Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9InzsTm0J0FJh6_deGjqmJNOCu0.roa
File: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (raw, json)
Hash identifier: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=
Subject key identifier: F4:89:F3:B1:39:B4:27:41:49:87:AF:DD:78:68:EA:98:93:4E:0A:ED
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7F7B5B69928B13C701938BECCDDE
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9InzsTm0J0FJh6_deGjqmJNOCu0.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211891
IP address blocks: 2a01:e901:103::/48 maxlen: 48
2a01:e901:113::/48 maxlen: 48
2a01:e901:123::/48 maxlen: 48
2a01:e901:133::/48 maxlen: 48
2a01:e901:143::/48 maxlen: 48
2a01:e901:153::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7f:7b:5b:69:92:8b:13:c7:01:93:8b:ec:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f489f3b139b427414987afdd7868ea98934e0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:ce:72:d3:83:79:2d:d3:60:96:89:00:84:
f7:57:2f:a5:db:7c:b7:ee:92:b9:da:11:8e:2d:76:
6e:90:e9:b6:11:56:e2:2a:44:d4:73:6b:6b:8b:6e:
0f:91:88:78:39:2b:fd:fe:a9:be:04:ed:36:e7:8a:
d3:e3:59:46:96:2c:e8:3a:ff:1e:11:f7:77:89:c6:
4a:6c:59:17:93:0b:b0:67:40:8a:3b:f5:69:02:4c:
5a:56:d0:bc:b2:17:56:10:75:a2:7f:2f:d4:dd:21:
06:0f:f4:9f:53:f7:d8:62:5a:b9:f0:f1:1d:66:cd:
01:0a:a4:6b:d7:18:b3:50:97:b1:ad:29:4d:74:b5:
32:60:57:ed:1b:0f:45:67:3a:8e:90:06:f2:db:2d:
a3:76:a0:2e:39:9e:0a:59:a7:ff:f1:01:d9:a9:76:
e3:a9:ad:20:c3:41:4d:3d:b0:d6:d4:8c:72:1b:2a:
79:e3:6f:06:16:54:3a:65:aa:1b:0b:58:65:61:11:
4e:d1:1a:56:dd:a8:2b:92:cb:9f:ec:62:89:4d:b0:
5d:7a:30:d3:dc:eb:bf:10:75:f4:cc:a5:68:5a:f7:
56:65:93:c8:e6:57:e7:76:d3:23:95:97:9f:70:08:
84:28:a4:da:74:2f:7e:76:a9:fe:b4:22:23:e5:07:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:F3:B1:39:B4:27:41:49:87:AF:DD:78:68:EA:98:93:4E:0A:ED
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9InzsTm0J0FJh6_deGjqmJNOCu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:103::/48
2a01:e901:113::/48
2a01:e901:123::/48
2a01:e901:133::/48
2a01:e901:143::/48
2a01:e901:153::/48
Signature Algorithm: sha256WithRSAEncryption
70:d1:dc:ae:43:71:55:17:92:26:40:39:5a:e8:b8:ed:a2:95:
bf:10:61:f8:53:ec:6e:c3:ca:c5:1c:ae:d8:57:41:4c:48:4a:
80:a0:f2:93:5b:94:8b:fb:6f:f0:2e:d5:83:83:cd:bd:8e:d2:
40:95:a0:9a:a5:56:af:2b:ea:70:8f:dd:3f:68:f5:a7:7e:34:
3e:92:6d:50:01:af:d9:76:19:3c:29:6a:03:c3:32:05:a9:02:
7e:46:ea:a4:3e:0a:ae:63:3f:46:19:11:a7:2e:fa:0b:e7:8a:
70:16:30:84:03:89:f1:18:45:f8:e5:b6:88:10:6c:dc:74:e4:
05:03:9b:1a:31:e2:4a:a0:09:67:c7:d4:07:54:40:f3:14:f8:
6e:53:c2:79:81:ef:26:d6:4f:52:dd:bc:c6:28:b1:15:6f:e9:
6f:21:6f:4e:87:89:20:9e:d3:f6:e8:47:66:ea:7e:49:ce:97:
6c:6d:e2:9b:9c:ba:ea:b4:48:d1:02:e4:a3:8e:db:5d:73:df:
1b:db:de:a3:26:c7:76:e7:49:e8:32:51:b7:f7:55:a3:79:4e:
1b:a1:b7:a1:e8:19:52:84:f1:ee:6d:6e:a8:32:f3:48:63:a5:
f2:c4:5f:08:87:30:70:4e:af:26:ba:41:0c:b1:d5:9d:f9:1d:
46:2f:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:19 2025 by rpki-client