Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/kZG65yjYhzWbyjVxS5nDngYTn7o.roa
File: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (raw, json)
Hash identifier: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=
Subject key identifier: 91:91:BA:E7:28:D8:87:35:9B:CA:35:71:4B:99:C3:9E:06:13:9F:BA
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01941F8C366AF33DBB71005AFDD25B021286
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/kZG65yjYhzWbyjVxS5nDngYTn7o.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208559
IP address blocks: 2a02:f28:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:6a:f3:3d:bb:71:00:5a:fd:d2:5b:02:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9191bae728d887359bca35714b99c39e06139fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:c1:93:09:a9:25:07:15:37:99:0e:59:3d:
6b:55:75:e9:dd:3e:07:3e:3b:89:8f:64:2c:d2:89:
c8:c3:89:23:a5:c3:86:24:2a:a5:d9:3a:bd:fc:11:
cb:9a:fb:da:f9:65:1a:bf:ae:f9:08:7c:8a:90:c6:
81:54:17:e6:3c:a4:9a:2a:c1:d9:97:0b:3e:91:05:
b8:0c:dc:26:93:59:4e:cd:a7:89:03:82:34:ca:d8:
d1:d4:57:c5:e5:fc:35:58:ba:ce:ad:c3:20:9f:a8:
18:81:ec:f3:10:75:4c:6a:6c:f6:24:56:1e:41:ec:
02:00:84:60:fa:e4:6d:97:e2:0c:aa:f2:03:ef:c7:
26:04:5e:00:16:42:d3:bc:6a:9d:74:5c:d9:72:47:
02:e0:ce:d9:01:c5:a0:f9:7d:09:80:9d:51:ec:6e:
bf:f6:b7:b7:7b:db:52:8e:76:19:e1:91:a7:1e:f3:
2e:05:aa:c9:e7:55:c5:d0:a9:6f:49:34:79:6e:80:
0a:69:b5:b0:89:dd:93:6f:da:8d:9a:74:36:c5:28:
5d:dc:18:66:4f:76:e9:05:1d:25:80:0c:be:4a:5d:
ec:21:59:f2:50:70:b4:06:09:25:64:ca:a0:81:7d:
c2:ed:bc:04:78:0a:f8:13:72:ec:55:c7:74:e5:55:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:BA:E7:28:D8:87:35:9B:CA:35:71:4B:99:C3:9E:06:13:9F:BA
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/kZG65yjYhzWbyjVxS5nDngYTn7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f28:23::/48
Signature Algorithm: sha256WithRSAEncryption
63:22:db:b3:48:90:e2:45:af:ed:8f:50:d5:17:bc:99:3a:bc:
15:61:56:99:bd:8c:1b:2b:6f:f4:e0:fb:8d:02:0d:1c:93:45:
46:5c:f5:22:8d:5c:db:e2:2e:83:47:0a:5b:39:cd:81:1c:df:
04:90:e1:27:0e:3e:11:a1:09:f1:b5:aa:80:d4:6e:35:39:5d:
4d:70:19:f2:03:99:d1:6f:77:93:18:33:48:ca:ad:a7:f2:7a:
f5:c5:68:8a:35:aa:dd:65:a1:81:7a:19:31:d6:27:96:f8:e2:
68:45:af:38:db:dc:69:1f:ff:9e:1c:7a:70:2f:38:54:d7:35:
69:06:0e:b1:66:ed:d8:a7:24:2b:43:ba:0a:b6:98:58:48:e1:
19:15:9f:b7:e7:06:1f:c2:47:1e:e8:e9:67:c5:3c:2d:8b:bd:
9d:37:e9:e5:e9:e7:5c:d3:b0:33:a1:82:45:f9:53:16:84:e8:
98:7c:cd:7d:70:f1:b6:37:a2:ee:29:b1:b0:94:c9:a3:ae:d0:
76:50:19:07:ae:81:fa:b5:0c:44:e3:47:45:b2:36:96:4e:39:
3b:52:86:46:ff:68:f2:34:4b:19:76:d0:6b:62:d5:c3:24:21:
02:e9:7e:7b:ad:48:bd:cd:69:4d:7f:73:6d:e1:23:bd:bb:8e:
fa:7a:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:22 2025 by rpki-client