Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa
File: 1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa (raw, json)
Hash identifier: T0sycLT3/UxmIjbYQ+bOKStsPPPIcNFmp6OwoDtRLKQ=
Subject key identifier: D6:77:C1:9A:61:BB:29:B6:D1:F0:39:CA:1F:B9:4F:D4:AB:A1:36:1F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55E47152D9BCCF9FC614320BC9492
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
2a12:5a00::/30 maxlen: 30
2a12:5a04::/30 maxlen: 30
2a12:8100::/30 maxlen: 30
2a12:8104::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5e:47:15:2d:9b:cc:f9:fc:61:43:20:bc:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d677c19a61bb29b6d1f039ca1fb94fd4aba1361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:fc:91:c0:a8:5f:e2:ed:47:a6:37:0a:76:
c4:ff:14:48:be:8a:8c:98:85:e4:2b:3c:9c:54:c4:
0a:c0:58:8f:e3:3a:2f:e7:61:fe:3c:68:8d:a0:69:
51:56:1a:1d:01:c1:32:36:5b:59:92:25:53:4b:a0:
f4:d6:55:60:70:43:a4:a7:8c:72:7c:5f:7b:0a:b8:
95:9b:aa:9b:2f:bf:66:8f:39:d7:f9:34:a6:16:4c:
43:85:dd:8f:2b:35:70:c4:49:33:2d:0b:52:56:18:
69:39:e4:26:21:e7:78:b9:69:08:62:40:22:60:09:
b9:c4:53:2e:02:4e:a5:44:2d:c3:71:38:d1:7a:fd:
c1:51:14:a7:d6:02:94:64:ea:6a:cc:8e:e5:ec:5a:
e3:35:0d:81:de:de:b2:62:d6:df:96:bf:57:04:d3:
a0:65:84:2c:81:f6:bb:72:87:a8:34:9a:9c:8a:e4:
55:8b:46:cb:27:67:c1:75:b8:a4:9a:d1:5e:91:62:
55:27:f1:6e:2a:04:cd:a1:99:45:68:d4:17:25:ff:
5b:48:72:df:86:e9:3d:bc:3e:55:d6:90:7d:72:9e:
3c:0b:e8:bd:96:49:31:49:13:80:c6:23:e4:23:41:
fc:0c:e4:62:94:5f:dc:33:c6:c0:a1:4a:cc:67:de:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:C1:9A:61:BB:29:B6:D1:F0:39:CA:1F:B9:4F:D4:AB:A1:36:1F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1nfBmmG7KbbR8DnKH7lP1KuhNh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
2a12:5a00::/29
2a12:8100::/29
Signature Algorithm: sha256WithRSAEncryption
8d:c5:29:5a:23:f5:a6:f3:92:c2:32:76:4b:ae:41:28:dd:78:
72:ec:d1:a8:b1:c1:d1:b5:d8:94:2c:06:12:be:45:b2:3b:f4:
ec:b6:85:a7:23:9b:7b:42:01:7d:53:5e:7e:92:fb:b6:28:44:
45:05:bb:d3:c7:a0:d3:5f:86:4e:5e:1d:b8:02:6e:d2:15:c6:
67:6d:ab:c5:f3:5e:d3:2f:f0:a2:62:18:a6:1f:c4:60:dc:f0:
17:ba:a3:7d:ca:1a:62:4a:65:70:0c:ab:66:a4:c2:57:d0:3e:
3d:c4:0b:86:40:ec:d3:83:d7:b1:2a:48:87:2a:ac:0f:38:1c:
ce:04:91:35:e6:dd:a3:22:48:97:57:80:93:c4:e6:d4:11:33:
07:8c:87:d6:f8:42:dc:83:41:51:89:54:06:03:08:26:1b:f9:
b8:a4:ec:11:b6:91:eb:71:ad:20:c1:b7:63:ef:44:e0:99:aa:
2e:f0:70:17:f9:d6:5b:cc:8f:54:d0:b8:4c:52:c0:2d:05:44:
4f:92:b2:d1:dd:11:ba:d8:af:51:c9:9c:9a:4f:1b:f6:2c:91:
c5:90:70:40:aa:56:d0:e8:28:d8:76:4e:ee:69:c0:f0:93:b1:
9d:09:c2:70:41:6a:b2:98:e8:1f:1d:d2:26:25:2f:91:c9:ab:
6b:1c:ff:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:17 2025 by rpki-client