Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9uOSoaN-AIDqQip6_r-lmwauqh4.roa
File: 9uOSoaN-AIDqQip6_r-lmwauqh4.roa (raw, json)
Hash identifier: VlNRGkkRzBiKEZjMGqCsMU9Atb5LcgC70CZ3MzGpg9M=
Subject key identifier: F6:E3:92:A1:A3:7E:00:80:EA:42:2A:7A:FE:BF:A5:9B:06:AE:AA:1E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E8E83D0C30992260430684415CDB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9uOSoaN-AIDqQip6_r-lmwauqh4.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197433
IP address blocks: 2a0f:7803:ff10::/48 maxlen: 48
2a0f:7803:ff11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e8:e8:3d:0c:30:99:22:60:43:06:84:41:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6e392a1a37e0080ea422a7afebfa59b06aeaa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:90:29:4a:50:bd:0b:cb:e1:53:4f:91:87:
c2:51:25:4b:54:ba:d7:0c:0d:bf:c7:51:77:41:ca:
76:c3:64:7e:a0:f5:13:51:13:81:6e:f0:ce:1a:71:
99:e1:a6:79:fe:46:2c:04:b9:e7:a5:fe:53:55:50:
69:5c:b0:ad:49:a1:94:5b:7e:df:91:31:32:bf:74:
a8:80:e5:68:64:bc:4d:3a:1b:e0:87:88:02:78:5b:
15:88:9c:03:bb:c3:83:64:52:e9:0e:2d:f5:2c:ba:
09:39:ad:f7:e3:95:79:5f:54:8e:38:f6:25:11:aa:
65:cc:53:56:1d:c2:f0:7a:fa:08:18:0d:6f:82:19:
44:83:01:c7:e3:11:ef:5d:6f:9f:b5:31:46:ab:64:
80:c7:21:39:9d:70:24:f8:9d:f1:c4:e5:3a:db:c2:
05:7a:b4:da:28:70:6a:b2:73:4f:b0:ba:b1:b0:f5:
bc:09:fb:a9:d7:38:89:9f:fa:e8:0d:7f:af:22:dd:
38:20:fa:cb:9c:db:ca:2a:9f:1a:44:cc:e5:2f:3f:
ac:04:a0:d8:55:2a:c4:44:8a:ec:cb:df:9d:a1:1e:
36:2d:b1:d8:3d:02:17:8b:63:24:85:ea:69:6f:b1:
8e:bb:99:c0:73:ac:d1:9b:63:4b:93:05:c5:25:71:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E3:92:A1:A3:7E:00:80:EA:42:2A:7A:FE:BF:A5:9B:06:AE:AA:1E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/9uOSoaN-AIDqQip6_r-lmwauqh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff10::/47
Signature Algorithm: sha256WithRSAEncryption
5f:52:6b:87:57:d7:ad:d4:6b:08:04:07:1a:f7:d2:96:7a:a2:
c7:5e:c4:9f:89:1e:e1:d7:7b:bd:21:4b:36:fb:f1:85:17:62:
28:ae:e6:3c:e4:b6:b3:da:6c:85:01:df:b6:86:81:2f:44:48:
e5:41:c0:a8:10:24:cc:ff:26:d8:a8:45:fb:76:d5:b1:0d:ac:
bd:9f:f8:80:26:0f:7f:75:c9:f1:e7:c9:47:f4:3a:29:d2:1a:
89:41:32:29:be:a0:3a:76:de:90:f3:2b:93:da:49:94:2b:6a:
ad:7f:5e:a1:5f:8b:6d:39:6a:13:1e:57:e9:cc:f4:73:55:8c:
00:2f:15:ab:a9:c1:e7:0f:f1:40:18:f0:38:fb:c7:57:c3:61:
4a:e8:c7:78:47:c3:a8:d4:ce:c9:db:2d:de:7a:32:81:b4:6e:
b1:45:75:ee:30:9b:9e:25:90:38:14:5f:fd:51:29:99:fa:a4:
a8:35:11:da:c2:c0:21:7d:fc:81:de:d9:45:6a:2e:ba:56:0c:
e2:58:a7:05:e8:ed:f4:19:2a:31:29:5e:f1:7e:30:51:85:a5:
c9:ad:88:5c:62:e4:e7:84:69:3e:39:5f:b0:32:a5:dc:f5:a8:
29:26:d2:df:fd:bf:1e:1d:df:6c:12:1b:50:01:5f:69:00:6b:
53:c8:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:43 2025 by rpki-client