Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RRF0BWArThGFUtcgB-Rqqa21Q_M.roa
File: RRF0BWArThGFUtcgB-Rqqa21Q_M.roa (raw, json)
Hash identifier: Tluv64ZgR6YwKTB2F70qHzzv+8hIQNsglXWcD11honc=
Subject key identifier: 45:11:74:05:60:2B:4E:11:85:52:D7:20:07:E4:6A:A9:AD:B5:43:F3
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BEC5314BADBC0755B33CB435D3533
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RRF0BWArThGFUtcgB-Rqqa21Q_M.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207469
IP address blocks: 2a0f:5707:ffe0::/46 maxlen: 48
2a0f:5707:fff3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:53:14:ba:db:c0:75:5b:33:cb:43:5d:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45117405602b4e118552d72007e46aa9adb543f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:5f:64:a9:8a:8a:ed:e0:b7:02:f4:11:bc:
5e:ea:7e:93:89:ba:d9:f6:63:59:0a:d0:0b:db:16:
8a:ef:6f:6e:07:af:48:17:7a:f9:56:a6:c0:20:cb:
09:e7:c7:ba:46:19:c0:c3:af:f4:e0:34:24:1a:b4:
7d:51:b3:bf:51:e1:70:0f:d5:31:5c:45:9f:db:7a:
53:d8:c4:0d:79:fe:81:37:d4:a1:f9:a3:85:6c:5b:
9f:11:43:09:3f:8f:b8:4f:5b:25:b1:c1:c2:79:12:
fb:35:80:00:1b:df:b8:f5:c2:53:7a:eb:eb:04:be:
d4:54:e7:a8:c7:94:cf:36:3f:f1:15:90:72:2e:88:
73:50:54:2d:bd:e6:8d:ed:4f:ee:c4:3e:d7:1d:ed:
9a:8f:a2:ce:aa:57:96:d9:22:76:fa:1d:16:09:7b:
47:19:8e:72:28:24:6d:d0:03:b5:79:2b:02:9d:22:
6f:31:1c:b1:16:3c:fb:5c:45:b9:2e:25:43:c4:fc:
f7:55:5a:f0:f5:10:f3:d7:27:fe:b4:2d:9e:0d:5b:
ab:e6:1e:f9:aa:8e:bb:88:f5:ba:32:b4:4c:92:cf:
2a:66:01:d2:84:84:ed:bc:c6:56:23:3e:06:d9:ef:
43:47:21:3f:d4:d4:02:17:5d:1c:95:3d:3e:a9:cd:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:74:05:60:2B:4E:11:85:52:D7:20:07:E4:6A:A9:AD:B5:43:F3
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RRF0BWArThGFUtcgB-Rqqa21Q_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ffe0::/46
2a0f:5707:fff3::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a2:ca:42:26:e3:cb:8c:3a:1d:38:ac:47:47:5c:a6:4d:22:
c6:f9:ff:db:f9:6a:f0:f9:72:c6:fb:a6:bd:5d:d5:e7:bb:12:
f4:21:4d:69:ab:e4:b5:3d:65:d1:61:6e:7a:d1:53:19:f9:63:
c4:10:66:88:4e:e5:46:6a:c5:df:6d:8d:c5:7a:b4:55:43:88:
39:9c:27:49:0b:36:6b:48:91:19:b8:e7:cd:13:17:29:a2:e1:
1a:0b:46:32:db:57:fa:0c:fe:1c:ea:1c:bc:26:c5:76:fe:5a:
b1:0c:f8:45:15:83:65:5d:9b:13:45:53:80:35:41:bf:28:cb:
ae:74:ea:76:4d:b3:48:2d:bc:d4:b4:10:4f:32:36:a5:55:97:
bd:ae:d7:f4:d9:68:9e:6f:e5:76:af:ee:37:a0:0f:fd:b6:7a:
92:73:71:af:7f:02:15:b3:6f:f4:93:18:ca:3e:be:77:0d:e5:
4e:3e:3e:3c:fc:2b:3e:c6:35:a1:a6:de:57:58:81:53:28:67:
bf:1e:aa:7b:d7:5f:82:ab:99:36:94:19:54:d2:90:18:0e:af:
c9:90:69:50:98:1c:94:84:cb:ea:09:6e:df:d6:8c:82:5b:31:
93:e3:62:46:4f:2b:3a:43:f3:61:65:db:74:90:d8:2a:4e:16:
1b:2b:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:50 2025 by rpki-client