Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/DvRXNlTCR35yGxJPggKI6LQ1TXY.roa
File: DvRXNlTCR35yGxJPggKI6LQ1TXY.roa (raw, json)
Hash identifier: uCs5edSvBBj2KY6s6HL8wAMD7pMX49G3e3NvxavAQGo=
Subject key identifier: 0E:F4:57:36:54:C2:47:7E:72:1B:12:4F:82:02:88:E8:B4:35:4D:76
Certificate issuer: /CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Certificate serial: 0194266C131035B556A162D110A70510108A
Authority key identifier: B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/DvRXNlTCR35yGxJPggKI6LQ1TXY.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1654
IP address blocks: 2a02:bf8:1601::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:13:10:35:b5:56:a1:62:d1:10:a7:05:10:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ef4573654c2477e721b124f820288e8b4354d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:ec:23:9e:9a:3b:69:74:3e:6c:91:9b:e6:
e7:6b:63:9d:30:5a:ea:1c:84:fc:5f:94:ba:80:5b:
a9:25:9a:ee:2e:6b:27:c4:00:68:1b:0f:8b:3b:1d:
29:49:f6:4c:49:b7:a8:ff:87:bb:70:bd:10:0e:5c:
3b:8d:bc:21:36:c9:6b:64:81:b0:de:7a:c4:bb:7f:
91:82:7a:c7:d2:bd:71:14:1f:c1:a2:fb:24:85:0c:
e1:ba:08:6b:8a:49:d1:88:86:dc:71:df:03:48:a9:
03:f2:6d:61:8f:45:78:6a:bb:b4:01:25:ef:f1:42:
19:d8:af:2d:91:50:a0:c6:dc:e7:76:ad:88:a9:c0:
4e:de:95:52:25:da:61:26:1e:8a:da:58:ae:ad:1b:
69:48:9c:50:8b:de:d9:e5:b7:5d:d9:2f:4b:c9:c5:
d8:12:f8:6a:20:c3:21:d9:04:62:72:cb:2c:c4:f9:
8c:b4:c2:1f:ac:70:30:54:be:e3:bd:85:ce:f3:f4:
12:38:95:e7:cd:e8:4e:f1:25:58:e8:e4:be:b5:aa:
d4:24:42:49:22:ac:b1:89:80:bc:d2:53:40:66:14:
39:bf:01:cb:3d:54:80:30:93:3c:01:49:dc:fb:91:
b4:da:b1:db:68:39:77:68:4d:48:71:44:35:02:d7:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:57:36:54:C2:47:7E:72:1B:12:4F:82:02:88:E8:B4:35:4D:76
X509v3 Authority Key Identifier:
keyid:B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/DvRXNlTCR35yGxJPggKI6LQ1TXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:bf8:1601::/48
Signature Algorithm: sha256WithRSAEncryption
60:6b:7b:f4:11:48:66:56:23:3c:1c:1c:e9:be:b1:79:5a:91:
77:07:1f:f6:67:b6:49:84:63:f3:88:4d:20:d5:74:a7:ef:15:
7d:eb:0b:99:58:01:9d:32:1e:6d:34:1d:fc:36:28:5d:3b:07:
52:a6:f9:d7:ce:6d:4f:62:28:fe:1e:eb:7c:00:4a:7c:fa:85:
70:3f:38:e2:43:26:b1:34:51:22:12:7a:51:3d:f6:8f:f4:3f:
17:1e:f2:51:59:5d:56:56:48:1a:3b:33:5c:f9:1d:74:c0:ba:
6d:5f:86:5e:0d:95:e7:98:3e:1a:66:49:9d:ea:86:a6:ff:0b:
ee:28:fb:1f:2b:72:aa:b3:52:a9:72:16:da:eb:15:5e:61:15:
da:b6:12:86:f3:6b:11:61:d9:b5:20:b9:34:d8:2d:f3:55:8d:
da:e8:ed:4d:60:83:d6:16:f3:0f:6d:84:7a:cf:f0:0f:a7:d5:
60:33:6c:a1:8a:51:41:8b:2a:13:f9:43:12:11:08:ec:b2:f6:
74:6c:ab:43:3f:e0:86:95:20:28:56:6d:8a:f6:22:ab:6c:24:
fc:1d:b3:42:07:c4:60:02:42:9a:d0:db:a2:a6:e0:9c:88:71:
78:5b:2a:65:bc:d6:e5:6f:eb:fd:85:a4:b4:fe:c5:99:18:ec:
69:bb:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:34 2025 by rpki-client