Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SfezIgqowG03RW9M-YiaYFnkMJE.roa
File: SfezIgqowG03RW9M-YiaYFnkMJE.roa (raw, json)
Hash identifier: pR+Bw7R4AHy55v/xn6Y13Aw+a/rBC+buun29Gigq9No=
Subject key identifier: 49:F7:B3:22:0A:A8:C0:6D:37:45:6F:4C:F9:88:9A:60:59:E4:30:91
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56D4E4763566F90C0C8635E9321AC
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SfezIgqowG03RW9M-YiaYFnkMJE.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a09:6280:b::/48 maxlen: 48
2a10:4100::/32 maxlen: 32
2a12:a345::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6d:4e:47:63:56:6f:90:c0:c8:63:5e:93:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49f7b3220aa8c06d37456f4cf9889a6059e43091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:e2:e9:1b:8a:bb:04:b2:b8:2d:1b:f4:11:
06:f8:e5:d4:a7:1e:c6:0c:0b:41:23:db:db:6f:1c:
cd:11:4f:df:30:9f:bf:58:84:5f:65:66:df:0b:d8:
43:6e:50:ee:2d:19:e1:39:ba:86:93:ea:85:e9:e6:
ed:7f:d2:11:55:f0:3a:63:c6:22:a0:0f:ea:c5:c2:
f7:73:07:b7:43:9d:08:91:d6:6f:16:de:04:f3:72:
cb:02:14:22:c4:31:f8:32:1e:37:7a:86:2d:b1:b7:
81:4c:1b:0a:cc:15:93:93:2f:41:ca:f2:eb:f3:2b:
ad:ff:b3:f7:d6:3e:c4:81:fe:5a:e8:4f:a2:bf:4b:
d2:8a:28:71:81:6d:53:40:03:dd:8e:8e:54:1b:32:
56:67:a8:38:50:e7:89:b7:ae:30:cd:0a:87:49:eb:
4f:50:57:46:95:81:4a:f5:d7:eb:a4:73:68:f2:a9:
59:94:62:8f:0b:c3:76:35:e9:8d:ad:ad:87:62:4a:
ba:2e:7d:a0:47:29:d3:3c:65:56:90:46:01:f9:4f:
d0:18:c9:ec:42:2a:5d:e4:fc:eb:dc:a3:e9:77:99:
4e:99:13:8b:28:84:b6:93:9b:5f:80:51:8f:cd:8c:
5e:9c:ca:13:49:4b:bf:4f:d8:35:56:28:d5:94:c9:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:B3:22:0A:A8:C0:6D:37:45:6F:4C:F9:88:9A:60:59:E4:30:91
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SfezIgqowG03RW9M-YiaYFnkMJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:b::/48
2a10:4100::/32
2a12:a345::/32
Signature Algorithm: sha256WithRSAEncryption
92:b9:d5:5f:5e:5e:5a:a4:b7:12:2d:75:49:42:25:4c:42:1b:
11:fa:df:88:9a:b7:dc:e8:c2:10:67:a7:a2:23:21:23:39:6d:
ec:d7:fa:5a:32:92:a6:cd:11:ce:b0:e0:e6:39:bb:3a:4c:d2:
55:1f:b4:2b:d5:95:b8:c2:46:d4:c8:8a:ec:16:a5:d6:f2:fa:
49:bd:ac:3f:6a:cf:cb:70:82:79:da:db:64:f3:5a:3b:88:81:
a9:95:c9:c4:d4:9d:49:4c:3c:d0:93:08:66:8e:21:3b:26:64:
11:5c:23:d5:0f:a9:1c:8c:9b:d2:87:bd:cd:67:a2:96:a0:18:
d2:1a:57:ed:b7:c9:4c:f5:2f:02:12:c8:b6:8c:38:6f:5f:43:
82:ae:84:7c:6e:18:7f:46:31:c9:e4:6b:8c:09:8d:1c:b6:1c:
44:95:dc:84:92:26:dc:02:98:ff:41:f5:1c:4c:1b:3f:37:29:
99:4b:21:73:2e:b7:6c:28:44:58:48:33:de:95:a3:8b:1d:62:
75:60:d1:97:d5:58:50:c3:48:21:07:38:63:b2:74:49:53:8a:
19:fe:1e:97:ee:e4:97:ce:0c:55:93:27:e9:0a:7a:d3:34:54:
92:15:72:5f:aa:c5:c9:07:06:9f:11:9e:c8:72:76:df:21:d3:
10:8f:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:39 2025 by rpki-client