Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/rrmPFSxVt5xEtowDvlnYGvxrH3s.roa
File: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (raw, json)
Hash identifier: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=
Subject key identifier: AE:B9:8F:15:2C:55:B7:9C:44:B6:8C:03:BE:59:D8:1A:FC:6B:1F:7B
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01941F8C6E836DFE8C9DD30AB8309B8E0125
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/rrmPFSxVt5xEtowDvlnYGvxrH3s.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211299
IP address blocks: 2a0e:e704:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6e:83:6d:fe:8c:9d:d3:0a:b8:30:9b:8e:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb98f152c55b79c44b68c03be59d81afc6b1f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:eb:0b:21:47:4c:83:93:81:f7:35:1e:df:
bc:05:d0:a2:4c:9b:4f:f8:70:99:bd:5a:e9:1d:04:
ef:25:ee:2d:3e:4a:a1:b2:64:b6:87:cd:07:f4:a6:
64:ad:f5:3c:50:de:68:a5:90:60:64:ff:64:30:95:
2d:bb:7a:b6:f6:da:26:36:52:3a:0a:4c:9c:55:78:
19:8c:82:07:83:d5:2f:93:32:7d:00:43:c4:4e:89:
44:c8:81:42:58:65:3f:fe:65:cb:a0:79:23:15:93:
f7:1c:f3:64:47:b6:4b:09:db:20:04:9a:b4:e8:9b:
12:c3:ad:16:80:95:2e:0f:41:48:76:7d:af:fb:5d:
2e:14:3c:6a:f6:72:81:00:0b:eb:23:49:6e:a9:38:
cb:56:06:7c:b3:dc:b8:cd:b2:9c:2b:c2:1b:2d:b6:
4a:a3:14:8e:a7:d6:f9:9e:44:f3:b3:aa:30:6c:23:
f7:2f:24:05:15:4f:cf:61:91:65:3f:06:03:70:0a:
d4:cd:cf:52:8d:7b:0c:26:3e:76:96:a5:9e:30:f9:
6a:7a:18:20:3b:03:1b:55:2d:1b:bf:65:c4:6b:d2:
d4:8c:4a:6e:ad:74:8d:05:88:97:c3:36:72:47:07:
de:91:e0:7a:8d:73:80:56:d6:fe:ca:08:23:f6:dc:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:8F:15:2C:55:B7:9C:44:B6:8C:03:BE:59:D8:1A:FC:6B:1F:7B
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/rrmPFSxVt5xEtowDvlnYGvxrH3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:70::/48
Signature Algorithm: sha256WithRSAEncryption
80:be:b0:53:2b:59:18:a6:d3:50:f0:cd:7d:17:ff:12:56:0e:
96:6b:84:f7:0a:63:7f:08:c3:ac:3d:8c:2f:24:33:2c:3e:8f:
00:b6:4e:32:cf:34:f8:58:77:9e:b8:94:0b:a5:92:9c:9c:7f:
02:cc:58:92:de:03:5a:12:e6:e6:a7:9e:18:d4:68:05:34:d2:
01:d4:35:41:06:4f:08:55:4e:3b:08:a4:41:0f:d6:05:75:8f:
f6:4d:b4:85:82:e6:e4:d5:9a:92:6a:06:c2:99:dd:f8:b2:d8:
36:93:55:40:5b:df:52:9e:ea:e0:c9:2b:73:7e:ac:bf:49:25:
34:46:1e:3b:6b:42:e6:1d:b4:5d:81:bb:78:00:5d:d0:08:1d:
3d:3e:61:cc:a2:fc:db:51:5e:fe:3d:05:30:b8:12:17:02:ae:
a7:51:f8:b5:0e:2f:8f:13:b4:14:49:ec:8b:d9:a6:bf:22:67:
6a:0a:ac:4a:4d:15:c9:9b:78:6d:4f:2b:40:f6:a9:9a:33:b6:
b9:f1:46:93:2e:49:8d:b1:50:2d:86:00:9c:c7:cb:7a:e3:92:
88:92:98:ad:89:64:2a:87:5b:16:df:af:0d:05:5e:fb:62:e5:
bd:ea:95:9b:e9:d4:ac:70:40:24:26:99:3b:47:91:5b:ac:7a:
55:a5:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:20 2025 by rpki-client