Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sT2Q6qZsHQQ_fpb9bv-Px4xd4Dk.roa
File: sT2Q6qZsHQQ_fpb9bv-Px4xd4Dk.roa (raw, json)
Hash identifier: wBeou90+mehHieREcNLDM9Gi6DKGCbedKhCNOidBd4Q=
Subject key identifier: B1:3D:90:EA:A6:6C:1D:04:3F:7E:96:FD:6E:FF:8F:C7:8C:5D:E0:39
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDB65FCACC3C51989E5DC45DD0DB91
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sT2Q6qZsHQQ_fpb9bv-Px4xd4Dk.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a04:9a00:1480::/48 maxlen: 48
2a04:9a00:1484::/48 maxlen: 48
2a04:9a00:1488::/48 maxlen: 48
2a04:9a00:148c::/48 maxlen: 48
2a07:3502:1191::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:5f:ca:cc:3c:51:98:9e:5d:c4:5d:d0:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b13d90eaa66c1d043f7e96fd6eff8fc78c5de039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:88:b3:b6:74:0f:33:a3:d5:c6:b4:00:5c:
7b:e9:f8:7a:41:89:61:c2:96:57:0e:a1:3b:60:9a:
51:b9:a4:60:70:94:16:c1:3a:4f:3d:f9:ff:16:af:
15:ef:8b:b0:6e:9b:24:3b:f0:00:89:ee:85:4f:63:
44:a7:bc:e1:60:1f:5a:47:c0:57:17:61:61:32:0a:
10:b3:c5:73:50:60:8b:09:6b:d7:8d:71:45:0c:42:
70:25:85:17:4e:cc:2a:ba:9f:fb:2a:6a:bd:8c:3d:
fd:a3:bb:7d:b1:5a:6a:59:63:f2:cc:be:53:fe:d7:
f8:a4:b6:6e:96:00:3d:1d:ee:c0:58:30:55:32:55:
c7:d6:60:d2:e1:89:5a:83:a5:2b:3f:27:f2:4b:2b:
06:93:42:63:65:af:07:12:db:4d:06:42:0f:fe:08:
60:a6:04:65:1d:ec:d8:de:b4:f9:85:cc:45:14:0b:
7d:bd:35:95:85:90:b0:93:8d:36:e5:77:c6:f1:9f:
f4:cd:1c:be:3f:68:1e:be:f7:40:ec:30:12:2a:cd:
0a:b6:b4:7d:eb:c8:c2:98:52:d2:54:93:50:e3:ec:
4d:79:2a:8b:fd:4b:01:b4:76:5b:84:b7:ef:af:13:
72:f6:5c:42:f0:92:f1:d6:49:ac:68:a0:d4:36:52:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:90:EA:A6:6C:1D:04:3F:7E:96:FD:6E:FF:8F:C7:8C:5D:E0:39
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sT2Q6qZsHQQ_fpb9bv-Px4xd4Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1480::/48
2a04:9a00:1484::/48
2a04:9a00:1488::/48
2a04:9a00:148c::/48
2a07:3502:1191::/48
Signature Algorithm: sha256WithRSAEncryption
34:7b:e1:74:ba:65:8a:f4:0f:8c:6d:be:5a:bd:76:c7:15:bd:
8e:96:fa:b7:01:bc:ac:b7:fe:ce:f7:0e:5b:89:28:00:f4:f7:
e7:1a:18:6d:c7:b9:2c:fe:a4:7b:e7:bd:26:73:62:99:3c:3c:
e1:ea:b4:ad:e6:7a:93:f5:45:44:0d:9e:07:15:c2:bc:e8:2d:
d4:5b:4e:a1:79:be:92:09:a6:72:46:a9:a8:0c:be:68:b0:25:
dc:81:30:7e:d6:25:6f:1e:1d:63:f5:10:82:2c:61:02:f8:e5:
79:4d:a2:94:12:4c:be:d0:3a:2d:9d:84:9e:80:88:33:89:54:
c7:a0:e0:cf:b3:ca:c3:20:49:ca:90:84:a5:bf:b8:a7:40:62:
cb:7b:29:58:ed:5b:5d:e1:d6:c3:79:13:a7:a6:3b:26:b1:36:
57:a6:52:c2:18:85:35:d2:6f:c1:e5:d9:33:2d:3b:23:ed:68:
3a:24:fb:00:60:20:cd:cc:08:11:63:67:55:0e:96:76:ab:7a:
dc:c3:6f:cc:9a:f3:a7:58:ac:23:3c:9c:b4:b6:29:b6:4b:0e:
63:48:7a:34:c3:ed:b2:cc:e3:82:54:e6:ca:6c:30:fa:9d:20:
0a:71:eb:d5:ab:23:01:ef:da:29:b5:1a:0f:58:27:9e:4d:7f:
c2:f4:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:27 2025 by rpki-client