Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/ijlmq02aaoB7j8gZhXvYm8FPPVg.roa
File: ijlmq02aaoB7j8gZhXvYm8FPPVg.roa (raw, json)
Hash identifier: /s7Z3bc4WTjGm/Dn6uRbKk4UoLtU5WzyIOA+T3EWXWw=
Subject key identifier: 8A:39:66:AB:4D:9A:6A:80:7B:8F:C8:19:85:7B:D8:9B:C1:4F:3D:58
Certificate issuer: /CN=940e2a716e5d89895dfea2ef2903081dede99c68
Certificate serial: 019422FB1D310D10EBD080912362F6689FEC
Authority key identifier: 94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/ijlmq02aaoB7j8gZhXvYm8FPPVg.roa
Signing time: Wed 01 Jan 2025 17:47:49 +0000
ROA not before: Wed 01 Jan 2025 17:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31317
IP address blocks: 2001:678:970::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1d:31:0d:10:eb:d0:80:91:23:62:f6:68:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940e2a716e5d89895dfea2ef2903081dede99c68
Validity
Not Before: Jan 1 17:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3966ab4d9a6a807b8fc819857bd89bc14f3d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:96:b9:4d:66:3f:1a:28:63:9f:e3:a6:1d:
d7:bc:b3:9f:5d:92:b7:cf:5c:f2:5a:b5:cc:be:87:
c8:42:65:07:37:1f:ad:68:43:cd:02:47:81:fc:23:
56:c1:96:a0:f3:03:c6:5b:a9:1a:55:51:f3:78:25:
a6:39:91:3d:5c:e2:85:92:a8:f8:b0:90:48:ea:90:
cd:2a:f6:31:30:0d:52:d2:73:00:a2:ee:2a:c5:1f:
8d:38:d3:fb:f8:16:c5:00:f7:e9:4d:28:cf:7b:ad:
05:6d:1f:c8:bf:01:b0:97:b6:7f:cb:4c:ad:86:2b:
f8:b9:63:a9:01:fc:4b:51:5e:88:57:16:87:b4:27:
3b:e8:75:52:6d:7b:1c:30:fe:44:72:98:0d:3c:91:
aa:8e:28:1d:3d:e5:26:a1:66:89:11:15:75:24:6e:
98:0b:0d:c4:99:e7:96:82:7a:b6:97:09:84:f8:3d:
b8:52:52:66:2e:ca:03:14:7f:8c:34:4b:9b:2d:f2:
ac:23:47:80:f5:02:7f:ad:46:91:fd:08:5d:5b:36:
65:8a:62:6c:c2:97:67:9f:18:38:db:74:41:3f:34:
11:22:42:b1:c3:32:ce:de:9b:9e:91:f6:41:01:5c:
ac:f8:da:fe:ca:af:1e:bf:19:2a:69:76:b5:3c:df:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:66:AB:4D:9A:6A:80:7B:8F:C8:19:85:7B:D8:9B:C1:4F:3D:58
X509v3 Authority Key Identifier:
keyid:94:0E:2A:71:6E:5D:89:89:5D:FE:A2:EF:29:03:08:1D:ED:E9:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA4qcW5diYld_qLvKQMIHe3pnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/ijlmq02aaoB7j8gZhXvYm8FPPVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/851d66-b956-4bce-8bd6-5451441ea633/1/lA4qcW5diYld_qLvKQMIHe3pnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:970::/48
Signature Algorithm: sha256WithRSAEncryption
64:e2:f0:88:6a:bb:3e:c1:9d:2f:3c:2c:5b:20:1d:57:eb:c3:
aa:28:bb:e7:b5:ab:d4:99:39:e2:52:31:39:96:4e:d4:b1:f6:
2f:94:17:8a:e1:d3:d8:c9:76:a6:f9:9f:8a:12:60:4c:80:51:
19:db:f5:db:e5:b3:50:27:0b:ec:17:5b:48:9d:64:66:24:9a:
1f:8e:2a:61:76:c2:59:84:2c:c5:d1:42:b4:af:ab:31:d0:00:
fc:cc:c9:d2:8f:3b:b3:1d:4e:36:28:2c:aa:4b:1f:6e:2a:1f:
d1:cf:e9:08:84:b5:80:19:a1:7b:f5:ba:45:4c:41:3f:c9:e5:
0d:03:ff:b9:73:9b:50:47:10:bd:3c:d1:e7:6b:5b:3c:e3:29:
d9:3c:25:8a:a5:d6:68:1a:78:d8:32:63:24:05:96:f3:20:85:
03:d1:62:e3:fb:46:9f:23:72:eb:c2:10:9b:da:06:14:b0:99:
9d:69:13:b7:cd:e7:01:3e:9f:26:15:98:59:b0:c5:1d:e1:c0:
a5:d3:27:af:09:1d:d9:67:5f:b2:17:b0:c2:15:91:d9:68:a5:
3b:93:c1:c2:7d:02:03:58:ab:23:ea:eb:a4:cd:99:b1:36:df:
00:f8:bf:6c:d7:15:b0:0d:d2:44:3d:2b:54:17:f2:9f:d6:4a:
6a:de:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:13:58 2025 by rpki-client