Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa
File: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (raw, json)
Hash identifier: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=
Subject key identifier: 4F:79:4E:8D:29:88:CE:22:29:C0:FA:9F:03:31:90:FA:D1:09:C0:68
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0194266BDA7C2C9DB905FD4A602FF0D14930
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60960
IP address blocks: 2a07:7b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:da:7c:2c:9d:b9:05:fd:4a:60:2f:f0:d1:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f794e8d2988ce2229c0fa9f033190fad109c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:5c:93:d5:be:58:2c:c8:40:4a:3c:22:8b:
1f:7b:a8:bd:95:00:37:5a:59:3c:a5:8a:cd:f8:d3:
c6:49:aa:c7:ca:10:e6:d1:e7:3f:8c:f1:8d:be:c0:
1a:6c:78:42:33:0b:09:55:c6:35:b8:04:be:7a:5b:
c5:2c:9c:fa:00:05:90:78:34:ac:c1:cd:4b:82:3b:
90:1e:92:07:e6:ed:7d:bb:41:93:6d:61:25:66:d5:
de:59:1c:21:4f:4f:c7:33:a8:3b:70:a5:48:4a:26:
d3:e4:44:a6:74:d7:f2:2d:6a:e0:8e:19:9e:ae:b8:
08:1e:4e:bb:31:be:70:f6:69:94:f7:df:3a:8c:61:
e3:9a:74:52:55:58:47:2a:7b:26:62:3c:a3:26:cc:
ff:e5:55:ec:68:e3:e6:6d:d7:dd:79:5d:91:4b:fd:
13:dc:5c:45:3e:ef:cf:a3:bf:83:d6:73:60:9a:43:
91:e2:f7:41:79:34:7f:63:be:c7:7e:01:ad:bd:00:
8d:f2:e5:3a:af:9c:09:7c:3d:61:63:41:1a:fb:56:
d4:3c:18:80:ab:14:0b:2c:92:1f:2a:08:98:c5:32:
69:89:6a:89:d1:50:87:70:be:e8:68:62:09:bb:ab:
29:09:63:8a:08:2e:c9:ef:bf:37:08:03:9e:7e:47:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:4E:8D:29:88:CE:22:29:C0:FA:9F:03:31:90:FA:D1:09:C0:68
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
16:a0:02:dc:9b:40:f8:c3:19:43:cb:4b:76:65:4e:0f:e6:d9:
56:6d:f5:c2:ef:57:7c:76:8f:5c:f6:d5:3b:23:74:c6:55:31:
37:3b:56:7d:78:4c:d6:15:50:2d:b6:4a:f2:b4:57:c6:47:71:
1f:5d:8a:9c:83:62:0e:31:cd:10:cb:11:42:43:77:86:34:ec:
d1:34:47:2c:50:84:a8:ee:d5:e7:63:8d:a7:1c:bd:00:c2:34:
57:d6:04:71:87:c6:7a:04:6e:fb:ae:2b:3b:26:da:23:af:f1:
f3:97:a0:8b:8f:70:f6:98:51:55:23:37:74:91:a0:5f:67:c6:
f3:3a:d9:f7:66:83:d2:04:73:4d:60:00:b7:4f:78:48:58:13:
f6:3f:ae:49:c7:9c:a5:7b:8f:09:88:22:cd:3c:c7:7a:db:9c:
d5:e2:dd:9f:15:44:b9:4a:2f:87:99:5a:e1:c8:a9:c0:ef:b6:
9c:d1:07:87:2b:ac:46:04:96:31:a5:c5:22:0a:9a:e2:3a:8f:
6e:14:ca:2d:26:00:a6:f5:14:f4:de:3b:79:31:c7:b7:59:11:
ff:99:ad:29:c2:c9:3a:59:f0:4d:e9:0d:3f:54:bb:27:93:9d:
80:b4:87:9d:99:38:28:0f:68:57:dd:eb:1c:ab:75:cf:33:49:
fe:2a:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:25:51 2025 by rpki-client