Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNyiCmbllI62P4e2fFvrufnXXhw.roa
File: DNyiCmbllI62P4e2fFvrufnXXhw.roa (raw, json)
Hash identifier: I/eD5S5k79O0q4R1YqX+E0ipH1fvYmuFNyj8c1ibSPY=
Subject key identifier: 0C:DC:A2:0A:66:E5:94:8E:B6:3F:87:B6:7C:5B:EB:B9:F9:D7:5E:1C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01947902616D8D3DD6B3ED219B5B17C882F7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNyiCmbllI62P4e2fFvrufnXXhw.roa
Signing time: Sat 18 Jan 2025 10:43:06 +0000
ROA not before: Sat 18 Jan 2025 10:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213733
IP address blocks: 2a0f:b244:300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:02:61:6d:8d:3d:d6:b3:ed:21:9b:5b:17:c8:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 18 10:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cdca20a66e5948eb63f87b67c5bebb9f9d75e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:2f:c3:8f:e5:12:a3:33:dd:2c:7d:84:16:
bd:ba:6e:df:f3:5a:65:54:c4:cc:b7:fe:a7:30:39:
d7:ae:67:06:42:f1:63:e9:38:c7:89:59:0b:e2:a4:
6d:63:91:31:66:ba:16:0c:ea:2a:01:03:c3:b8:48:
f5:8d:25:92:f4:1b:ea:67:57:ed:d1:84:9e:52:e9:
64:2a:1d:69:2e:c4:88:b5:1a:82:f8:04:75:16:bf:
99:70:5c:c0:25:91:58:76:1f:2c:5a:fe:50:a6:f2:
40:9b:42:df:72:01:c4:59:5b:3e:d0:90:71:57:a0:
ed:85:51:cf:ce:f4:48:be:4e:eb:d7:50:62:7b:aa:
17:06:37:b1:ca:12:97:bd:8d:0d:ff:fe:68:ca:b8:
fd:4a:1d:3a:25:d7:e3:b3:43:e1:fd:f0:b6:ab:35:
f8:34:6f:87:dc:c8:39:d3:ef:6c:69:17:0c:45:97:
6c:3f:23:54:ff:ea:fb:40:c4:ae:d2:70:b0:20:b3:
97:70:c7:56:28:90:29:bd:2a:37:e5:56:63:f9:52:
60:2b:04:5d:56:58:ef:b7:53:05:ae:36:8b:26:ba:
70:63:f8:78:6d:fc:be:40:39:66:5e:75:9a:9c:2a:
dc:80:fb:9d:08:02:2d:f4:94:a2:7b:8b:7a:cf:f1:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DC:A2:0A:66:E5:94:8E:B6:3F:87:B6:7C:5B:EB:B9:F9:D7:5E:1C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/DNyiCmbllI62P4e2fFvrufnXXhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:300::/40
Signature Algorithm: sha256WithRSAEncryption
5a:a4:88:e3:b8:89:d8:fa:e4:84:4e:9d:2a:55:af:b5:b1:1f:
a3:9e:51:ac:93:dc:69:80:a1:b6:c2:39:3a:b1:62:34:97:7b:
2b:db:16:92:54:0d:3c:25:8b:e6:12:31:a8:4c:ce:df:a0:0b:
75:90:16:a3:4f:31:a0:1d:59:f5:3f:60:98:36:27:16:f7:4e:
7e:3b:ae:51:71:c6:9d:1c:7c:dd:2c:2e:00:3b:65:4d:34:ab:
31:5d:e4:38:a9:3a:2e:28:3d:a8:62:65:4a:0f:ac:38:8b:9e:
7f:89:11:bc:d4:b9:13:41:be:37:8b:45:4f:a9:14:01:cf:9d:
99:a6:62:e5:6b:fb:13:73:9b:99:30:17:c4:e5:ec:6d:2a:68:
35:16:00:4f:94:38:8e:81:0c:5e:42:19:06:08:8e:10:a8:89:
d7:64:d8:49:31:e9:66:2e:b7:fc:11:11:da:ef:c5:56:77:ed:
9c:29:6c:f8:b0:0c:05:6e:f9:fc:cb:5f:1d:0d:13:db:1e:b2:
3c:bc:e5:b5:10:85:f7:98:5b:b1:8e:ac:97:f5:9c:86:f1:e3:
07:86:fc:a9:9e:5a:f5:60:f2:b3:54:28:4b:03:ed:c8:90:33:
7c:c1:eb:d6:8e:27:07:34:7c:e9:d6:5e:40:bc:f2:58:92:7f:
bd:a0:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:03 2025 by rpki-client