Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/tKq0O-LPSyD7OVQ3RoZqSH6OoU0.roa
File: tKq0O-LPSyD7OVQ3RoZqSH6OoU0.roa (raw, json)
Hash identifier: jOdTVbPLjSR1tlli1/3dPvxDQKaJk5SfpapOvSq+4eM=
Subject key identifier: B4:AA:B4:3B:E2:CF:4B:20:FB:39:54:37:46:86:6A:48:7E:8E:A1:4D
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019420D60EF2E4603A1B29492E2C8F2EF1B8
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/tKq0O-LPSyD7OVQ3RoZqSH6OoU0.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210199
IP address blocks: 2001:67c:c0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0e:f2:e4:60:3a:1b:29:49:2e:2c:8f:2e:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4aab43be2cf4b20fb39543746866a487e8ea14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:32:b2:16:0e:13:17:f8:4c:f5:14:fe:2f:
cc:7e:fc:60:21:ae:d8:c5:e2:a8:4c:29:bf:bd:22:
b2:48:b5:0a:a3:5c:8a:73:c0:df:50:29:bf:cc:f0:
8c:95:8a:f4:72:d0:ab:16:50:9c:ca:b7:45:af:63:
74:28:a9:f1:81:17:13:e6:52:13:a1:a7:ab:16:d0:
b7:ad:b3:52:ea:28:c4:36:61:f2:cc:da:97:92:ea:
23:47:87:85:b4:f3:9e:89:25:d9:37:e9:6b:5e:40:
58:83:0c:06:fd:26:87:bc:3a:38:69:17:73:56:99:
bf:87:7e:1f:d5:17:1a:b6:6c:7c:bb:05:5b:48:0b:
13:5c:9b:2c:5c:1c:8d:45:ca:d1:9c:cb:81:4b:2d:
4d:48:fa:3d:30:bb:6c:87:56:7e:5d:9a:f0:6b:d1:
6f:15:50:91:41:71:09:73:ba:fa:90:42:d7:40:68:
57:83:a2:7b:19:cc:99:53:24:4e:92:d2:7a:4d:78:
09:a3:5d:59:41:2a:b3:bb:d2:1d:ff:a3:29:72:56:
11:23:4d:62:d5:b0:f2:0b:bf:03:03:53:20:b4:b5:
d0:d4:56:5c:4f:37:7e:46:ae:e8:d0:59:9c:0c:cf:
63:8e:ed:77:8d:98:5f:8e:55:61:70:e5:df:da:f5:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:B4:3B:E2:CF:4B:20:FB:39:54:37:46:86:6A:48:7E:8E:A1:4D
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/tKq0O-LPSyD7OVQ3RoZqSH6OoU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c0c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:37:d2:d2:fe:60:24:fc:7b:ed:d6:b8:30:33:9b:5d:24:84:
b4:dd:87:68:49:e4:63:ca:5d:cc:26:19:3b:8a:08:dc:9c:b5:
0d:6f:35:33:df:82:79:c7:d9:e7:f2:f0:83:ee:f5:c3:35:02:
de:c8:f6:3a:35:3c:e5:d3:80:78:39:d1:7b:77:55:09:bb:00:
0a:fb:e7:14:41:4e:d7:b1:0f:01:b2:8d:9a:b0:e0:68:c7:09:
80:41:b3:0e:df:ed:a2:2d:f4:7d:da:a6:6b:72:0e:61:e5:92:
6f:4c:e0:c7:d7:a5:0b:fa:e5:94:18:63:2f:55:e7:6c:a1:78:
5d:e1:7f:ed:02:11:d9:da:fe:30:41:f4:31:be:d1:72:3d:d1:
45:a5:ee:78:e0:b1:11:1a:4e:49:3b:69:00:27:3a:df:66:1d:
4b:c7:5b:57:d9:ea:a9:78:d7:ed:49:0c:4e:00:0c:aa:88:ac:
6f:b9:de:0e:ae:ac:24:c0:51:2e:e1:23:b7:7d:bd:d2:06:49:
6f:10:2d:e3:58:8e:4a:9a:c1:98:c9:97:5f:dc:86:f5:8c:70:
67:54:15:57:ab:8b:35:f8:96:d3:a8:94:cf:99:7d:62:13:4a:
0e:29:77:ac:90:92:19:1b:6e:93:40:ad:29:32:bb:ed:53:11:
84:8d:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:51 2025 by rpki-client