Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/v5vd3x3XjeefXJEwufhUGGb4X2s.roa
File: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (raw, json)
Hash identifier: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=
Subject key identifier: BF:9B:DD:DF:1D:D7:8D:E7:9F:5C:91:30:B9:F8:54:18:66:F8:5F:6B
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01942369E60AF247744FA6E2C57DB4C31C53
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/v5vd3x3XjeefXJEwufhUGGb4X2s.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209309
IP address blocks: 2a0d:9840::/32 maxlen: 32
2a0d:9841::/32 maxlen: 32
2a0d:9842::/32 maxlen: 32
2a0d:9843::/32 maxlen: 32
2a0d:9844::/32 maxlen: 32
2a0d:9845::/32 maxlen: 32
2a0d:9846::/32 maxlen: 32
2a0d:9847::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e6:0a:f2:47:74:4f:a6:e2:c5:7d:b4:c3:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf9bdddf1dd78de79f5c9130b9f8541866f85f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:17:e9:a7:aa:ff:b1:2f:13:bf:42:6a:a2:
99:0a:44:40:68:31:82:6a:0a:9c:d2:51:58:f5:61:
0e:8a:30:7c:66:f9:2b:ab:5e:a4:8b:87:57:4f:8e:
b2:32:fd:87:70:95:79:ee:bf:5c:75:02:24:37:f7:
33:a2:f3:f1:bc:64:6f:91:27:05:c4:c7:24:ea:ca:
8b:59:6b:fd:2e:6f:74:ff:ad:c5:07:31:04:60:49:
d1:d2:6d:9b:4e:d1:cb:d6:63:49:3a:67:24:60:10:
bb:f3:57:9f:e1:53:99:ec:44:a0:b4:f0:47:bc:17:
ab:90:55:e1:40:8a:82:7b:99:e4:22:d3:27:0b:f7:
89:f7:13:b7:1f:e6:df:65:96:c6:27:92:59:ee:86:
60:b4:dd:b5:a4:18:c7:75:7b:79:1a:33:4e:c8:fd:
d1:e5:32:ef:a4:5a:84:50:80:69:2c:98:82:b0:fb:
18:7d:28:44:f5:e4:08:8d:18:6b:f8:2f:d0:19:c7:
7b:70:5d:38:dd:7b:2a:9f:13:24:c9:50:e9:7f:86:
a4:fa:99:1e:3f:45:9d:d9:11:15:ea:89:26:22:90:
30:0d:a6:25:fa:09:b0:7a:71:b9:03:1c:07:5d:f7:
7d:74:95:f1:18:2c:75:a4:33:d3:ef:1e:18:00:b0:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:DD:DF:1D:D7:8D:E7:9F:5C:91:30:B9:F8:54:18:66:F8:5F:6B
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/v5vd3x3XjeefXJEwufhUGGb4X2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9840::/29
Signature Algorithm: sha256WithRSAEncryption
6a:6f:d3:ad:32:25:d2:e2:f4:a1:d4:46:bb:69:19:be:1b:a3:
35:25:8d:87:3f:33:f5:35:b1:55:87:3e:3a:08:b4:c5:08:22:
a5:38:81:37:78:cd:af:92:ef:19:e6:08:cf:c7:35:76:e6:cc:
e6:1f:65:ba:e4:61:d1:b1:60:99:70:a8:f3:ca:00:61:6c:4c:
28:ae:c0:bb:e6:fe:80:91:7b:92:dc:76:6e:01:f3:e4:9b:c0:
71:00:87:58:30:6a:44:bf:b3:7c:e9:be:9c:04:a8:65:c3:6b:
77:61:ad:6f:6a:08:e4:12:91:06:4f:8c:dc:8c:02:25:54:e8:
9a:93:1d:e6:a6:2f:43:f9:2c:16:bb:4c:a4:a8:fa:83:5d:cb:
49:56:6b:9f:ec:e2:b6:d2:09:a4:67:1e:f0:22:53:6e:3a:38:
33:f8:c1:72:61:03:16:af:a6:14:59:68:d0:9a:50:dc:1d:42:
96:c7:12:a7:cb:cd:12:00:af:30:68:81:66:0f:c1:25:e3:45:
48:56:0c:7a:9a:d4:f1:22:a6:95:3f:c5:99:9c:0f:3c:59:0b:
29:83:c2:a1:5b:d8:ac:6f:9b:d6:78:c6:b3:e8:28:d8:4d:6d:
67:ad:c8:3d:be:38:9e:82:fd:85:09:08:49:24:5a:86:5c:3a:
89:2c:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:24 2025 by rpki-client