Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa
File: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (raw, json)
Hash identifier: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=
Subject key identifier: 3A:B4:0D:3D:79:1D:C1:ED:A9:36:5C:34:5C:C5:DC:48:65:C5:93:55
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D643308C69B9ACA7811576D5DD9E85
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213109
IP address blocks: 2a07:22c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:43:30:8c:69:b9:ac:a7:81:15:76:d5:dd:9e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab40d3d791dc1eda9365c345cc5dc4865c59355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2a:e3:ec:bf:7e:c9:ca:d2:59:dc:4b:28:43:
7e:c4:da:c7:04:75:75:ef:af:c1:ae:fc:62:7c:cf:
3a:10:cc:99:50:04:aa:22:78:e0:10:0c:d0:0e:7e:
21:8d:5b:15:70:f3:ed:eb:6f:1e:99:8b:1f:8e:ff:
f7:65:c2:47:e5:19:13:ea:18:9c:87:3d:69:90:8c:
4c:f7:58:d1:d8:32:aa:81:d9:75:ef:3f:06:4d:fb:
13:37:ce:30:09:fb:be:c6:e9:b4:fa:3b:3d:c1:24:
aa:5e:13:62:56:74:63:b8:4f:da:8c:35:14:76:24:
2f:89:f0:8f:76:4d:f4:ab:5e:d1:2e:bf:86:9f:8d:
68:9d:62:ca:52:ea:cd:ab:bd:70:3d:e2:e1:9e:6c:
14:5a:cf:b1:30:fa:40:dc:72:67:54:12:58:49:11:
a8:3c:c9:b3:d2:7c:9e:f1:85:11:d6:71:fc:e9:c5:
37:09:c5:bb:fa:6f:6a:c3:f5:b7:73:aa:c3:1f:a7:
5f:39:f1:05:9f:37:63:60:c4:6f:a4:88:28:e0:bf:
ff:3c:28:88:a9:f9:a7:7d:4a:4d:2f:6d:63:1d:2b:
50:c8:d2:24:28:6d:bb:dd:55:0f:e6:f4:2f:cf:fe:
d3:52:c3:09:e2:ec:65:90:1c:30:c5:cd:c3:60:be:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:0D:3D:79:1D:C1:ED:A9:36:5C:34:5C:C5:DC:48:65:C5:93:55
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1::/48
Signature Algorithm: sha256WithRSAEncryption
59:38:24:6e:9a:da:0d:60:28:4d:a8:a6:b0:cf:90:97:2f:6b:
48:84:86:85:f7:fa:6e:ba:bc:fd:8c:9f:61:be:a4:5f:97:86:
ae:65:fb:e2:7f:70:12:7c:1b:90:70:a8:0c:2f:00:fc:68:6a:
56:c7:65:f9:18:9a:b8:cd:53:40:c5:bf:f2:8e:64:a6:a0:80:
6f:31:5d:07:17:d2:5e:01:31:95:90:49:fb:4c:db:12:de:08:
40:df:6f:58:7c:30:3f:8b:de:2f:1b:cf:d7:9b:3f:54:8a:12:
80:48:15:b4:8b:9a:45:b5:82:e6:98:2e:f8:4c:4c:fc:d7:f3:
69:14:b2:0c:2e:5a:7a:59:22:dd:32:dd:95:29:a8:b1:7e:a8:
e6:c4:91:2b:3c:50:7b:23:5e:d5:92:84:ef:65:f0:c1:d5:0c:
31:4a:c2:84:b4:6d:70:80:e3:21:69:c0:80:ec:bc:e5:34:db:
d9:c1:b3:46:a9:06:2d:35:34:cd:c2:d2:57:06:43:0e:55:4d:
20:01:d9:b2:ff:27:4c:1d:58:54:73:70:70:b9:c6:fb:30:c1:
fa:ee:e3:ba:00:84:4c:f1:d6:9d:b0:82:de:52:d6:2f:2b:e3:
ed:89:33:70:b7:c6:63:45:61:ff:c9:91:c2:37:f9:4d:00:fb:
77:99:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:25 2025 by rpki-client