Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa
File: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (raw, json)
Hash identifier: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=
Subject key identifier: ED:29:9E:2C:53:CE:8A:8E:3F:2B:2F:1C:40:8E:CC:0B:48:88:75:70
Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial: 01942747690FC6A49414E32E4148833F1505
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa
Signing time: Thu 02 Jan 2025 13:49:38 +0000
ROA not before: Thu 02 Jan 2025 13:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208084
IP address blocks: 2a0e:3bc0:3::/48 maxlen: 48
2a0e:3bc0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:69:0f:c6:a4:94:14:e3:2e:41:48:83:3f:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
Validity
Not Before: Jan 2 13:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed299e2c53ce8a8e3f2b2f1c408ecc0b48887570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:17:27:55:dd:69:d0:80:ee:29:5c:b8:af:
cf:56:5f:7d:fa:83:37:24:74:36:e3:b2:84:de:ee:
96:8c:11:68:49:86:de:42:04:7d:70:34:d1:4d:2b:
e4:4a:58:0b:73:6f:72:27:74:75:ff:eb:9a:80:7c:
86:2f:bc:49:46:33:05:0b:77:ef:bf:ed:b6:e1:2a:
ba:08:44:aa:d5:2c:9e:32:68:9d:ea:6f:63:ea:14:
03:c5:95:01:d1:cf:eb:01:5b:2c:f2:dc:c7:c0:a7:
b2:a6:f6:ae:34:bb:28:8e:f8:63:d6:ff:03:29:33:
e1:ab:13:58:d6:b7:f3:50:ca:be:d1:b3:b7:8f:b4:
9a:11:56:c4:a3:80:23:77:e3:ac:a6:21:c7:83:7f:
5b:cd:84:16:99:d5:9b:ec:e2:8a:e3:31:d0:a5:7d:
2c:0e:b7:d2:21:91:6b:3f:c0:80:0f:ea:46:89:7c:
bf:8f:e2:df:3a:76:cd:74:40:41:a2:fe:79:24:54:
ee:a3:92:50:e7:b9:40:8d:99:e2:ef:4d:81:5f:40:
2b:88:33:6a:ee:47:d4:4f:6b:b9:bb:c0:7a:49:ad:
0a:bd:95:46:bb:12:6b:d6:b0:88:88:86:5a:c3:2a:
4c:45:a4:4e:cc:62:92:3e:2c:34:69:27:94:99:ac:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:9E:2C:53:CE:8A:8E:3F:2B:2F:1C:40:8E:CC:0B:48:88:75:70
X509v3 Authority Key Identifier:
keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0:3::-2a0e:3bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:b4:be:f5:bb:63:1c:dd:bd:2f:e1:7c:ed:e1:08:28:40:73:
ec:77:a2:9a:77:6d:57:f8:45:b6:ae:bf:e5:fc:07:19:72:3f:
29:1c:c2:78:a6:4c:fb:c1:ef:09:2a:10:06:50:41:35:71:bf:
df:65:23:a3:7d:4f:9f:0c:bc:dc:39:77:fc:c9:bf:3c:67:5b:
37:a4:a4:ea:37:46:23:e8:d8:d9:ba:41:66:8c:89:df:a6:20:
1a:4b:92:5a:ef:a0:54:5d:0a:57:2d:02:e7:81:fa:1d:4c:56:
25:35:13:6a:ab:b2:ff:40:ea:3e:80:bb:cf:64:09:80:05:49:
99:28:dc:98:60:e5:13:3b:4f:10:7b:7f:bf:d3:a5:99:da:4a:
58:8b:a7:16:22:5d:1f:e1:7f:68:b4:c8:90:b2:d7:2f:24:79:
da:b7:96:d3:3e:98:da:f4:af:6c:7f:26:86:ed:f4:27:c8:53:
5a:c2:13:58:00:53:86:b9:3b:d0:ad:11:90:5d:75:93:7e:ec:
09:83:cb:28:63:af:de:f9:ac:3d:15:b9:95:c0:b1:0b:a1:0c:
d8:9e:f6:cf:42:4b:9d:b3:41:60:df:c1:0c:c7:05:ae:ae:f0:
a6:60:9f:7b:31:70:57:b4:28:bd:ec:d1:8b:13:e7:f5:8c:40:
ea:60:85:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:39:00 2025 by rpki-client