Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/DpzvwQnVRaFViTZyqTXRWJwxueM.roa
File: DpzvwQnVRaFViTZyqTXRWJwxueM.roa (raw, json)
Hash identifier: au+QUyze3MKMGVHiIM5HXwnLMoQJIUaM60I83uw/tEc=
Subject key identifier: 0E:9C:EF:C1:09:D5:45:A1:55:89:36:72:A9:35:D1:58:9C:31:B9:E3
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 019420D665FFB91E47B0999284706965C355
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/DpzvwQnVRaFViTZyqTXRWJwxueM.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9201
IP address blocks: 2001:1400::/29 maxlen: 29
2001:1400:ffee::/48 maxlen: 48
2001:1401::/32 maxlen: 32
2001:1402::/32 maxlen: 32
2001:1403::/32 maxlen: 32
2001:1404::/32 maxlen: 32
2001:1405::/32 maxlen: 32
2001:1406::/32 maxlen: 32
2001:1407::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:ff:b9:1e:47:b0:99:92:84:70:69:65:c3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e9cefc109d545a155893672a935d1589c31b9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:08:94:57:88:00:d1:e8:ef:e3:4d:11:a2:
7f:2a:9e:14:7e:26:5f:0e:1c:4a:56:eb:cf:10:6f:
fd:e0:05:9f:91:65:11:c6:0a:a7:10:e0:3a:87:73:
50:cf:c2:fa:32:7b:74:03:f0:75:ee:25:20:41:03:
d5:d4:cb:25:5c:a9:35:2c:2a:ec:29:5f:df:5d:f7:
93:b8:9c:c3:3b:22:7b:82:b3:a6:1f:bf:21:97:28:
7a:9e:ec:d8:0c:c9:7d:09:b9:f4:52:f1:65:b7:da:
92:7c:de:7d:a7:08:91:54:d5:df:74:a6:aa:4f:97:
b8:cc:0d:55:ad:01:d2:79:7b:b7:d0:7f:e8:31:d0:
30:4c:f2:1b:b5:60:c9:70:f8:90:bd:95:d3:40:fc:
12:11:db:2d:59:47:92:9d:d2:9c:2a:1e:4f:a0:3d:
56:07:14:89:7d:2c:04:3b:5a:2d:8a:d5:4f:a7:5e:
b6:c5:33:7e:1e:a0:1e:7f:92:1d:af:12:c9:47:20:
78:2b:43:1f:12:4d:99:a8:f4:44:92:b6:ae:fc:6f:
43:6d:41:67:72:13:0a:0c:fb:83:7c:c5:bf:06:b3:
e9:19:1b:c9:db:63:e6:86:8b:43:58:cb:0a:54:19:
f4:be:e5:c7:68:fe:45:3a:e0:87:38:45:5e:06:3d:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:EF:C1:09:D5:45:A1:55:89:36:72:A9:35:D1:58:9C:31:B9:E3
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/DpzvwQnVRaFViTZyqTXRWJwxueM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1400::/29
Signature Algorithm: sha256WithRSAEncryption
99:3f:38:27:0f:23:a4:1b:aa:8b:14:1c:64:55:0f:01:6f:b3:
ac:5d:af:f6:1b:4c:59:a0:cc:7a:ee:55:16:87:1e:be:9d:a8:
67:4f:3c:2d:92:1e:61:9d:d1:ca:31:6b:d1:23:cd:d5:11:87:
a8:b3:c4:2e:2d:f8:0f:36:cc:2a:3f:77:28:01:46:65:49:60:
15:b6:f3:9c:7d:b5:4d:50:2d:29:bf:7f:0b:92:96:24:6a:d9:
2a:11:d3:6d:78:53:89:df:18:99:64:df:6d:9a:b2:54:fa:18:
96:34:a5:11:ad:06:f7:de:b8:5e:32:fc:92:09:b7:7f:bc:51:
83:a0:f2:45:55:d9:c0:9a:40:41:db:ea:f7:23:cc:a6:32:41:
2e:76:3c:68:46:6e:c1:67:6b:ef:d2:be:30:b9:b6:e6:e7:42:
e5:08:5c:4c:9d:97:e7:68:5f:cc:ca:07:22:a1:b3:58:db:d5:
94:7d:22:41:b0:b8:e0:f5:86:da:d7:f9:c4:52:db:54:82:2d:
90:c1:85:eb:ca:49:62:e3:74:27:39:c9:0d:ac:c9:69:03:81:
4b:c1:ec:aa:12:e4:e4:70:3d:37:c3:09:26:21:25:14:71:96:
34:c3:17:ee:5b:06:78:ae:e7:19:9d:9f:b2:30:fc:dc:34:fb:
d5:c3:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:06 2025 by rpki-client