Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RAn-0aZAhXN_H9DvYD6bYNgp32s.roa
File: RAn-0aZAhXN_H9DvYD6bYNgp32s.roa (raw, json)
Hash identifier: ieir54EQY2hQHdftSkxb+5GR7REd+9+NA0K3WqSPUQ0=
Subject key identifier: 44:09:FE:D1:A6:40:85:73:7F:1F:D0:EF:60:3E:9B:60:D8:29:DF:6B
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0195CE473C1C49E66A7F7FFCB04A659A9AC6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RAn-0aZAhXN_H9DvYD6bYNgp32s.roa
Signing time: Tue 25 Mar 2025 17:08:49 +0000
ROA not before: Tue 25 Mar 2025 17:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215108
IP address blocks: 2a0f:b241:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:47:3c:1c:49:e6:6a:7f:7f:fc:b0:4a:65:9a:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Mar 25 17:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4409fed1a64085737f1fd0ef603e9b60d829df6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:33:8d:58:63:a7:6e:d2:d2:fd:e1:d4:43:
a0:33:f9:c2:e3:4d:97:c9:a1:21:32:9e:a8:d4:54:
e9:33:f5:79:30:19:3c:c3:15:a5:cb:a2:cc:5c:6b:
f3:34:3a:da:53:5d:6e:85:5a:2c:8d:75:70:8d:77:
d3:69:7c:d6:c9:c8:00:85:66:90:89:ef:3e:61:00:
42:a6:6d:c5:fc:1a:51:90:b7:c3:78:41:65:d4:1d:
03:81:90:d4:0e:a5:95:c5:da:ff:64:4b:0a:b8:26:
45:6b:55:b7:c6:3b:b2:45:4f:2c:52:8d:70:af:1b:
a4:ee:ca:11:c4:46:9e:be:b7:f6:82:52:88:c6:07:
eb:fa:c6:25:08:b0:0b:f7:62:46:28:96:49:a7:73:
69:18:ac:46:a4:26:ae:83:72:7f:2b:d5:5d:84:05:
03:a7:c6:8b:de:99:1f:c5:5f:8d:38:e3:b2:1e:5d:
52:ed:ac:80:0f:6d:d4:6a:25:b6:92:b8:63:7d:5c:
de:d8:d6:33:b4:98:fa:ca:5d:5e:31:e8:2e:7e:62:
61:b1:58:7d:89:f3:43:f2:5d:6e:f4:9c:cb:6b:fd:
10:18:f5:15:d1:7c:64:c3:0f:02:87:5b:54:de:e4:
3a:40:91:6b:ee:88:50:0b:9a:fd:e4:2a:bd:28:76:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:FE:D1:A6:40:85:73:7F:1F:D0:EF:60:3E:9B:60:D8:29:DF:6B
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RAn-0aZAhXN_H9DvYD6bYNgp32s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:200::/40
Signature Algorithm: sha256WithRSAEncryption
29:3b:dd:19:fd:cd:d7:fd:e0:43:9d:34:6b:fc:3e:35:fb:63:
5f:3a:71:33:f5:5c:69:ec:b0:3b:be:ab:6f:27:25:71:68:6a:
d3:3d:12:ef:47:12:a5:75:18:c6:7c:64:d7:a1:fd:6a:49:4e:
f4:63:81:54:d3:87:0d:94:7e:25:5e:62:cb:2f:99:9a:c7:3b:
07:87:ee:51:96:f3:10:d3:09:20:0e:23:b8:b1:b8:95:15:88:
5d:4a:67:4c:24:e5:2f:fc:96:56:a1:f3:57:f7:93:ea:44:f3:
ca:b4:c2:ce:84:61:ad:11:e6:63:fd:af:52:74:30:0e:b8:1b:
1a:7a:2e:e1:9f:f3:22:5f:84:b5:ce:a6:a8:4a:c8:73:ed:38:
8c:ad:80:74:7a:5f:51:62:7d:1a:c1:5c:c5:e8:3c:0f:37:02:
81:d8:8e:11:9b:2b:f4:f4:e5:fd:34:ee:d1:8e:43:3d:91:2d:
cd:8e:a8:33:07:e6:69:56:9b:53:92:fe:65:e1:bd:4a:6b:e7:
88:1a:5e:84:ae:36:eb:7c:fb:d1:14:69:bb:9a:80:c8:46:2a:
42:f8:bd:09:7e:bd:1f:ec:a4:70:d2:08:87:1d:de:de:b2:2b:
71:43:92:a8:55:fa:3a:9c:20:fe:4d:63:ad:bb:3d:6c:d0:b0:
40:0f:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:56 2025 by rpki-client