Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/agSJfA3zW_tdhYtohVlsRja4TdQ.roa
File: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (raw, json)
Hash identifier: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=
Subject key identifier: 6A:04:89:7C:0D:F3:5B:FB:5D:85:8B:68:85:59:6C:46:36:B8:4D:D4
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019425FDE7A2A1CAA66124245D26914A7B00
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/agSJfA3zW_tdhYtohVlsRja4TdQ.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209673
IP address blocks: 2a0d:eb04:4::/46 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:a2:a1:ca:a6:61:24:24:5d:26:91:4a:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a04897c0df35bfb5d858b6885596c4636b84dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:2a:09:1e:62:32:bb:cd:9b:69:2c:d0:2a:
6f:44:fb:13:51:21:ed:b1:8f:67:be:81:36:04:1e:
e3:8a:56:d3:a9:62:af:ae:84:bc:24:6d:5f:60:2b:
dd:e8:da:5d:e0:c4:12:7f:bf:a7:20:56:92:17:6b:
e2:30:b3:35:4e:ef:67:10:01:0f:a3:e8:db:30:1d:
b5:a2:03:a6:5b:be:c8:2c:15:74:02:17:22:aa:a6:
99:e5:52:6b:82:11:df:13:1c:6b:33:52:51:39:88:
3d:5b:12:2d:62:9e:6c:c9:90:f7:2c:f0:a6:9d:21:
fe:c2:16:55:71:3c:4a:56:84:ec:8e:d2:f7:30:5b:
3d:f9:03:1a:0b:43:6c:34:70:57:bd:0d:76:55:f8:
e6:41:e2:48:e6:dc:1f:42:7d:aa:16:16:e7:0f:98:
a5:10:4e:30:83:aa:01:41:f5:64:f5:01:55:49:1e:
5a:12:81:d4:c7:aa:b3:6b:d4:9d:57:ce:74:8a:ec:
eb:89:83:3a:4f:01:08:84:7d:d7:9a:b2:98:f6:9c:
f4:e6:fc:4a:f5:ce:31:3f:7d:07:43:af:ed:54:fc:
69:a5:62:f0:fe:ce:c4:8c:23:65:1a:0b:ce:16:11:
d2:f3:14:a1:7a:cf:fc:1e:13:33:66:5b:b7:d0:fb:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:89:7C:0D:F3:5B:FB:5D:85:8B:68:85:59:6C:46:36:B8:4D:D4
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/agSJfA3zW_tdhYtohVlsRja4TdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:eb04:4::/46
Signature Algorithm: sha256WithRSAEncryption
9d:0b:74:c0:b4:5a:b7:be:95:97:89:c5:98:be:f2:6f:1f:68:
5e:43:ff:d2:a5:e4:cc:d9:2b:a0:d1:13:dc:62:a8:74:1d:c6:
f4:7c:95:ef:8b:57:3c:0b:03:25:ed:74:e1:9a:50:2e:51:20:
8b:fd:d5:01:03:6d:e8:3a:ca:cc:a6:b3:94:7f:b0:24:25:c9:
c2:ff:e0:c1:da:dd:37:d8:a7:8c:22:e4:ed:44:e4:27:4a:b2:
00:f0:3c:1c:d9:88:37:2f:c9:7f:5a:88:36:16:5f:c2:11:aa:
c5:30:56:47:af:20:c2:1c:1c:9e:3b:e9:bc:69:42:5a:2a:fc:
34:62:16:12:18:9e:95:d6:75:4f:0d:7c:ad:e6:6c:14:69:7b:
cc:ca:2c:6f:a6:42:83:6b:93:a4:58:20:cb:9a:bb:97:82:31:
d0:d0:d7:b5:78:54:5a:07:1f:1e:0f:1f:6c:9c:d5:54:f6:75:
d3:d7:d4:ae:72:a4:5b:35:91:fd:6c:f8:08:cd:1a:14:c7:e7:
42:38:c7:45:e4:f6:81:56:36:0f:bf:98:af:7c:b5:18:55:66:
c6:b7:d6:68:18:6f:45:71:a7:ad:5b:21:4e:1b:bc:46:e5:3a:
cf:11:6d:24:74:a3:be:7a:68:08:c3:38:d0:01:59:c1:1d:2e:
37:5e:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:51 2025 by rpki-client