Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j9RecW4xrfEFQQzkzGpoqp2Mx8k.roa
File: j9RecW4xrfEFQQzkzGpoqp2Mx8k.roa (raw, json)
Hash identifier: 7eO6Uy85pGSIyhjKFUOBPH4wETYTTFdemIa4ZXUNnYg=
Subject key identifier: 8F:D4:5E:71:6E:31:AD:F1:05:41:0C:E4:CC:6A:68:AA:9D:8C:C7:C9
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019015DBF38BF4842486066A8DBFF6AA1BDA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j9RecW4xrfEFQQzkzGpoqp2Mx8k.roa
Signing time: Fri 14 Jun 2024 08:27:34 +0000
ROA not before: Fri 14 Jun 2024 08:27:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 2a0f:eb04::/32 maxlen: 32
2a0f:ed00::/32 maxlen: 32
2a0f:ed01::/32 maxlen: 32
2a0f:ed05::/32 maxlen: 32
2a0f:ed07::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:db:f3:8b:f4:84:24:86:06:6a:8d:bf:f6:aa:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 14 08:27:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fd45e716e31adf105410ce4cc6a68aa9d8cc7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:7e:81:4a:06:bb:8f:2d:34:9f:fd:63:3f:
c7:f7:79:11:71:a1:51:3b:a2:29:db:87:a3:cd:97:
69:41:f0:05:8f:79:35:dd:bc:82:c7:a4:15:5d:83:
1a:bb:72:aa:dd:a3:63:1b:11:07:9b:97:c0:f2:49:
a5:ef:b6:cd:98:f8:69:6f:2a:be:43:bd:8b:2b:02:
1c:97:a9:75:f2:7c:f3:d8:8d:04:ba:4f:63:a9:3d:
5a:3a:6e:15:c0:a2:91:a8:f8:d6:a0:a4:e0:dc:b7:
dc:dd:77:86:75:12:1c:da:e4:6d:55:73:27:40:5e:
e9:42:f1:7f:21:ae:38:77:7a:26:4e:f1:36:8d:69:
49:54:04:35:42:56:a6:21:44:bc:fd:59:1c:c9:36:
e6:1d:ca:e0:34:34:dd:0f:4a:a6:18:6f:17:4a:19:
60:05:d4:c1:fa:eb:10:e7:7f:e3:dd:d4:18:19:1e:
6b:d9:ff:8b:0d:c0:1f:c9:6f:92:c8:e7:7a:1c:c3:
4e:e5:29:b1:87:a2:c3:b2:05:c1:80:27:a1:c4:30:
4d:1a:8c:f2:49:b0:70:9a:c3:ab:d0:70:94:9a:0b:
75:da:64:33:79:c0:ff:af:58:13:22:65:cf:c6:cf:
7f:56:b1:f9:82:e6:19:8e:58:8c:64:a1:34:b3:04:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:5E:71:6E:31:AD:F1:05:41:0C:E4:CC:6A:68:AA:9D:8C:C7:C9
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j9RecW4xrfEFQQzkzGpoqp2Mx8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:eb04::/32
2a0f:ed00::/31
2a0f:ed05::/32
2a0f:ed07::/32
2a13:a442::-2a13:a444:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:27:df:75:a9:6b:0d:0c:5c:f2:96:a1:f4:71:ba:75:02:b3:
83:b2:a1:f5:83:7d:06:11:6f:1d:3c:93:ae:4a:e7:89:84:90:
c0:f1:d2:18:6a:f8:3a:5b:c8:47:a6:6a:d6:4b:21:22:b8:36:
4a:e7:34:00:c9:9b:10:02:a9:9e:a9:43:e1:96:89:b5:ed:f4:
8a:39:e1:1b:69:f7:93:30:eb:6e:50:75:4a:47:59:b1:5a:3b:
db:46:ae:c3:18:68:a7:1f:72:08:7d:f4:a2:33:23:f9:c1:2f:
5a:33:70:f3:b0:5b:b0:2b:ff:c5:c8:1f:f1:ee:fb:b1:54:84:
9e:4b:c4:5b:15:07:cb:3d:bd:a8:18:d0:6a:02:0e:6a:67:50:
d9:01:24:89:0f:de:3c:e0:eb:cb:5c:cf:ce:45:ee:ae:d0:b1:
10:3e:fc:81:e2:6e:7d:a2:ab:82:bd:e5:4f:bc:e9:19:05:aa:
13:73:1b:65:c0:08:f9:20:e2:71:6f:6f:34:b4:7f:6f:1f:78:
82:b2:b7:44:59:13:4e:3b:7c:ad:a2:a2:73:d0:ad:e3:98:16:
9f:9a:b3:2f:69:75:4b:73:14:bf:e0:f6:c6:66:91:c5:2f:e8:
f3:e5:26:05:20:00:9e:f7:d1:ed:52:63:9c:30:e4:44:2f:a9:
ef:cc:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:08 2025 by rpki-client