Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dAiu_ijx3rAVu5gSWCEehgpRzsY.roa
File: dAiu_ijx3rAVu5gSWCEehgpRzsY.roa (raw, json)
Hash identifier: zNhOo8wsngyst6gbvmCSOLCHoo0lgGUr6+wThW3nl7g=
Subject key identifier: 74:08:AE:FE:28:F1:DE:B0:15:BB:98:12:58:21:1E:86:0A:51:CE:C6
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C49BDA5D6702237BE175E5B8A3AD
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dAiu_ijx3rAVu5gSWCEehgpRzsY.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:4185::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c4:9b:da:5d:67:02:23:7b:e1:75:e5:b8:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7408aefe28f1deb015bb981258211e860a51cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:97:6c:2d:a0:33:c5:95:27:42:ef:51:05:
56:8e:c4:f9:32:a3:d5:4d:91:0e:6b:4a:fc:1f:a4:
e0:57:dc:5c:6c:4f:1c:64:97:a0:32:27:b0:d8:4b:
95:e4:fa:3b:2d:0b:d1:d6:01:47:73:53:ff:ee:01:
f0:b3:b4:8d:df:64:60:4f:2d:59:cf:a3:85:33:4e:
24:96:44:6e:79:9f:63:d7:e4:5f:ae:e0:28:9e:4c:
5a:ce:79:37:19:f2:bc:36:8e:87:f0:14:9a:45:ac:
18:f1:93:ff:5c:1c:fb:17:22:63:18:7d:87:6f:06:
6b:ce:d8:08:4c:a8:01:2c:01:ac:e3:3e:b0:1e:f4:
9a:ef:d0:bf:ae:88:39:44:af:5a:75:4a:92:aa:c0:
3f:2a:66:4a:c4:ed:68:95:e7:e7:9f:d3:41:d5:e1:
fa:52:a9:79:b7:91:7c:fb:32:a4:b8:15:4d:23:f6:
13:fa:09:a4:f9:80:6a:e1:de:48:0a:3d:61:75:08:
58:2f:e0:ec:de:13:09:7c:b0:64:64:65:14:67:15:
35:23:f1:90:36:c5:42:3b:f8:2d:cb:c0:d2:7f:f4:
47:fb:ce:4d:9d:7b:40:0e:35:62:a9:6c:00:7a:d0:
a6:7d:b0:1a:30:45:02:5d:80:cc:38:12:44:c9:a5:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:AE:FE:28:F1:DE:B0:15:BB:98:12:58:21:1E:86:0A:51:CE:C6
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dAiu_ijx3rAVu5gSWCEehgpRzsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4185::/32
Signature Algorithm: sha256WithRSAEncryption
90:ee:db:01:6f:de:10:5d:c0:44:fd:03:10:4c:4a:d7:31:a3:
ed:cd:eb:ef:e0:1f:8b:ac:b4:2d:f7:8a:93:a1:d6:d3:48:01:
cf:57:aa:6f:fa:7b:e7:80:d0:ff:12:87:0b:75:0d:18:a5:6f:
10:c4:a8:7e:e2:04:0f:5a:80:00:31:c9:d0:e6:6f:66:6c:65:
b7:18:6c:ca:b3:7e:11:ec:d7:9f:f8:d4:2a:c1:a4:bf:42:2e:
47:53:12:7f:01:ba:f8:9c:9b:d6:9b:38:e7:86:c5:13:e2:fb:
03:b9:d9:ae:52:80:90:68:0c:87:6a:3c:1a:7b:49:31:cc:6c:
db:98:85:fc:7a:4c:07:4d:a0:fc:21:24:a5:91:f2:55:b3:a0:
83:24:3f:04:00:13:16:ae:c4:cc:01:aa:c8:64:34:13:92:d2:
11:9e:36:65:8e:ec:46:1e:21:5d:1d:ad:9d:05:c4:d4:33:93:
14:18:dc:d6:20:4c:9e:8d:c6:b4:94:1b:2c:83:2f:c3:b0:fb:
a7:f1:62:67:bf:9f:ea:06:85:ae:29:e4:51:35:26:88:2c:e0:
ed:10:e0:98:8b:a8:40:c5:59:7e:e5:de:e4:ec:8c:35:fa:51:
08:de:b5:53:00:88:d2:08:50:66:18:79:a4:25:96:a0:4a:fc:
d0:08:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:27 2025 by rpki-client