Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/G6NrW3y5EqOh-RgJpBb737yZLyk.roa
File: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (raw, json)
Hash identifier: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=
Subject key identifier: 1B:A3:6B:5B:7C:B9:12:A3:A1:F9:18:09:A4:16:FB:DF:BC:99:2F:29
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 0194236A1CF8D171500EF34D7806C7BBFFA0
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/G6NrW3y5EqOh-RgJpBb737yZLyk.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200299
IP address blocks: 2a09:3a00:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:f8:d1:71:50:0e:f3:4d:78:06:c7:bb:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba36b5b7cb912a3a1f91809a416fbdfbc992f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:a1:44:69:fa:e7:33:5b:f2:7a:aa:75:db:
57:03:4c:2f:9f:db:72:81:a2:1c:cf:c0:ed:6a:1b:
f0:07:55:d8:ac:5a:8d:4c:6c:1a:98:11:aa:9d:8c:
9e:26:ee:45:05:77:e6:a3:54:bf:11:c7:f8:a3:7e:
ed:13:a3:27:02:38:70:69:cc:09:7e:03:ad:5d:c4:
04:18:fa:10:8d:20:db:cd:10:a9:6f:4f:13:32:81:
c7:38:37:ef:d3:e1:09:69:d9:96:7f:cd:b4:f3:5a:
db:3e:5c:d8:18:9d:c7:c9:d3:c2:50:92:9c:10:c3:
75:df:1d:a7:a6:7e:a8:db:66:66:3b:25:86:54:a1:
8a:3c:cb:02:4d:fd:a3:be:15:4f:ca:fa:fa:a8:93:
4d:d6:73:0a:39:9b:aa:76:20:48:c8:1b:db:e7:4e:
f9:d0:ef:cd:da:0e:41:1e:c5:ad:f0:6b:dc:04:2e:
47:21:16:15:a8:57:72:52:2f:ba:f8:ec:27:b3:03:
e0:93:c2:b9:c9:c3:10:b8:2a:2a:bb:99:57:3a:29:
bd:cb:c3:ab:61:43:db:f9:c6:82:ab:87:4b:98:b8:
1e:d0:c7:ef:38:52:ea:34:96:ef:fa:32:ab:11:ed:
ac:89:b5:c7:57:5e:f5:bc:93:80:37:c5:97:dc:c5:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:6B:5B:7C:B9:12:A3:A1:F9:18:09:A4:16:FB:DF:BC:99:2F:29
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/G6NrW3y5EqOh-RgJpBb737yZLyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3a00:2000::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8e:0d:5a:d9:c7:bc:6e:89:22:e3:92:d8:51:18:fc:23:9b:
4b:fa:d9:c8:19:be:77:4f:b9:17:54:6c:9a:ce:00:02:84:99:
9f:c7:ba:5d:05:4a:ce:93:9d:7f:3f:2a:5f:0e:95:a4:70:be:
61:ef:14:93:42:f6:e9:6c:ba:e9:f3:f6:5c:40:44:9b:eb:dc:
5e:20:76:9a:ae:45:ae:35:7c:b2:52:b2:c2:8a:35:1b:ae:d0:
1c:42:ac:b7:19:68:53:25:96:6b:dd:f3:16:3a:21:43:7a:ee:
8c:a6:d7:45:27:20:51:de:ea:e2:07:42:ee:53:c7:c1:1f:cd:
23:19:15:d5:ca:f9:1b:a6:e5:70:eb:68:28:2a:b7:cc:d2:cc:
f0:c1:90:7b:d9:45:fb:8a:00:dd:df:ab:9c:ed:28:62:e6:8e:
cc:b8:f2:80:64:e9:0c:b0:10:ea:a9:d4:3a:8f:24:f4:27:68:
9e:9f:6b:cd:35:e9:d6:89:11:4a:98:7a:88:0f:76:b9:dd:a6:
61:2a:55:17:a5:73:ee:2b:8a:e7:56:f5:a8:57:f6:7f:79:cf:
80:85:d7:0b:16:55:97:84:13:49:95:38:cb:43:c1:8a:b6:1e:
cc:ae:1d:93:c8:42:b4:9c:f7:7c:cd:96:be:4a:3e:e5:2f:f3:
7f:97:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:33 2025 by rpki-client