Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/2g4qe0r9qLJPJt5nB5rxlbm9lGI.roa
File: 2g4qe0r9qLJPJt5nB5rxlbm9lGI.roa (raw, json)
Hash identifier: 3viQLpqCL/6s5wcN2JiWqlhPNZ1aTdBcNpmguMCn7Ak=
Subject key identifier: DA:0E:2A:7B:4A:FD:A8:B2:4F:26:DE:67:07:9A:F1:95:B9:BD:94:62
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 01856E38BC09179525C0ECC56C7CA42F2FE1
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/2g4qe0r9qLJPJt5nB5rxlbm9lGI.roa
Signing time: Sun 01 Jan 2023 16:44:49 +0000
ROA not before: Sun 01 Jan 2023 16:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51105
IP address blocks: 2a01:8ae0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:bc:09:17:95:25:c0:ec:c5:6c:7c:a4:2f:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jan 1 16:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0e2a7b4afda8b24f26de67079af195b9bd9462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:c8:ef:1b:5f:dd:f7:69:c7:f9:72:e4:25:
ab:60:07:b8:71:7f:5c:3b:3e:51:f9:90:e0:37:0a:
31:ea:3a:a7:ee:51:5d:6c:a4:cf:09:7b:63:bb:3a:
fa:c1:d1:e4:79:25:12:a4:98:3d:ac:a0:53:59:fd:
b0:47:2d:d5:e9:77:6b:04:59:6b:0f:55:e6:b0:7d:
c1:30:67:a0:8e:8c:4d:87:00:19:c6:d3:06:0f:63:
46:ab:96:41:5c:85:db:3a:84:c7:48:e2:04:61:d6:
83:19:da:35:36:9f:64:b7:3b:f0:6b:ba:06:12:0b:
57:a1:53:46:33:69:95:0b:56:e0:4d:0e:47:11:51:
ea:52:7e:fa:6a:73:62:d6:ec:2f:46:21:8f:cf:b5:
aa:b9:1f:f2:ec:d4:5b:e1:1e:14:25:e0:50:cf:ad:
4f:40:e0:8d:17:2e:e0:43:09:b6:60:5e:93:4b:56:
33:bb:86:a8:c5:48:ca:f8:1f:80:4d:75:08:6c:f1:
df:55:1b:f7:6a:cf:c7:6e:93:63:1e:32:43:3d:75:
84:7b:7b:1a:77:e1:e6:7e:3d:80:49:04:f0:eb:78:
74:dc:90:b9:f9:db:03:e1:e2:e3:c1:f7:00:37:0c:
40:d0:47:71:73:ad:24:30:91:b3:a2:19:bc:7b:cf:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:2A:7B:4A:FD:A8:B2:4F:26:DE:67:07:9A:F1:95:B9:BD:94:62
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/2g4qe0r9qLJPJt5nB5rxlbm9lGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
e0:9d:7c:4b:21:ea:1e:44:a0:ce:d8:87:e3:d3:1d:0d:93:ac:
8a:79:01:57:81:c7:30:89:52:41:d7:e5:ba:56:7d:b5:e2:43:
71:72:90:32:0e:c7:42:55:f8:53:04:27:72:f5:d4:30:15:6f:
b3:e1:ae:23:10:14:7f:8f:79:50:62:13:d7:59:fa:34:a8:32:
6f:88:d7:72:eb:0e:f4:3a:13:a5:b1:e5:59:d9:9a:5a:62:fb:
7e:bd:5c:70:b5:ff:a5:65:87:5b:b4:98:2a:d7:8f:21:b2:f0:
d4:c8:28:9f:5c:ff:07:49:3d:09:61:ab:ec:60:97:1c:c6:9a:
fd:9c:48:16:e6:d9:34:8d:6c:56:06:01:e4:7d:7d:9d:65:d9:
90:58:11:8d:98:d4:c3:19:b9:c2:3c:5b:61:2c:d9:15:0b:c3:
ef:ab:21:1c:09:26:15:da:ab:41:61:28:dc:91:76:b6:7f:45:
88:aa:e2:32:f5:04:ec:35:71:fc:38:cb:47:04:82:36:19:74:
65:e2:c7:43:86:c4:c5:6b:ae:fa:23:41:c3:8c:4b:69:36:68:
e8:89:05:24:be:64:55:a1:56:3b:88:ea:4d:0d:cc:75:9c:fa:
56:13:f0:9c:e9:66:c0:d2:a7:bd:d0:17:00:9f:46:eb:7f:5f:
90:ee:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:35 2025 by rpki-client