Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa
File: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (raw, json)
Hash identifier: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=
Subject key identifier: D6:54:3C:82:1F:65:DE:6D:E4:D2:C3:49:53:63:86:5C:68:BF:B3:53
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194576BD327FB2507DF689CCA854A2DA5C9
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa
Signing time: Sat 11 Jan 2025 22:11:11 +0000
ROA not before: Sat 11 Jan 2025 22:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215472
IP address blocks: 2a0f:b244:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:6b:d3:27:fb:25:07:df:68:9c:ca:85:4a:2d:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 11 22:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6543c821f65de6de4d2c3495363865c68bfb353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:f9:4a:55:49:ab:0a:e5:36:7e:9b:1a:39:
7b:c4:f8:fd:be:4d:cc:ef:ed:02:1a:bb:29:4d:e0:
77:9c:89:60:59:06:97:33:2e:b4:bb:ed:0f:66:d5:
a5:51:0a:c1:5b:60:da:d8:a5:fb:22:93:3f:ac:ef:
9d:d1:15:65:81:82:4c:11:0f:c2:66:95:c4:ae:e8:
86:4b:ba:0f:48:bd:27:d2:14:a2:0e:a9:b2:64:a0:
07:6c:c8:37:bb:6a:94:c8:af:b2:da:44:4a:76:c0:
80:31:9c:f0:eb:c9:2f:3b:ae:26:ac:03:79:3d:88:
f1:3d:64:bf:8f:fa:32:32:25:0e:b5:91:0f:ac:be:
16:fc:d8:72:6c:2d:2f:03:15:17:47:1f:98:a6:69:
ac:3e:e5:87:f2:c1:9e:cd:4c:15:54:97:89:2c:dd:
93:84:1f:21:b1:b2:fe:37:7e:d8:9a:47:6e:7a:5c:
f1:70:28:f1:33:36:32:b6:60:ed:bd:6d:0f:c2:8f:
99:fe:c0:fe:4b:f5:4e:90:47:0e:7a:c1:de:40:42:
19:42:b9:00:d9:a1:3e:14:e0:9a:c6:3c:01:c2:5d:
95:03:66:30:d3:49:e9:a8:23:26:e2:f6:ea:e5:e8:
00:a7:7f:db:69:f8:af:b0:4d:51:54:4f:4f:e9:54:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:3C:82:1F:65:DE:6D:E4:D2:C3:49:53:63:86:5C:68:BF:B3:53
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:101::/48
Signature Algorithm: sha256WithRSAEncryption
3c:53:b5:ea:ad:06:86:84:b5:43:a9:3d:02:95:e6:23:53:06:
15:95:1b:b8:3f:61:74:ea:05:80:44:7f:cc:d5:af:fe:5a:e8:
ba:74:ae:98:8b:24:08:a3:30:d9:58:82:00:7b:d0:0e:5f:bd:
bd:27:cc:cd:be:3d:9f:63:3f:54:80:a3:ac:56:1e:6d:db:a8:
aa:1e:46:7a:94:0f:d1:67:1c:a1:b5:e9:c5:cd:df:a0:4f:9b:
8a:e8:1a:5c:af:df:28:f4:eb:21:71:77:9e:bf:0b:29:a2:50:
9a:da:8f:03:ea:ad:62:02:bb:d6:9e:4f:ff:f9:4f:22:d3:68:
1a:4d:f8:19:15:0f:e0:da:c8:d0:30:d4:a3:5f:84:ce:b6:76:
57:65:22:23:51:22:69:2b:20:d8:bf:d5:e4:a5:23:e4:87:33:
2b:f0:6e:7b:0c:7b:92:34:32:bf:ea:11:df:f3:76:9f:fa:73:
8c:df:69:5d:3e:68:10:c1:a0:2d:31:85:30:e0:66:52:27:5b:
e5:b7:8e:9b:cb:19:af:66:16:41:a7:b5:82:fe:65:bc:4e:24:
6c:56:50:f6:bb:e2:89:03:2a:13:b2:2e:96:42:24:1d:4e:c3:
93:d2:f2:68:c3:c4:71:04:13:50:56:85:8d:6c:fc:a4:cc:57:
e9:84:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:54 2025 by rpki-client