:a9:
b7:26:88:72:1e:6c:fd:6b:7f:dd:63:2d:df:86:f7:
60:1f:a9:df:18:16:35:e5:12:0f:8c:a1:c0:64:49:
d8:0c:2e:9d:c2:be:75:56:78:d8:e7:1e:a6:8c:5d:
6d:fb:d8:d2:43:b1:22:d8:5e:3f:e4:c2:17:09:ce:
bd:8e:5f:26:1d:0e:56:7a:26:d2:6b:a8:d6:9c:ae:
d4:70:86:58:6a:80:7f:84:f3:a2:8e:ea:7b:dc:ea:
b3:f8:cf:d7:4f:5e:5f:b4:8b:fe:3c:e3:8c:52:10:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:58:FF:24:F0:A9:F9:B4:56:78:6C:C8:8A:DB:24:66:9E:AF:5F
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/ChVY_yTwqfm0VnhsyIrbJGaer18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:79e0:3fc::/47
2a00:79e0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
73:ea:b5:99:91:9d:25:a3:a9:c2:cf:1f:b8:4e:7c:8b:79:d6:
08:f8:3a:ae:cf:d1:e2:98:71:eb:ce:53:ed:85:fc:fb:f4:10:
4d:04:30:bc:88:42:9e:c7:3c:93:55:cc:fb:6a:6d:f9:a0:12:
fc:f9:be:fb:57:07:67:6a:fb:ed:91:4b:fe:6e:22:e9:0d:8d:
d1:b1:6d:74:55:a5:d0:e9:eb:b0:8a:4e:09:ee:2c:1b:0e:be:
29:9a:10:60:50:0a:32:9a:dd:a8:04:ff:dd:97:1f:e0:e3:37:
68:16:54:8c:c9:a0:32:8a:c0:06:13:41:8d:54:f3:22:f7:96:
28:c7:61:a1:36:f0:b5:24:20:e9:29:eb:57:4c:96:18:3e:d6:
c7:35:19:69:ee:61:b8:43:85:0c:65:1d:f2:a7:69:e3:ac:a2:
e6:a4:e0:5b:3d:ac:97:5d:6e:e3:96:40:0e:04:7d:5b:3e:e9:
cc:aa:64:94:e8:e8:58:c9:c2:78:7d:a6:70:1e:a7:f2:5d:c3:
53:3e:5b:aa:42:96:c6:2f:6c:d8:ba:b1:40:01:8d:d9:ba:32:
33:66:ba:4f:72:6c:2b:c7:6e:ee:10:00:dc:d4:8b:53:cc:b9:
fa:c2:d6:f0:e8:fd:01:9a:92:8f:5f:70:4f:3a:f8:bd:fa:d7:
3a:38:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:59:04 2025 by rpki-client