Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T_4hytV78QcFtFzJt7beKGCmPUg.roa
File: T_4hytV78QcFtFzJt7beKGCmPUg.roa (raw, json)
Hash identifier: J6FzGj/elGVJl22oVWe8CQmd4bPXfKhX/DhRKHoR58M=
Subject key identifier: 4F:FE:21:CA:D5:7B:F1:07:05:B4:5C:C9:B7:B6:DE:28:60:A6:3D:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274832D4C18E82611406BBCC1D6CD89A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T_4hytV78QcFtFzJt7beKGCmPUg.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396362
IP address blocks: 2a0e:1a82::/32 maxlen: 32
2a0f:1e80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:d4:c1:8e:82:61:14:06:bb:cc:1d:6c:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ffe21cad57bf10705b45cc9b7b6de2860a63d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:67:17:3f:a8:39:84:4c:da:1c:96:24:0b:
a7:0d:a0:c8:95:2d:09:f4:dd:3b:5b:da:ff:41:dc:
e0:f7:6c:04:0a:3d:d4:b6:05:4f:b7:b8:db:06:74:
02:d9:87:8a:e8:45:d8:f2:b1:c2:bf:b4:cb:4b:d3:
19:93:5b:1f:28:6d:a8:ea:01:c1:5a:36:02:80:9f:
bb:08:92:c0:89:b2:96:a0:09:ff:a4:11:ed:33:e6:
81:23:4f:94:41:36:a0:a3:db:aa:4e:3d:73:a4:78:
3f:3d:f6:20:d8:05:03:d2:75:36:a2:10:85:3b:59:
25:cc:24:5a:3a:e9:ec:b9:2b:6f:b2:68:44:80:40:
0a:8f:c9:6b:bd:8e:4b:98:83:75:bf:e4:60:46:50:
c4:72:e9:1e:19:57:23:35:21:82:75:a5:8a:45:dc:
31:ef:3b:48:99:2c:5d:f9:55:53:47:17:d3:13:69:
02:a1:ed:97:5f:f5:f7:a8:6e:55:4b:32:63:ad:4c:
7a:6a:1d:c0:cd:ce:8b:a8:67:80:1a:64:67:9e:02:
ca:e9:8f:79:23:59:9f:f5:1f:dc:f2:8c:76:99:cd:
af:71:60:34:d2:d0:01:52:a4:df:6b:a6:f4:6b:d6:
53:dc:d9:c3:6b:eb:2b:6c:30:65:60:c0:d9:8b:ba:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:21:CA:D5:7B:F1:07:05:B4:5C:C9:B7:B6:DE:28:60:A6:3D:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T_4hytV78QcFtFzJt7beKGCmPUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a82::/32
2a0f:1e80:1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:88:11:76:b0:7d:74:8a:86:1c:33:ba:5a:41:80:b5:16:0a:
33:69:6f:2f:81:94:04:03:16:e7:2f:84:e3:cc:f4:b5:45:2b:
72:30:8d:06:f6:14:ae:3f:6b:57:46:ec:a6:7b:48:3c:5b:ca:
03:5e:b0:44:c2:b3:9b:4f:41:fb:3f:c0:3d:e7:9c:51:ab:e6:
a5:7c:ea:91:0d:bb:19:f4:6f:bc:68:56:e4:88:3a:20:91:bf:
d8:05:25:da:d4:c2:4b:cd:b7:8a:82:7a:1a:44:ae:59:40:10:
1f:25:87:1b:1e:f0:d9:d3:c6:79:40:b0:eb:42:d1:5c:0d:ba:
b2:1e:82:62:9b:45:f3:5d:52:81:cb:1a:46:ca:f1:08:ce:5f:
3e:08:d6:c5:00:02:b4:7d:4b:69:d7:19:6c:aa:39:5f:14:5e:
65:6c:9e:81:49:ba:96:9c:ed:86:8c:31:e0:d4:fc:06:29:b2:
81:ba:a2:0a:e3:7a:42:42:92:e4:ea:01:cf:1b:c2:65:df:7f:
ac:d7:19:43:c7:e7:33:f0:1b:72:6d:59:e4:97:5d:aa:9f:2e:
86:80:6c:93:c9:cb:da:56:67:ef:6f:1e:73:4f:cf:12:d0:37:
39:4f:62:71:a0:a6:7f:83:e3:9f:c9:98:d6:a6:70:42:fa:23:
73:2e:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:17 2025 by rpki-client