Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/aK0ZCA3UzihhLWePrq6nqCII3zs.roa
File: aK0ZCA3UzihhLWePrq6nqCII3zs.roa (raw, json)
Hash identifier: J2psJ8fKHZMaQGgjR1FapfC469JthhL/LFCAFjcAv08=
Subject key identifier: 68:AD:19:08:0D:D4:CE:28:61:2D:67:8F:AE:AE:A7:A8:22:08:DF:3B
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01942143E0DF7F17937D440078120ECE07B4
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/aK0ZCA3UzihhLWePrq6nqCII3zs.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44628
IP address blocks: 2a00:1908:faca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e0:df:7f:17:93:7d:44:00:78:12:0e:ce:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68ad19080dd4ce28612d678faeaea7a82208df3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:7d:b2:67:8e:40:e7:63:dd:ef:65:b8:d9:
72:4f:50:14:4d:3c:c8:95:42:a2:19:54:a2:76:9e:
b5:2c:18:56:38:d9:5e:f7:79:2a:5e:9c:95:7f:15:
4f:25:f3:1d:96:68:d3:43:c5:9d:dd:b5:a5:a0:ca:
72:84:bc:62:c1:39:cf:45:41:4d:bc:9c:a9:af:60:
8c:e6:44:4f:aa:bd:e6:2c:00:9e:36:72:4f:87:a1:
49:bc:ca:4f:81:50:c9:f5:85:27:df:c0:24:a7:79:
cf:4a:41:a6:a1:c3:0f:c0:71:e3:82:e2:83:cc:be:
b8:72:92:b2:f7:e7:19:de:b6:ed:58:8a:15:32:8a:
b1:65:68:a8:ef:21:44:84:e2:fd:41:fa:78:e7:93:
2e:e9:e5:3a:6a:7e:48:48:ff:b6:a4:1a:93:2a:6a:
f0:48:4b:0e:ac:df:17:ef:e8:da:36:92:24:d3:19:
90:a3:63:1e:1e:fe:d9:92:0f:09:95:d0:ae:26:c5:
c1:d1:77:cf:93:16:ed:fc:53:b4:57:8f:6f:08:69:
a7:99:67:44:74:bd:4e:cd:91:e2:e8:9d:94:b1:d0:
76:b1:8d:41:31:60:d7:e9:c4:c6:43:9a:a8:bc:90:
97:69:c4:ba:e6:f2:4d:37:6e:43:73:c1:f9:f6:90:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:19:08:0D:D4:CE:28:61:2D:67:8F:AE:AE:A7:A8:22:08:DF:3B
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/aK0ZCA3UzihhLWePrq6nqCII3zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1908:faca::/48
Signature Algorithm: sha256WithRSAEncryption
83:64:65:b8:2b:54:f6:1f:09:1f:df:b6:a6:e2:13:c7:e0:65:
3d:a8:c3:8a:1a:27:00:4b:42:5f:3f:94:a4:2c:60:f5:61:3a:
b3:4d:c5:4d:e7:8e:99:66:1d:a5:c5:cf:ab:7e:ee:e5:d1:c8:
b1:fb:61:a5:e7:8c:23:88:b2:99:74:fd:fa:46:12:e9:f9:6c:
ea:c1:a9:18:2d:0e:14:4e:a3:40:3a:99:f5:b9:4e:59:f4:eb:
0e:12:01:03:03:c6:22:7b:d2:ec:08:e8:3f:1f:d3:53:a6:0c:
5e:f3:a8:7c:49:ab:9a:42:7d:95:a2:b6:03:00:03:1f:94:a1:
40:2a:e5:60:a7:f8:4c:93:56:9b:04:a4:e9:de:72:61:cf:03:
ab:57:21:02:0a:43:a2:a9:37:51:5c:07:1d:33:6b:a9:32:5c:
69:5a:dc:ca:01:25:09:f4:23:cd:4e:79:7a:1b:97:b0:aa:fa:
05:b1:bb:be:eb:4f:b5:54:5d:c5:c1:07:df:6f:7e:26:c3:f1:
ef:50:d2:ef:80:f6:c6:fb:1f:03:49:a0:2c:a7:1d:ba:17:b8:
d1:e3:c4:a5:70:ba:a0:64:28:8f:9a:91:e9:aa:6a:9e:62:2b:
55:64:b5:51:67:92:66:f5:c4:5c:27:f9:fa:70:cd:eb:83:99:
04:a9:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:58 2025 by rpki-client