Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/tUMiGCgmsKV0vxqojlEA4oJxpRM.roa
File: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (raw, json)
Hash identifier: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=
Subject key identifier: B5:43:22:18:28:26:B0:A5:74:BF:1A:A8:8E:51:00:E2:82:71:A5:13
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019425221FBE53C52FCCF6579A6FA36097CD
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/tUMiGCgmsKV0vxqojlEA4oJxpRM.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9056
IP address blocks: 2a00:7c00:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1f:be:53:c5:2f:cc:f6:57:9a:6f:a3:60:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b54322182826b0a574bf1aa88e5100e28271a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:41:40:9a:23:0b:25:7c:99:1c:55:0f:06:
4d:26:a2:59:d0:17:5c:fc:87:cc:ce:d7:c6:23:e4:
93:af:8e:60:24:93:dd:37:b5:94:bf:30:de:46:93:
d7:f7:12:4a:df:9b:e9:08:92:df:fc:63:1b:eb:18:
c6:e6:08:30:9e:fc:fb:1e:43:8a:bb:39:f1:5b:b9:
9c:67:d6:bb:2f:b9:af:f5:b8:bc:6c:00:30:54:97:
8f:69:a9:61:bb:f8:31:c4:18:91:ea:39:f9:21:2f:
55:3f:5f:e4:b7:c6:7d:e7:db:24:12:3b:8d:a8:e3:
ec:ce:c4:b0:86:36:02:da:8c:45:7a:48:a7:38:00:
75:75:c5:08:2d:7a:1b:e9:33:69:71:2d:f2:bf:3c:
ef:30:f6:52:e0:72:b1:d8:77:10:bb:f7:24:fb:73:
f1:6f:2d:ac:4b:49:78:18:8b:cd:1c:8b:b3:3c:36:
40:e5:c5:55:24:8f:b6:bf:b0:1f:36:36:a2:0c:d5:
da:c2:c7:aa:13:cc:ec:e8:ac:e4:e2:66:89:5b:37:
b7:fe:4c:9f:c3:cc:25:f2:e3:ea:cc:14:1d:06:83:
7b:28:8a:b8:a8:b4:29:0e:12:dd:09:10:6d:6e:f8:
31:cb:28:32:c1:fe:6a:23:56:c6:e3:79:f4:a1:e7:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:22:18:28:26:B0:A5:74:BF:1A:A8:8E:51:00:E2:82:71:A5:13
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/tUMiGCgmsKV0vxqojlEA4oJxpRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00:8001::/48
Signature Algorithm: sha256WithRSAEncryption
d2:ea:4a:b7:29:1d:87:fa:4f:7d:48:97:d9:7b:c7:61:f9:dd:
f8:13:e5:c1:31:e3:98:11:a6:5a:a4:20:44:23:4d:82:40:c4:
76:65:d5:66:ad:ca:7e:00:27:44:0e:71:c5:c5:7f:a9:70:95:
5a:06:b0:b4:0a:b0:da:cf:09:17:27:c6:c1:87:04:58:8d:dc:
2a:c8:54:33:60:57:96:fe:35:be:7b:f9:f3:50:c1:61:19:43:
54:43:a9:e7:b8:6a:f8:1a:ed:bb:ef:84:40:c2:c5:62:f2:2e:
04:9d:91:d7:57:98:c3:a0:fb:e4:fe:db:c2:2b:4d:6a:8c:36:
b9:39:40:fb:d0:f0:4d:a3:c4:e9:10:3b:f9:4f:3c:39:04:f7:
4c:28:f8:0c:73:58:d9:c3:47:e0:14:2c:54:15:bd:f2:83:b8:
a2:48:0b:a6:4e:49:7e:bb:1d:bd:20:e1:e3:fd:35:3a:1d:53:
ae:a3:2e:1a:3a:78:18:8a:fa:c9:fe:be:e3:27:98:4e:b4:2c:
89:ce:53:b9:7f:63:f4:f2:23:a7:b0:b5:12:e5:17:8f:14:78:
05:ec:d5:86:6a:b3:4c:05:bc:87:cd:5c:de:dc:c4:f6:9a:11:
0d:4e:f2:98:bf:3f:f4:1d:71:e3:55:9a:5e:08:ef:e0:8a:92:
d6:62:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:28 2025 by rpki-client