Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/S2et9u3-k4c1RbSQYpZyfZKneKE.roa
File: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (raw, json)
Hash identifier: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=
Subject key identifier: 4B:67:AD:F6:ED:FE:93:87:35:45:B4:90:62:96:72:7D:92:A7:78:A1
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0194D61325794E67D5112E0EBF19A5DEDB85
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/S2et9u3-k4c1RbSQYpZyfZKneKE.roa
Signing time: Wed 05 Feb 2025 12:26:06 +0000
ROA not before: Wed 05 Feb 2025 12:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57935
IP address blocks: 2a0a:4100::/48 maxlen: 48
2a0a:4100:1::/48 maxlen: 48
2a0a:4100:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:13:25:79:4e:67:d5:11:2e:0e:bf:19:a5:de:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Feb 5 12:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b67adf6edfe93873545b4906296727d92a778a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:a6:fe:30:39:ee:b1:81:2f:ba:3e:cc:4d:
e0:8a:c4:6e:49:b2:f6:e4:ed:e0:1d:ef:cf:03:73:
66:87:8f:46:89:7b:01:1c:4d:a6:1f:99:e0:fd:06:
94:bf:d5:26:b8:b1:b0:2a:e4:4b:90:b3:6f:8b:e3:
fa:ec:11:3f:38:7e:8f:59:44:60:5e:d5:cb:90:42:
fc:15:52:2e:b2:ec:03:d5:97:4b:b6:ac:07:50:62:
4b:13:a1:ba:0a:46:64:0e:6f:f2:87:46:7c:0d:a9:
bf:6a:34:dd:a2:1f:d6:a8:19:45:a9:2e:19:15:22:
b9:cc:2b:f9:2d:98:d1:81:f3:0c:2e:01:48:97:ff:
b0:d6:0b:d2:e1:a7:7c:4e:c4:c4:5f:4a:97:77:6b:
4c:82:99:5a:20:8f:ea:f4:bf:c5:d7:45:be:a3:40:
60:51:3b:2c:d8:92:bd:e9:7a:91:06:7e:b7:fd:b0:
5c:71:00:9c:f1:f3:5d:5e:8c:fe:53:25:8f:ce:31:
fe:49:25:88:c1:f6:f3:cf:f8:10:35:8c:89:82:5f:
14:2a:6b:b7:42:a7:a4:61:29:3c:38:04:bf:6c:7a:
77:d9:43:08:50:6f:b8:ec:c9:71:27:de:74:22:fb:
40:39:f5:26:ab:80:04:91:94:81:31:1c:46:c7:0c:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:AD:F6:ED:FE:93:87:35:45:B4:90:62:96:72:7D:92:A7:78:A1
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/S2et9u3-k4c1RbSQYpZyfZKneKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4100::-2a0a:4100:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:37:96:09:c2:94:f3:73:5e:30:88:50:75:3f:ca:09:17:c8:
c7:f6:36:d8:30:1c:90:5a:06:9f:8f:a6:88:98:5b:55:76:39:
a9:fc:43:e5:c8:8d:99:f4:0d:25:7c:03:59:9b:98:6f:e5:91:
e4:ff:2c:07:37:9b:01:3c:1b:4b:af:97:22:07:cd:a0:58:a2:
43:bd:22:87:71:3f:03:42:80:8b:d9:a8:f8:7e:92:79:d7:2c:
7d:0e:b5:73:87:b2:a6:35:a8:70:7b:19:2d:b5:f7:2e:85:e5:
11:b8:d3:fd:96:41:ab:5f:0b:c2:f6:55:83:ae:82:8d:bd:27:
a1:06:b6:d0:22:48:3b:96:fb:cc:a5:b8:68:88:a8:a6:0e:59:
cf:2c:8d:40:bd:5d:dd:c6:43:c3:ee:de:a7:6e:1a:4f:d9:87:
d7:9e:75:08:46:1b:fa:21:6a:ef:02:24:fa:4c:3d:3c:3d:fd:
c7:4b:ca:99:28:9f:2b:69:dd:56:56:de:de:d8:92:2a:4e:93:
70:a6:0b:9d:1d:6b:2b:c5:b1:5d:c7:13:8d:fd:b4:b9:f6:92:
0b:45:bf:59:48:4b:88:8b:f3:42:22:21:be:1b:55:78:bb:00:
3e:f7:2b:07:e1:c3:4f:ad:ec:23:3a:1b:31:7b:2b:9a:ee:3e:
ca:a8:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:47 2025 by rpki-client