Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/aKk7eVYzVveE3UsbN47EfRGODKw.roa
File: aKk7eVYzVveE3UsbN47EfRGODKw.roa (raw, json)
Hash identifier: bTMl5+kG1FU9bagaR/GwsnR/LJRUAYF48oD6z7F3xyg=
Subject key identifier: 68:A9:3B:79:56:33:56:F7:84:DD:4B:1B:37:8E:C4:7D:11:8E:0C:AC
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF4632F0B9E0840843536E41BCAFD
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/aKk7eVYzVveE3UsbN47EfRGODKw.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212592
IP address blocks: 2a0f:5707:aa90::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f4:63:2f:0b:9e:08:40:84:35:36:e4:1b:ca:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a93b79563356f784dd4b1b378ec47d118e0cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:12:2a:ff:1b:ae:87:88:a2:19:b2:0c:86:65:
f4:eb:b9:36:c1:8d:8e:6c:66:be:b0:62:a2:7d:77:
8b:ae:79:4b:a7:9f:e6:05:f0:21:41:c4:92:29:89:
bb:50:a0:76:70:bc:1f:00:a1:3d:71:ca:d4:29:6a:
d2:83:f5:37:6a:2c:70:4e:15:2c:35:96:6c:5c:43:
08:21:75:12:a1:06:10:47:24:d2:2c:49:9b:d4:7c:
4c:51:75:11:da:56:6c:d1:85:96:16:f8:67:aa:df:
aa:f2:60:e9:bc:8c:c1:0a:eb:41:3b:21:28:83:82:
76:44:16:a6:eb:2b:c9:15:4a:2c:1e:2c:f0:1e:8a:
ee:db:a8:cd:ff:f5:98:31:c0:71:0b:93:34:70:2f:
bf:95:21:30:44:4b:35:1a:86:a7:08:b2:0d:ba:09:
6f:d6:5e:8a:8e:6c:6c:82:7a:36:e5:86:7e:81:3f:
be:09:8b:dc:38:a3:f4:36:01:77:ad:58:ba:ff:97:
f6:ee:fa:43:23:12:ff:b5:7d:d5:6f:68:a5:8e:5b:
d1:0b:db:cd:c2:62:21:d6:13:85:d7:2c:9b:cc:60:
df:a7:0b:3a:88:b1:14:56:02:fa:90:59:45:ef:4b:
8f:55:0b:ab:92:90:63:91:54:c5:58:4a:bc:31:aa:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:3B:79:56:33:56:F7:84:DD:4B:1B:37:8E:C4:7D:11:8E:0C:AC
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/aKk7eVYzVveE3UsbN47EfRGODKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa90::/44
Signature Algorithm: sha256WithRSAEncryption
22:ec:0b:5c:a6:c1:11:40:a4:d1:1c:c4:0b:51:c0:f0:8d:3f:
34:4d:47:5f:a1:e4:52:33:25:07:c9:21:94:1a:e0:e3:3d:43:
37:0b:00:41:f8:8a:08:74:f7:e5:1d:26:94:9a:b8:fd:bf:91:
de:c0:76:56:31:86:b8:be:0c:81:8c:57:bd:1d:dc:ec:97:cb:
80:51:80:55:db:09:d5:44:53:d6:aa:cb:3f:63:a8:38:28:b2:
0a:30:8b:63:89:39:a3:39:f9:2b:2f:bc:ea:27:c2:f2:8f:f8:
6c:61:ea:85:63:b5:f0:dc:50:28:25:e8:e9:d7:be:83:14:fb:
74:df:a9:7d:27:7c:25:22:ce:14:68:d8:4a:6b:c2:2c:6b:7b:
c3:a9:0e:5d:f3:ab:76:c2:dc:b9:1f:4e:bb:7d:b9:f2:95:72:
e5:06:8c:ed:2a:21:69:27:9b:17:a5:43:f9:eb:84:d3:af:6d:
bf:43:88:99:51:e0:f5:1b:6e:01:0b:11:12:4e:db:56:05:2f:
61:93:7c:8b:40:ee:4a:18:1b:71:1f:b1:dd:b9:24:b2:4e:70:
cb:47:90:b3:cc:8b:51:19:90:c0:00:44:65:89:0d:72:3e:27:
52:ed:f6:e8:ea:e2:fe:2b:8c:c4:ee:3d:60:f2:2d:87:98:17:
37:75:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:24 2025 by rpki-client