Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/cJPUTKGhm9-SQMKgHrLgVtONres.roa
File: cJPUTKGhm9-SQMKgHrLgVtONres.roa (raw, json)
Hash identifier: YPKASk/Rrx47xThFCgmIxwpwkFMGL6Ambuvld828dUQ=
Subject key identifier: 70:93:D4:4C:A1:A1:9B:DF:92:40:C2:A0:1E:B2:E0:56:D3:8D:AD:EB
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 0194214440F8101F3B7936C6EED23352734F
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/cJPUTKGhm9-SQMKgHrLgVtONres.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6900
IP address blocks: 2a02:9f8:9000::/44 maxlen: 44
2a02:9f8:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:f8:10:1f:3b:79:36:c6:ee:d2:33:52:73:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7093d44ca1a19bdf9240c2a01eb2e056d38dadeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:df:7f:a3:c7:a6:af:3b:8a:93:f9:bb:aa:
05:fc:e6:9e:2d:65:f2:1e:b6:16:12:16:88:ef:5f:
43:1b:ca:b2:e7:21:ba:3a:b6:d5:32:86:8d:3d:24:
a8:34:23:4b:7f:64:01:fa:c0:f5:59:33:92:aa:51:
be:be:5b:8c:0c:de:ec:c3:02:08:69:9e:d8:05:34:
fc:0f:96:b5:e1:45:85:05:cf:2d:29:bc:ea:29:f5:
ac:49:4b:3c:c2:8f:d1:2e:64:ef:b2:07:1b:6c:22:
bd:d8:aa:eb:e3:67:7a:4c:27:93:4d:4d:fc:85:1e:
d0:af:a7:5b:50:82:ab:bf:5f:52:4e:66:91:a5:3a:
aa:74:e6:26:ac:7b:ec:1d:b7:94:6d:15:e8:48:11:
47:b7:f3:e6:fe:d8:b1:fa:8e:cc:ec:f7:fb:8b:04:
b4:ca:a4:a6:ed:7b:49:12:70:dc:52:cc:e6:87:f4:
4a:cd:f9:32:50:9b:88:8b:c2:49:c6:4f:55:e5:93:
80:e0:d1:a5:a5:80:4e:6d:0d:72:47:70:9b:f5:1a:
0c:66:00:6a:87:37:16:97:c8:e3:7a:42:5b:ad:fb:
87:d5:2e:51:53:5e:83:2e:cc:96:5c:81:93:97:63:
4f:12:99:22:f4:13:4a:13:e7:46:76:aa:9d:f0:4e:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:D4:4C:A1:A1:9B:DF:92:40:C2:A0:1E:B2:E0:56:D3:8D:AD:EB
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/cJPUTKGhm9-SQMKgHrLgVtONres.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9f8:9000::/44
Signature Algorithm: sha256WithRSAEncryption
4d:92:6d:a0:a1:e1:ea:82:77:dd:74:21:b2:57:3f:fc:72:1b:
0b:35:7c:c7:d7:5a:d7:5f:9b:0a:44:76:a9:64:33:f6:b7:46:
76:3b:b4:90:e3:2d:9d:66:d2:73:37:1e:ca:23:16:f9:c9:84:
fe:e5:c0:77:90:63:32:f9:15:e4:39:9f:10:82:cd:b5:46:04:
0f:77:50:e1:99:d8:4a:b8:05:75:c2:3f:61:fc:e5:f7:17:70:
2d:1f:95:fd:7c:56:c4:05:f7:d4:ad:80:02:db:77:b5:7d:80:
27:d8:e1:dd:d1:d1:02:58:38:4a:d3:b2:4d:d6:db:a9:d8:3b:
99:20:62:3f:40:25:ba:6d:64:e3:0c:c9:9f:a2:5d:d5:ad:50:
68:73:98:df:2e:07:d5:cc:1e:98:d5:4d:ba:77:86:40:0d:ed:
83:ac:4d:11:f9:ba:28:13:0d:82:0e:58:ae:a6:01:97:05:36:
42:b7:4d:61:e8:bd:ff:75:66:69:90:dd:d2:0e:79:e7:cd:b4:
fd:33:99:a3:c5:09:be:6c:3c:c3:3d:cb:04:6a:00:f2:95:bf:
97:8a:ee:f0:6d:4b:3f:ed:9c:dd:92:fd:df:ed:6f:b5:bf:eb:
79:d7:e3:d8:c0:ca:4d:0d:23:3a:f0:99:e5:74:47:46:8e:ab:
88:6f:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:28 2025 by rpki-client