Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa
File: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (raw, json)
Hash identifier: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=
Subject key identifier: 3F:62:26:12:31:C5:EE:B5:13:1F:9D:BE:43:D4:2E:58:F9:30:99:2C
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7DA5D5F5FEE162113F8F787B0991
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208771
IP address blocks: 2a01:e901:109::/48 maxlen: 48
2a01:e901:119::/48 maxlen: 48
2a01:e901:129::/48 maxlen: 48
2a01:e901:139::/48 maxlen: 48
2a01:e901:149::/48 maxlen: 48
2a01:e901:159::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:a5:d5:f5:fe:e1:62:11:3f:8f:78:7b:09:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f62261231c5eeb5131f9dbe43d42e58f930992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:77:43:34:2a:5c:17:6a:ee:d5:59:7a:2e:
dc:ec:f4:5d:4a:0e:78:5c:4c:92:37:8c:d0:af:a1:
bf:5c:bf:fc:04:b1:65:36:c2:2f:a1:2c:e2:aa:f0:
22:18:1f:20:07:bd:11:37:a3:f2:14:31:22:37:fd:
de:e7:a1:5a:94:b8:f2:71:ee:a2:fb:a5:bb:0f:13:
ef:5a:94:bb:20:37:f6:c0:53:a3:aa:84:3d:d8:1b:
a8:e3:55:d1:25:55:79:77:89:ce:a7:ca:c7:be:60:
b6:31:aa:3d:87:79:f2:1a:2f:0d:f2:f6:94:a1:81:
82:86:70:8b:45:4a:2d:aa:84:5a:96:5f:fb:bd:45:
0e:32:cd:94:74:bf:b5:da:5c:4f:d4:18:40:d8:c7:
d5:c4:d7:12:1e:55:68:c1:db:03:62:05:00:4e:f5:
7f:6d:29:e9:87:d5:1f:42:ac:29:1b:74:a4:19:81:
af:ea:39:74:50:82:d9:b9:4c:34:11:16:31:6c:1e:
61:f1:42:6d:fd:e8:53:58:62:61:62:4b:72:8a:23:
ec:bb:b5:96:e2:38:e7:62:5f:05:ee:88:5b:82:6e:
ae:3b:97:d2:99:82:ef:e5:24:b3:03:23:55:c7:4d:
c3:d3:03:12:07:cc:ed:b3:2c:49:ea:2b:23:16:80:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:26:12:31:C5:EE:B5:13:1F:9D:BE:43:D4:2E:58:F9:30:99:2C
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:109::/48
2a01:e901:119::/48
2a01:e901:129::/48
2a01:e901:139::/48
2a01:e901:149::/48
2a01:e901:159::/48
Signature Algorithm: sha256WithRSAEncryption
54:fd:88:cc:40:83:0d:7d:c3:df:f6:56:1e:77:10:b3:17:22:
9c:81:9c:09:bb:43:2c:3f:0d:2a:01:3b:b4:6f:36:69:b6:cd:
21:12:f6:76:21:6d:e9:cf:42:9c:32:02:67:cb:d9:1d:9d:45:
35:c1:05:8a:8a:9f:6a:0f:47:09:46:d3:07:3e:ef:c8:7d:29:
8a:ea:28:96:a5:a7:0f:05:7b:c3:f8:3c:e1:29:f8:5a:d8:99:
19:9d:06:7b:38:1e:0b:89:e9:6f:e3:85:93:57:88:a9:26:48:
f8:06:3f:bc:91:b2:18:9c:87:bc:a7:13:c3:e1:ce:7e:bf:9e:
c1:5e:16:b9:2c:ed:b8:00:0b:7b:cc:7e:b1:90:d0:51:33:50:
35:70:91:1c:1e:07:74:13:d7:7d:49:0a:91:7d:de:68:8d:c8:
48:c2:2f:5f:fa:83:55:6c:69:06:22:35:ab:4c:6c:ea:f3:dd:
02:d8:2a:6f:f3:88:8e:9a:c4:e9:fb:30:ce:ec:01:26:67:5a:
36:ad:3d:dc:60:f7:2b:74:56:9f:00:cc:9f:50:50:df:a6:bd:
03:09:8b:a4:91:fe:c8:72:fd:68:68:bd:16:61:fd:53:56:62:
2e:79:13:24:ff:1f:6a:90:94:16:10:f7:3c:07:36:d7:0f:93:
89:7d:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:54 2025 by rpki-client