Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/s5nOHH7O_Iy35NadNlKWRTHv234.roa
File: s5nOHH7O_Iy35NadNlKWRTHv234.roa (raw, json)
Hash identifier: Zqo89mKPMWCA1LhQsk+V9v8ft2unhkmQL40GMLvzCkw=
Subject key identifier: B3:99:CE:1C:7E:CE:FC:8C:B7:E4:D6:9D:36:52:96:45:31:EF:DB:7E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BEC11B9056B5BB57D4348DB70E8C0
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/s5nOHH7O_Iy35NadNlKWRTHv234.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207468
IP address blocks: 2a0f:5707:ffa0::/46 maxlen: 48
2a0f:5707:ffa4::/46 maxlen: 48
2a0f:5707:fff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:11:b9:05:6b:5b:b5:7d:43:48:db:70:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b399ce1c7ecefc8cb7e4d69d3652964531efdb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:a0:ff:4d:c8:ee:3b:27:ad:0b:61:8b:81:
ef:b7:e4:28:0b:53:aa:93:84:d8:3b:d6:39:0a:c6:
45:a4:64:a1:c0:f7:44:95:4a:00:6f:48:49:e6:ed:
a6:0d:2f:33:c3:80:0f:27:56:f0:0f:b9:94:e1:be:
8b:23:74:0a:16:09:dc:41:8d:9d:f5:f8:92:f9:10:
34:f2:54:e7:92:0b:a3:74:43:cf:09:7b:5f:da:59:
67:18:64:38:09:f4:8c:26:28:d0:63:1b:bb:67:6d:
8b:14:b6:e6:95:6b:d9:4c:5b:fd:94:a1:d4:de:ba:
da:49:68:6b:89:85:0e:5a:72:f5:e7:d0:48:6d:34:
bd:7e:10:63:f5:86:94:64:58:73:0f:94:f2:ac:87:
3c:f1:b6:ed:fb:e6:77:29:6e:2a:b2:4c:64:a5:b7:
10:50:c2:46:60:b8:20:10:ea:a5:8b:f1:56:d8:96:
19:39:5e:ec:d0:18:a7:7e:3e:ab:2e:14:84:81:89:
a3:40:7f:35:ad:4c:98:1d:89:f4:a2:15:37:02:e4:
cc:94:d2:95:69:d8:c5:4e:83:fa:50:e2:54:74:71:
62:98:24:3f:9f:b2:2f:9b:d3:a7:f9:f5:13:bd:4c:
17:11:f6:57:09:56:f5:5b:6e:7c:56:cd:0d:00:96:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:CE:1C:7E:CE:FC:8C:B7:E4:D6:9D:36:52:96:45:31:EF:DB:7E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/s5nOHH7O_Iy35NadNlKWRTHv234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ffa0::/45
2a0f:5707:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ec:c3:ff:95:ea:84:26:97:9f:81:77:24:03:b3:c7:b8:eb:
a6:01:1f:c1:2a:75:eb:d8:0c:4a:7c:06:53:3a:39:57:a3:7c:
be:88:63:4e:81:80:a8:04:da:5a:d0:0c:c9:88:96:1c:b4:e0:
72:36:58:3c:15:c4:d4:b7:06:4d:a3:ae:92:c4:73:92:d3:74:
f3:d4:82:21:1c:64:25:bb:ad:02:be:33:f5:7e:f1:93:05:97:
93:15:19:86:8a:2e:88:e5:32:c7:5e:59:d4:9e:ff:9c:da:8b:
fa:70:45:08:e2:71:75:e0:c8:17:9d:cc:bb:26:69:2c:78:ec:
21:17:7a:14:57:f8:37:ec:f2:c3:84:57:f1:50:81:47:24:69:
50:7f:b9:bd:a4:25:10:bf:80:1d:e1:72:7a:4b:0f:ae:1b:c6:
5f:de:e2:30:e5:52:a7:94:96:ec:b9:17:8c:d1:27:94:23:e0:
6c:7c:3c:04:f7:e5:51:87:40:58:a3:8e:a2:fd:62:49:69:1b:
dd:c6:46:0f:cb:38:f6:b5:82:09:94:bb:71:e3:65:2d:09:1a:
47:53:01:35:52:74:e6:a9:b2:a8:84:b2:f8:02:4f:1e:27:9f:
3a:f0:f1:0b:db:cd:78:18:e6:8d:1d:d7:97:94:93:1f:fa:13:
d6:b3:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:42 2025 by rpki-client