Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/e1Pkha7p0mINwpGFPWvh_sUwbTI.roa
File: e1Pkha7p0mINwpGFPWvh_sUwbTI.roa (raw, json)
Hash identifier: WrF7H6EVWehhD70wieBInd5V/F5WKk4T9XWh956x0yk=
Subject key identifier: 7B:53:E4:85:AE:E9:D2:62:0D:C2:91:85:3D:6B:E1:FE:C5:30:6D:32
Certificate issuer: /CN=7088b623105722db5289e409ae4a8c079d4f3938
Certificate serial: 012EF435
Authority key identifier: 70:88:B6:23:10:57:22:DB:52:89:E4:09:AE:4A:8C:07:9D:4F:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIi2IxBXIttSieQJrkqMB51POTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/e1Pkha7p0mINwpGFPWvh_sUwbTI.roa
Signing time: Sat 01 Jan 2022 11:03:51 +0000
ROA not before: Sat 01 Jan 2022 11:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:dd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19854389 (0x12ef435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7088b623105722db5289e409ae4a8c079d4f3938
Validity
Not Before: Jan 1 11:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b53e485aee9d2620dc291853d6be1fec5306d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:38:5c:26:d5:7f:48:c4:5e:f9:31:5c:bf:
c8:72:10:6e:24:e6:cc:01:1b:6b:28:a0:32:02:69:
61:5d:34:a3:ef:df:ea:2e:2c:70:af:31:35:8c:1a:
c0:08:e0:c3:e8:5b:d3:b6:20:1c:82:19:cc:83:80:
d8:0f:e6:3d:63:14:8b:e7:61:32:7a:85:e9:87:4c:
75:3c:aa:ab:52:db:63:59:9c:ba:3c:2c:74:63:d4:
f3:b2:dd:83:9f:f4:fd:4b:73:45:e3:2d:31:7c:bb:
11:02:15:ba:aa:bb:9d:3b:09:ac:85:53:1c:2b:89:
81:ce:f9:24:56:3c:6b:8d:ec:95:19:7d:47:2b:eb:
e4:07:76:f9:ac:9b:9b:64:d2:90:8c:4e:8d:5c:40:
84:ae:34:e3:29:39:af:9f:49:b8:e6:e6:ee:a1:77:
83:f1:8c:9f:b4:16:42:f5:e7:b4:ac:07:b2:31:4e:
67:83:70:f0:9e:f4:c3:f6:33:6e:13:a7:d4:b9:36:
34:6a:ab:31:7b:4b:17:db:74:43:68:b0:95:f7:0b:
00:42:0b:39:44:fa:02:89:ce:61:1f:74:f5:12:df:
7f:4c:30:94:f8:96:3e:df:a5:dd:53:12:00:4d:34:
9b:2e:92:a8:ab:10:a7:d6:c7:c3:70:c6:41:03:59:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:E4:85:AE:E9:D2:62:0D:C2:91:85:3D:6B:E1:FE:C5:30:6D:32
X509v3 Authority Key Identifier:
keyid:70:88:B6:23:10:57:22:DB:52:89:E4:09:AE:4A:8C:07:9D:4F:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIi2IxBXIttSieQJrkqMB51POTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/e1Pkha7p0mINwpGFPWvh_sUwbTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/cIi2IxBXIttSieQJrkqMB51POTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
46:c4:f2:73:06:18:47:9a:28:5a:85:45:96:6a:54:02:a1:6b:
c0:5c:cb:6d:8b:26:cb:c5:3b:d3:4d:0b:79:24:45:90:81:b8:
c1:00:7c:83:68:6c:0c:5f:e5:63:c2:5f:80:64:81:0d:10:6c:
17:8f:01:db:a8:68:5c:d4:be:76:fa:a4:8b:7a:c2:92:07:40:
0a:0c:98:31:5e:b5:72:03:11:8d:62:e2:06:45:8e:53:95:4e:
a4:7d:10:31:60:1b:e4:fb:48:5b:3e:2b:55:30:99:a2:f9:24:
f5:49:47:da:e9:b7:05:60:ac:ad:0c:db:9e:90:93:21:e7:df:
61:b1:59:d8:76:ea:2d:de:cd:b1:d8:c9:0f:ff:8c:ea:2f:fb:
7c:ad:f2:2f:31:01:e5:37:30:30:b9:68:f8:2f:f7:4b:57:6f:
e8:5f:27:09:0f:15:ae:70:2e:fc:cb:79:e4:9f:26:71:10:07:
97:2f:79:f0:5d:79:62:00:f5:a5:c5:13:ad:f9:32:7b:57:d8:
58:09:41:8f:2a:f8:a2:e9:9d:f4:d0:3e:6f:b9:27:58:84:d6:
a9:db:cc:9a:18:15:24:2e:83:61:63:68:fd:06:ca:2b:40:c3:
dd:13:c7:d8:05:1f:50:6b:f4:c7:19:73:95:de:86:a4:c4:eb:
d8:ee:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:11 2025 by rpki-client