Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iudiefHZx5HUwQKoQYER4YYlDc8.roa
File: iudiefHZx5HUwQKoQYER4YYlDc8.roa (raw, json)
Hash identifier: YWytDM9g9Ys/opbrq54nQL0xNw/mcPS0NgXjBt2p14I=
Subject key identifier: 8A:E7:62:79:F1:D9:C7:91:D4:C1:02:A8:41:81:11:E1:86:25:0D:CF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194B9E5B5E1A85F27F9557AB611EFF7A202
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iudiefHZx5HUwQKoQYER4YYlDc8.roa
Signing time: Fri 31 Jan 2025 01:07:06 +0000
ROA not before: Fri 31 Jan 2025 01:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135103
IP address blocks: 2a0f:b244:150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:e5:b5:e1:a8:5f:27:f9:55:7a:b6:11:ef:f7:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 31 01:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae76279f1d9c791d4c102a8418111e186250dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:13:46:6b:fe:03:48:03:20:76:3c:26:33:
c6:05:23:22:58:90:ba:1f:7e:17:4c:35:f2:20:3a:
8e:e9:20:db:f0:d1:61:4d:e8:e7:3d:4b:99:a6:48:
7c:04:27:78:3d:1c:52:55:d8:c2:5f:85:e3:00:d2:
f7:7e:ab:b3:6e:bd:c9:9c:96:b6:5d:62:61:f9:e9:
5a:79:c0:f4:03:a9:f0:0b:e1:be:8b:33:cc:f0:e9:
3f:83:0a:88:88:08:ad:57:fa:20:a6:4c:fd:5c:a1:
3b:12:06:88:73:c3:58:f0:3a:fe:60:c9:a8:39:e4:
6f:b1:34:01:eb:5a:6e:27:51:43:10:1b:6b:fe:75:
73:3f:30:6a:6e:0f:d4:5c:21:c2:65:cc:8c:f0:d8:
5b:68:da:6f:80:3a:13:e2:1f:de:53:7f:2a:ec:6c:
6b:aa:18:b3:16:92:33:36:c2:1a:e0:e0:f5:78:4f:
66:35:74:f1:a6:b2:b4:7b:72:80:78:c0:65:f2:38:
f1:6f:75:bc:1a:52:4a:0a:7d:e6:f0:2c:0b:ff:e6:
ec:43:09:27:d5:b7:48:9e:21:0c:9a:b3:f0:4b:62:
df:6d:53:f5:61:92:45:b5:29:ba:d3:3e:d0:ee:aa:
4c:54:c4:7d:06:a0:6f:7f:c1:a4:19:9a:68:8e:7a:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:62:79:F1:D9:C7:91:D4:C1:02:A8:41:81:11:E1:86:25:0D:CF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iudiefHZx5HUwQKoQYER4YYlDc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:150::/44
Signature Algorithm: sha256WithRSAEncryption
88:92:bb:26:48:09:fe:39:39:2e:5e:53:f6:ff:bc:39:4d:4e:
de:fd:7c:87:8d:9e:c0:d5:26:5d:cd:93:3e:e3:f6:ce:77:bb:
50:5d:36:f0:cb:cf:6c:69:a5:a1:75:df:b2:d4:0c:5c:1d:84:
80:df:fb:bc:93:18:15:d4:fe:08:be:44:44:60:7d:1d:f9:a6:
57:95:39:b3:dd:74:8d:5b:b6:38:27:3c:13:30:78:79:47:d7:
b6:f3:a2:48:0c:b3:31:0f:e8:e6:32:07:1d:71:b2:fd:b6:cd:
77:e7:86:83:b1:5f:4e:5c:66:99:89:d8:6e:0f:6d:fb:46:a3:
97:7a:7b:6c:bd:bd:83:30:f1:98:c0:20:f5:3f:f4:2f:b0:9e:
90:8f:b8:7e:79:bb:fe:21:66:0d:6f:53:97:a9:00:09:2b:11:
1f:fd:e3:2f:32:1c:8b:af:e9:f7:77:41:b7:b9:c3:52:98:1b:
49:b3:ed:2d:45:7b:32:69:cc:e4:f3:48:bd:2a:bc:05:5a:b3:
14:ed:2d:12:db:18:2d:73:e2:ee:c0:bd:cd:d4:5e:c6:72:68:
fb:ac:70:d2:44:eb:0a:32:e0:81:3a:fb:21:98:49:48:d3:14:
db:59:6e:de:1b:86:e1:75:75:6d:89:23:6d:6b:d2:9a:fb:fe:
91:8b:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:30:30 2025 by rpki-client