Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kAFgmOD-3aKhpv_HRSrF3P_lis.roa
File: 7kAFgmOD-3aKhpv_HRSrF3P_lis.roa (raw, json)
Hash identifier: 6Rs5xeW81UhNginecbED3hZ2TxaIInGUv73DkfI8h30=
Subject key identifier: EE:40:05:82:63:83:FB:76:8A:86:9B:FF:1D:14:AB:17:73:FF:96:2B
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019368EB4898660C3A2A02291046A31B65AE
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kAFgmOD-3aKhpv_HRSrF3P_lis.roa
Signing time: Tue 26 Nov 2024 14:41:10 +0000
ROA not before: Tue 26 Nov 2024 14:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4785
IP address blocks: 2a06:5040:5::/48 maxlen: 48
2a06:5040:10::/48 maxlen: 48
2a06:5040:11::/48 maxlen: 48
2a06:5040:12::/48 maxlen: 48
2a06:5040:13::/48 maxlen: 48
2a06:5040:14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:eb:48:98:66:0c:3a:2a:02:29:10:46:a3:1b:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 14:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee4005826383fb768a869bff1d14ab1773ff962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:a8:58:48:15:22:30:18:45:85:7c:ae:64:
3d:b0:c9:d8:11:4e:0d:d1:24:91:6c:b5:46:fe:be:
08:6c:4c:d1:30:d1:7d:2e:99:49:23:2b:f7:ca:1e:
6b:fa:93:9b:39:3f:00:c7:47:90:3e:48:7a:a0:21:
65:57:28:8f:43:7c:95:d9:4d:ed:02:e6:ba:73:36:
f2:7c:65:cd:09:a3:3c:6f:3c:63:11:e9:58:96:0d:
32:61:83:75:55:70:a1:e1:45:db:02:1c:2a:1c:ae:
04:34:00:7a:bc:e5:70:3c:d3:31:f3:0a:b7:72:50:
e0:cc:96:81:26:00:58:84:6e:f2:37:a9:e7:b0:fd:
c0:13:39:a4:98:1e:6c:ab:a7:fc:a0:01:7b:00:10:
69:9e:8b:8d:42:70:f8:9b:be:3a:51:99:58:62:bb:
e1:df:10:a1:cd:67:c1:70:f2:2c:33:1e:37:28:92:
4c:f6:dd:71:f4:78:b5:bf:c1:9f:51:b9:a9:8b:bd:
7e:ee:e6:b9:b8:1b:70:42:eb:69:dc:b0:f8:64:a3:
3f:10:dc:81:63:5a:e4:98:a8:30:9f:2c:97:65:21:
58:3e:e1:b3:b6:a5:18:d6:22:72:1e:2f:64:7f:49:
c2:72:31:5c:7d:0e:1b:26:92:2a:ee:50:60:da:dc:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:05:82:63:83:FB:76:8A:86:9B:FF:1D:14:AB:17:73:FF:96:2B
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kAFgmOD-3aKhpv_HRSrF3P_lis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5040:5::/48
2a06:5040:10::-2a06:5040:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c8:ce:3c:dd:ec:06:dc:a3:f8:e0:b3:f5:27:de:d5:23:6a:83:
05:85:69:26:1a:d2:a1:51:19:c7:40:4a:a8:43:66:0b:24:e3:
b5:af:5b:fa:34:cf:ca:c2:a8:b0:d6:94:9e:08:45:9b:8d:e6:
b9:a3:33:50:86:d1:51:41:fc:e6:b4:91:37:0b:9d:21:cf:5e:
56:f6:4b:7a:1a:1a:0d:f1:e1:9b:91:78:5f:04:ce:db:69:5e:
98:8c:19:a4:2a:1f:f1:47:18:83:36:86:79:ed:5c:fe:ed:3a:
3c:f2:7d:08:0f:a7:d0:e6:4d:f8:a6:99:18:a2:a1:d1:1a:7b:
a7:ef:27:64:22:d8:2d:76:99:5c:a5:f8:30:6a:83:22:8c:eb:
1b:7e:13:9c:4d:ec:35:b4:f9:e5:67:d1:d4:bd:0f:ea:d7:0c:
d9:e1:56:e0:36:89:bb:35:3b:75:cf:ef:d1:e4:01:f8:67:ee:
6e:15:92:8d:33:b0:3f:92:00:8d:af:7e:2e:00:40:0d:64:52:
fe:f6:a3:27:4e:6b:8c:99:1c:bd:28:c1:95:21:08:b8:1e:5d:
d1:14:80:13:a0:c3:c6:98:09:fb:2f:40:e0:41:f2:6a:2b:14:
89:31:74:fb:2b:08:98:ce:5a:e7:c3:6a:dc:59:bd:81:da:cc:
5f:9d:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:01 2025 by rpki-client