Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/r6T3XlH0NydhUiVntY08YEEt0HY.roa
File: r6T3XlH0NydhUiVntY08YEEt0HY.roa (raw, json)
Hash identifier: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=
Subject key identifier: AF:A4:F7:5E:51:F4:37:27:61:52:25:67:B5:8D:3C:60:41:2D:D0:76
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0194252239E63E44C2087EE24D6320428894
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/r6T3XlH0NydhUiVntY08YEEt0HY.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200044
IP address blocks: 2a00:eb9::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:e6:3e:44:c2:08:7e:e2:4d:63:20:42:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa4f75e51f4372761522567b58d3c60412dd076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:10:ad:8e:34:ca:8b:44:45:85:43:25:85:
5a:9c:c0:36:09:cd:f5:44:58:28:a9:db:08:3f:0d:
e9:4d:15:d4:44:aa:da:aa:1b:bd:6c:df:4a:78:5e:
08:93:f6:0a:dc:48:eb:1f:43:de:01:15:84:33:ca:
8c:0a:47:8b:37:ba:ab:ee:3b:2f:40:e6:ed:b3:12:
3a:3f:53:16:a3:2d:a6:bd:cd:06:3d:01:14:84:13:
7d:02:c8:5b:9c:b4:ec:9d:fa:c3:16:08:d6:63:e6:
da:c3:73:34:8f:39:fc:af:12:3d:34:d4:9e:59:ab:
c6:a4:7b:b6:e2:a5:e2:fa:c4:20:e4:eb:6a:82:35:
d8:10:41:d2:27:ff:b4:4e:69:6d:76:4c:7f:07:49:
5a:36:d9:aa:4a:4b:89:d8:c8:ab:ee:79:7d:55:41:
b3:98:68:df:95:95:70:fa:d6:41:d6:8f:32:db:d2:
b5:8d:6c:7c:89:54:89:4f:77:da:9a:5e:9b:73:bc:
b8:d2:d2:58:52:d4:21:61:06:b5:01:80:e4:38:d0:
e2:9c:2e:2e:52:a8:f6:be:2d:c1:f1:ac:00:78:05:
e8:fd:92:00:6a:d4:7e:f3:e1:f0:4e:a8:6b:6e:9e:
08:8b:44:f8:51:b1:dd:67:b0:a2:ab:93:0a:1a:33:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:F7:5E:51:F4:37:27:61:52:25:67:B5:8D:3C:60:41:2D:D0:76
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/r6T3XlH0NydhUiVntY08YEEt0HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:eb9::/32
Signature Algorithm: sha256WithRSAEncryption
17:d5:3a:0a:6b:06:0b:13:b3:06:69:66:ed:78:6f:11:cf:83:
10:9a:40:fe:25:3a:8c:d8:3c:fc:56:5f:95:2b:48:9e:53:04:
c5:6c:a7:a5:7e:5d:5d:36:e1:21:f9:4a:d9:61:cd:40:4c:ad:
5e:55:99:cb:99:66:cf:7d:05:29:89:71:57:f0:58:ff:bf:0a:
73:03:dd:df:c4:dc:9a:43:74:45:37:2b:18:b1:7a:3b:7d:c8:
45:f5:4c:89:8e:15:ee:f0:c9:7e:08:a5:31:0f:cf:ed:5d:a3:
c9:d1:e9:55:17:8d:5a:9b:f4:3c:23:62:ed:42:bc:72:c7:f5:
6c:8a:3f:f2:76:df:fe:c5:64:a3:2e:ff:f5:64:03:b4:d6:30:
d6:ee:df:00:80:c9:da:ed:96:1c:0d:51:5e:57:28:a0:13:67:
8a:2f:61:02:aa:bc:41:1f:1d:18:63:f4:89:e3:33:c1:4a:3c:
74:de:75:02:1d:7f:64:e2:44:77:46:04:14:e4:7e:a8:e1:d5:
7e:14:5c:5c:8a:4d:bc:ea:8d:21:39:ff:d2:fe:02:c9:8b:c0:
ff:19:00:3a:b5:15:b4:83:c9:aa:5a:99:fb:a1:f7:c5:de:6d:
ff:27:f4:23:51:64:a5:7c:39:ac:1b:bb:0c:8a:71:c8:90:20:
1d:e5:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:38 2025 by rpki-client