Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/7d96aB4yIJcpf3t7AK7rOEfEuXU.roa
File: 7d96aB4yIJcpf3t7AK7rOEfEuXU.roa (raw, json)
Hash identifier: YVUOaQ7gZo0Ot14nzNA+Iid5DHh0RdoEeVU8ZU55+sA=
Subject key identifier: ED:DF:7A:68:1E:32:20:97:29:7F:7B:7B:00:AE:EB:38:47:C4:B9:75
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BECAB08D1A07410E1B80A4DE510E1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/7d96aB4yIJcpf3t7AK7rOEfEuXU.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207622
IP address blocks: 2a0f:5707:aa20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:ab:08:d1:a0:74:10:e1:b8:0a:4d:e5:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddf7a681e322097297f7b7b00aeeb3847c4b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:c8:54:a8:69:eb:00:fa:28:e3:f9:13:5d:
5b:85:4f:c0:aa:bc:75:95:b7:2a:42:db:59:83:2b:
a3:4c:33:e6:ef:fc:73:e5:23:4f:97:60:44:8a:25:
80:b6:95:eb:6c:e2:b2:28:1e:94:f7:26:c8:0e:50:
c6:15:ab:9c:de:6c:7d:99:f5:39:50:14:30:45:ac:
90:ed:28:85:9e:f9:17:00:0a:bd:91:94:03:f1:a2:
92:58:a2:29:5e:51:2e:c9:70:db:70:e0:d9:fa:bb:
bb:ce:e8:b6:03:60:93:75:a4:15:77:99:81:b9:e6:
62:0d:50:57:66:9d:bd:cc:c3:f2:3f:8e:80:d5:d5:
fa:11:90:e3:a0:24:ce:69:ab:c1:20:20:65:d9:9d:
b3:db:f7:3b:9b:e3:55:b9:e8:da:53:66:6a:68:f6:
c9:3e:69:1f:d7:1b:07:33:60:34:1e:98:f5:9b:13:
1a:55:32:e1:3e:1a:c6:83:b9:bd:ab:a9:2d:97:01:
eb:ad:8e:b1:4c:ce:d9:9d:26:95:ac:5b:77:e1:06:
f3:ad:dc:a5:01:c0:3a:23:e9:e1:ad:80:cf:12:29:
a8:f8:5e:78:aa:b3:df:32:51:58:45:4e:90:a5:20:
18:4a:03:e9:93:97:2f:24:0c:b8:00:5a:63:90:8b:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:7A:68:1E:32:20:97:29:7F:7B:7B:00:AE:EB:38:47:C4:B9:75
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/7d96aB4yIJcpf3t7AK7rOEfEuXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa20::/44
Signature Algorithm: sha256WithRSAEncryption
a2:65:3d:57:0f:47:fd:c5:68:77:1c:e1:d5:ee:ce:fa:53:d9:
60:da:a7:3e:3f:72:43:6e:8c:8f:c9:19:de:d4:f9:d7:fb:58:
99:80:d4:07:b0:71:1d:2b:8d:5c:c1:99:9a:1e:ec:ac:ef:f4:
85:14:03:db:e9:9b:90:2a:45:3e:c6:3f:3b:21:89:97:98:7a:
75:eb:91:00:4c:3b:99:93:01:39:06:d2:3e:dd:56:07:94:61:
62:dd:86:1b:a8:5d:06:56:ed:0b:e0:07:27:f4:69:37:4c:a9:
67:1a:c3:cc:af:a6:6a:89:a8:70:1b:ce:b1:3d:99:31:ec:b4:
13:9b:35:6e:4d:1d:54:c7:e1:66:e2:5b:aa:d4:34:99:6d:87:
c5:ae:41:df:af:bb:1d:4f:79:1c:a6:fa:69:0b:9d:9a:bf:24:
69:e3:66:bb:ee:cf:9e:81:1d:1f:12:63:9e:e0:31:55:1e:d1:
f0:b6:b7:71:4d:35:b0:6c:de:68:1a:f7:12:68:8d:5f:dc:90:
98:1c:ad:09:87:94:37:33:9e:82:f0:b2:d4:da:c5:02:b9:c0:
0d:c4:e0:7b:ba:9d:2f:28:e7:93:96:ed:9a:9d:9f:73:82:ca:
2a:63:91:a6:45:eb:78:08:12:1f:d5:07:88:79:24:ee:6a:39:
36:44:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:01:27 2025 by rpki-client