Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/8a9J3an90z8mWS8TkwqA1Af6V60.roa
File: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (raw, json)
Hash identifier: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=
Subject key identifier: F1:AF:49:DD:A9:FD:D3:3F:26:59:2F:13:93:0A:80:D4:07:FA:57:AD
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019425FD2B675F7E9EF11257889954B8726E
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/8a9J3an90z8mWS8TkwqA1Af6V60.roa
Signing time: Thu 02 Jan 2025 07:48:56 +0000
ROA not before: Thu 02 Jan 2025 07:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212226
IP address blocks: 2001:67c:b54::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2b:67:5f:7e:9e:f1:12:57:88:99:54:b8:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1af49dda9fdd33f26592f13930a80d407fa57ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:95:de:be:cb:41:a3:5a:04:82:20:46:72:
b2:f8:44:4f:ab:c1:e7:ec:e5:da:13:91:d2:dd:6a:
e8:db:99:3e:07:e4:92:5f:b4:a8:20:5e:23:43:90:
9f:a8:16:5a:18:aa:47:b2:e3:56:a8:05:dd:0f:a5:
63:60:77:06:59:a7:f1:ef:0b:24:fe:3a:35:82:29:
a3:57:15:38:99:91:cf:ea:a0:59:6e:a5:5a:37:9c:
7a:88:f6:62:38:4e:67:17:2b:f3:83:5c:4a:33:27:
70:7b:ad:28:d8:ba:ef:95:70:91:13:6c:2c:5c:10:
98:49:fa:ec:bb:df:92:0e:90:2a:e0:dd:af:e6:ba:
79:96:88:95:39:4b:f1:67:5f:80:59:91:6c:55:9c:
d1:d1:65:6c:e4:47:d0:fe:69:33:0f:54:42:a8:8a:
7b:5d:25:c9:50:d0:5b:45:31:11:84:e9:49:0b:b7:
56:d4:29:f7:7c:fc:6e:02:fb:71:2a:4c:c6:9e:19:
11:f8:67:d0:5e:de:86:08:a7:40:bc:de:e4:87:c7:
22:6f:66:99:ba:36:8f:86:81:26:ac:2e:b8:ec:bc:
1f:c1:90:ad:d2:85:c3:25:34:86:72:33:a7:75:9f:
a5:df:51:6a:db:e7:5b:de:40:93:54:c2:6f:1b:d7:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:49:DD:A9:FD:D3:3F:26:59:2F:13:93:0A:80:D4:07:FA:57:AD
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/8a9J3an90z8mWS8TkwqA1Af6V60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b54::/48
Signature Algorithm: sha256WithRSAEncryption
66:15:0a:a4:99:37:29:3b:a8:ce:b6:fe:34:25:3c:ad:a9:0c:
1e:d9:88:36:d7:ca:6e:0e:a3:7d:02:e7:88:84:fe:0f:9b:db:
0c:8c:f0:18:35:7a:b6:16:a2:e7:8a:f8:b3:84:ea:76:f1:56:
73:db:26:c6:54:3f:20:9a:0e:3b:80:41:e6:d0:b0:ef:5a:7a:
2b:ac:c0:63:6c:49:de:8e:78:05:ad:fa:c9:2d:3c:be:7d:02:
93:0f:f8:04:69:0b:c7:bd:dc:1f:33:d2:e5:fe:e6:5b:23:b4:
95:ae:b5:69:9d:0c:51:6e:33:26:54:fa:7c:b7:d5:1e:73:f1:
96:81:14:8d:9c:d6:3a:7a:d7:cd:65:8c:e0:4c:67:9b:ef:08:
55:42:9f:a8:25:4c:82:40:a0:e9:88:7e:8c:99:0b:6b:43:5f:
3b:aa:f9:95:9b:19:f0:76:ac:f8:ec:50:41:d9:6d:37:8c:db:
b4:e7:f7:ea:d2:83:46:f9:0a:c6:41:75:0e:17:5c:d5:c6:83:
65:b2:7e:67:c4:38:f6:84:d5:c4:d3:4c:59:18:5d:4e:3f:ff:
a9:74:bd:10:2f:9c:3a:64:32:93:1e:7e:91:f9:8e:0c:b3:7f:
08:92:d5:19:87:26:29:da:be:7b:94:93:0b:3b:1e:a5:b1:46:
d0:2d:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:13 2025 by rpki-client