Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2dSeDQ4XJO7QFhmjMsOoyMAkTFw.roa
File: 2dSeDQ4XJO7QFhmjMsOoyMAkTFw.roa (raw, json)
Hash identifier: XUIfp1PJefslu4KhassszwClw35nlfkn8KkxqDxVXPA=
Subject key identifier: D9:D4:9E:0D:0E:17:24:EE:D0:16:19:A3:32:C3:A8:C8:C0:24:4C:5C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F9BE5DD431C97ACD9F6C0CF0BEA8
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2dSeDQ4XJO7QFhmjMsOoyMAkTFw.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215543
IP address blocks: 2a0f:7802:e300::/40 maxlen: 48
2a0f:7803:fb30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f9:be:5d:d4:31:c9:7a:cd:9f:6c:0c:f0:be:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d49e0d0e1724eed01619a332c3a8c8c0244c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:2c:1c:9e:b4:e9:aa:bd:ca:91:ee:1a:65:
6e:f4:29:d6:37:77:c9:51:24:70:c6:ee:57:8b:e3:
c6:d8:36:22:0c:87:28:72:cf:bc:2c:bf:c7:74:f3:
3a:32:ef:10:87:d8:11:1d:db:ef:ff:27:80:a5:e5:
44:4d:a4:4d:52:f6:64:a0:79:96:c7:be:35:8a:77:
14:39:89:6a:95:88:1b:a1:8d:b1:46:b1:19:ee:4c:
64:cc:7b:64:1c:71:4a:0b:ba:0f:ce:85:e7:93:de:
5d:0b:15:42:da:8d:e5:39:97:c6:ba:56:0b:4c:41:
84:cf:ae:00:71:04:03:bc:de:6c:c9:7f:2f:30:14:
8d:8f:29:37:e3:ef:6d:a1:36:39:28:67:dc:be:26:
5b:1b:dd:b0:74:ec:77:8b:e6:9b:cd:1c:a9:a2:50:
38:20:5b:fe:cd:0c:fa:56:e7:5a:67:81:98:77:a8:
4e:eb:09:ea:82:74:2b:7c:e1:42:9c:8b:f1:60:ec:
cb:a9:72:80:9f:90:9d:19:9c:d5:e5:ca:38:ca:a7:
dd:07:f5:c4:e6:d9:0c:77:04:7b:4d:78:e8:ca:b8:
84:5f:24:7c:1a:1e:43:01:25:0f:b6:cd:c1:b5:19:
cb:29:14:e6:36:fc:df:dc:53:a1:32:f9:ed:55:c4:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:9E:0D:0E:17:24:EE:D0:16:19:A3:32:C3:A8:C8:C0:24:4C:5C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2dSeDQ4XJO7QFhmjMsOoyMAkTFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e300::/40
2a0f:7803:fb30::/44
Signature Algorithm: sha256WithRSAEncryption
b4:a4:1e:ed:c3:cc:e3:88:2c:6a:98:41:52:bb:f2:28:bc:ae:
ba:8d:05:88:a1:4b:39:0a:b7:93:53:12:0b:ae:08:39:9a:a4:
f0:47:14:46:78:57:1a:9f:b8:e6:81:1b:42:4f:5d:c7:9a:d2:
a7:e4:71:27:53:5d:23:26:ab:84:62:4c:97:09:24:b1:54:a1:
7a:1e:70:02:b3:fd:d0:e6:d4:32:24:2f:40:14:9e:bb:7a:1a:
f9:f4:9e:27:d2:72:96:37:14:c4:83:62:c2:dc:92:fb:4e:3e:
15:bf:5b:75:6e:cc:76:4c:ea:5c:c3:fd:b8:fe:c7:4b:a1:af:
9b:27:ca:23:8a:09:dc:55:a6:a2:08:ed:d5:30:a3:b6:08:20:
9d:34:6d:18:13:db:c2:18:2f:ee:8f:ce:59:d6:e5:af:c0:86:
30:8d:b2:2c:d4:37:5f:05:06:4d:ef:29:74:0b:4f:9a:da:bd:
12:63:96:ba:fc:ad:d2:44:88:63:db:f8:30:2c:f1:b3:ea:49:
63:cb:82:4a:17:b7:7b:6e:8b:17:b2:ad:f0:46:48:c6:27:07:
2b:88:2e:07:d4:42:cb:87:63:a2:24:45:2c:7b:8f:75:81:fc:
f4:de:4f:3a:fa:40:3e:6a:3e:24:b9:27:8b:26:0f:16:70:8c:
9e:1e:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:53 2025 by rpki-client