Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3ZvcNXAtG_nH9he_xrjiBXOd0c.roa
File: p3ZvcNXAtG_nH9he_xrjiBXOd0c.roa (raw, json)
Hash identifier: BBdKB2IX5I8ylOSh3YtDzm9AOJW2KDhxleNZZNLAJnY=
Subject key identifier: A7:76:6F:70:D5:C0:B4:6F:E7:1F:D8:5E:FF:1A:E3:88:15:CE:77:47
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369EB99B3C42F9286548965DCA221DA
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3ZvcNXAtG_nH9he_xrjiBXOd0c.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199613
IP address blocks: 2a0f:7802:1000::/36 maxlen: 48
2a0f:7803:ff70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:eb:99:b3:c4:2f:92:86:54:89:65:dc:a2:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7766f70d5c0b46fe71fd85eff1ae38815ce7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:32:b6:82:3f:0b:5b:6e:74:21:19:4d:56:
de:42:29:b0:6e:97:72:b9:23:79:ef:d9:a2:fd:a6:
dd:45:50:a2:f1:60:a8:9e:7e:0a:e0:26:1e:5e:8a:
ba:e5:c7:1f:fc:76:65:37:0c:54:22:82:3e:37:8e:
19:63:2c:50:df:77:4f:45:72:ce:8e:e7:8a:9f:29:
37:d3:b1:e9:b1:74:8e:95:c9:28:ab:f0:2e:57:a5:
7e:a6:2e:87:c7:37:65:98:e0:5f:65:2c:11:f4:fa:
2b:19:bf:c0:f3:d7:92:c3:a3:bc:9a:39:b5:79:61:
a5:6f:9e:c2:a3:36:b8:8b:49:a0:39:84:1e:8c:f6:
af:13:82:a6:20:47:36:c9:cf:8a:07:fc:2d:0c:5a:
1f:44:ee:c1:b2:e1:4b:eb:2b:7e:7e:e7:cf:de:a4:
cc:55:05:88:a7:f9:28:c8:b1:23:0b:0c:a1:a0:22:
17:c1:6e:3b:d3:e9:4f:02:e4:a0:e9:5a:36:f4:fb:
3f:d8:50:0c:e2:47:11:a9:d0:a6:bb:7c:32:4e:24:
fb:b4:e1:79:3a:0b:78:be:74:dd:cf:42:4a:50:0b:
38:85:6d:d4:5e:e3:9a:c5:c9:65:7e:1e:0c:80:b4:
8c:47:91:36:b9:98:e2:b6:b3:cb:28:56:9d:d8:25:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:6F:70:D5:C0:B4:6F:E7:1F:D8:5E:FF:1A:E3:88:15:CE:77:47
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3ZvcNXAtG_nH9he_xrjiBXOd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:1000::/36
2a0f:7803:ff70::/44
Signature Algorithm: sha256WithRSAEncryption
8f:6c:35:44:71:6d:9f:4e:44:37:72:72:55:c2:f2:6f:c8:64:
60:e3:c3:d0:c9:5b:f5:d8:d5:41:16:f9:7d:e3:ec:fb:f1:f3:
2b:a3:4f:74:58:37:ec:05:02:7e:d2:5d:df:06:68:c8:25:0f:
05:87:99:9f:e5:a8:44:57:66:4b:58:84:0b:77:86:57:80:23:
73:a2:b7:20:b4:58:05:72:c1:f4:e3:9a:9c:ef:88:05:b3:1f:
46:44:b6:61:57:1a:9e:84:b7:98:b6:bc:ad:56:c7:43:b3:f1:
0b:59:c4:ac:cd:b0:ad:61:67:49:99:b7:1a:d2:ba:8c:52:b5:
7f:be:0c:ff:d2:ae:b9:e9:65:34:e1:4f:29:d7:8c:4b:bf:f9:
68:6c:ad:05:ae:20:23:c1:5d:21:1f:af:ac:8a:5f:8d:bb:40:
53:33:d9:3a:f6:e8:40:45:81:0a:3d:0f:4f:37:20:22:b8:45:
7c:34:1f:7b:12:5c:b8:1c:f1:16:ec:7f:29:17:89:53:e9:9f:
5e:97:81:1b:2f:a8:fb:2f:d9:14:51:a2:13:2f:2f:66:cf:ac:
44:bf:ad:60:01:8a:a4:26:4b:93:16:5e:06:4d:56:1a:1b:69:
a4:b2:6e:19:1e:f5:6b:46:c6:6b:1b:b1:c3:1b:09:17:ef:c9:
e7:4d:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:50 2025 by rpki-client