Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/iXTTVsMDv1eXArQw0zl0iDY0UDo.roa
File: iXTTVsMDv1eXArQw0zl0iDY0UDo.roa (raw, json)
Hash identifier: e1bkdrnLN0olE3phhfcjIVBY9Ez7lKjSRedChM4yPuc=
Subject key identifier: 89:74:D3:56:C3:03:BF:57:97:02:B4:30:D3:39:74:88:36:34:50:3A
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01926BF1A7E2B4D59D6EA1A26CF2CB016525
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/iXTTVsMDv1eXArQw0zl0iDY0UDo.roa
Signing time: Tue 08 Oct 2024 11:44:12 +0000
ROA not before: Tue 08 Oct 2024 11:44:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13127
IP address blocks: 2a04:9a00:1118::/48 maxlen: 48
2a07:3501:1080::/48 maxlen: 48
2a07:3501:1081::/48 maxlen: 48
2a07:3502:1190::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:f1:a7:e2:b4:d5:9d:6e:a1:a2:6c:f2:cb:01:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 8 11:44:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8974d356c303bf579702b430d33974883634503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:e9:16:aa:d5:ca:b7:4e:7b:a1:29:14:b9:
a0:73:04:4f:d7:ff:13:de:3e:f7:ae:b8:4b:5f:7b:
bb:6c:b2:86:da:46:d8:69:66:5a:6d:1d:dd:bc:15:
64:7e:ae:e1:b5:9c:de:2e:7c:ad:c2:97:2a:29:83:
59:64:58:4f:3d:5c:15:ea:56:ba:f7:93:6a:1b:2a:
fa:02:b3:6d:70:e7:f4:0f:15:13:c9:12:4b:1a:f3:
13:1b:11:6c:b4:01:91:fb:c1:06:0c:30:f8:10:73:
1b:f4:2a:02:24:f8:df:86:fa:fd:74:76:7b:9a:f0:
26:a4:9d:02:78:46:c1:ab:af:c8:98:b8:bb:87:82:
1f:e3:97:78:ab:79:dd:3e:0c:6d:f4:16:c0:1d:b3:
3c:17:85:29:df:d3:44:cd:ce:b4:1f:3c:c2:7d:1b:
c0:54:33:1b:b2:da:a0:fc:08:f6:a8:01:b1:87:f3:
30:31:ba:b0:66:bc:16:d1:bd:73:bd:20:4c:6e:5d:
47:5f:ae:91:96:ca:f2:d1:47:eb:9b:f4:91:33:3d:
c4:e0:4e:00:44:50:74:40:48:0c:2d:a4:a4:8d:53:
aa:ac:ec:a1:21:60:92:8d:39:c6:42:7c:4a:dc:8a:
db:8b:cd:4f:4f:78:0a:6f:ea:aa:d6:a3:77:7d:32:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:D3:56:C3:03:BF:57:97:02:B4:30:D3:39:74:88:36:34:50:3A
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/iXTTVsMDv1eXArQw0zl0iDY0UDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1118::/48
2a07:3501:1080::/47
2a07:3502:1190::/46
Signature Algorithm: sha256WithRSAEncryption
b0:f5:c5:9f:ac:1a:d6:00:99:e3:70:65:f9:8f:31:c0:1b:56:
83:ab:38:39:40:7e:13:00:e1:8f:b7:38:45:3a:79:96:0b:13:
1c:75:8f:20:7b:cb:3d:23:e8:33:3e:fd:25:a3:95:b1:c0:fe:
3a:d8:ab:78:24:42:82:70:ab:bb:b8:ed:85:ee:34:f7:61:de:
11:de:bd:b5:15:a7:e7:80:b6:36:bb:73:5c:d8:4d:7e:83:71:
be:a2:a9:18:44:1b:46:65:f1:3f:62:60:57:e7:df:0a:0b:9e:
5e:4d:d6:a6:d2:8b:b9:f0:82:47:4a:f4:25:ea:ae:6f:9b:48:
e4:07:80:88:15:cd:32:44:7a:c7:b2:d9:39:d5:47:d1:ac:e5:
28:20:ea:d1:13:43:65:3c:a5:09:07:29:b3:1d:04:2d:e6:76:
db:a3:d7:6e:52:f7:58:2d:6c:fc:57:f1:aa:f0:a7:7f:e1:8d:
6a:71:01:82:ca:c1:80:04:2a:9e:76:67:49:2d:1f:42:bb:df:
12:2e:e8:b5:9f:92:2c:1a:e5:3d:66:95:0b:cc:de:82:15:00:
bb:99:fc:85:b0:0e:d1:67:5b:bc:68:11:ef:9a:94:90:e4:3c:
f4:69:9f:8f:96:8a:76:50:8c:33:6f:bf:f9:8a:5c:5a:7e:95:
aa:5f:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:17 2025 by rpki-client