Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa
File: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (raw, json)
Hash identifier: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=
Subject key identifier: 8A:B1:20:1D:08:09:D6:56:0F:8C:0F:F5:8A:E5:12:8E:F3:05:27:51
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 019420D63011054A9C9799F42DBE149A0702
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201377
IP address blocks: 2001:67c:ae4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:11:05:4a:9c:97:99:f4:2d:be:14:9a:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab1201d0809d6560f8c0ff58ae5128ef3052751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:c9:3b:6a:73:58:1f:7b:e2:69:e9:4e:fd:
5a:d8:e5:ef:a4:cc:1b:3c:34:f5:69:ab:90:85:87:
a1:e5:43:d8:f2:ed:31:35:3f:27:f2:82:0e:0b:b3:
d3:a6:9f:2b:c8:ea:d2:8b:cb:4f:4c:3f:e5:a7:af:
02:61:30:09:02:28:c3:73:a3:8c:2c:4c:e7:12:b6:
af:1b:e8:ef:3a:bc:0f:7a:06:40:1a:00:be:a3:2b:
76:85:0b:c0:d6:8c:d7:6c:68:c1:76:be:0a:4e:15:
52:bd:a1:19:84:79:d7:49:fa:7b:4c:1c:a5:75:b1:
69:e2:69:22:ab:c3:68:cb:60:b6:b2:4e:db:61:4b:
b2:51:da:45:10:8c:78:05:bd:81:ec:d4:b7:08:7f:
e3:4a:66:e1:d6:c4:77:fc:5a:95:3b:7b:a8:f8:20:
e0:eb:c9:5c:b2:18:0c:4e:20:6f:fd:80:6b:1a:4c:
a2:35:44:42:66:a8:f2:f2:c8:33:ed:13:40:75:c8:
af:ae:7a:56:8d:2c:1c:9c:bd:60:36:d0:23:93:67:
e1:cb:16:0a:f3:63:ee:d3:30:f1:03:47:8c:7d:2b:
68:c6:83:96:55:75:ce:49:50:4b:ba:fd:b3:11:e0:
3e:de:4f:90:63:da:ff:c2:06:a4:31:d2:b9:2b:f8:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:20:1D:08:09:D6:56:0F:8C:0F:F5:8A:E5:12:8E:F3:05:27:51
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ae4::/48
Signature Algorithm: sha256WithRSAEncryption
c8:19:f6:49:2e:ab:94:7f:ef:1b:f1:67:39:b5:74:c8:fc:ef:
3d:b9:5b:ec:57:49:c9:38:13:48:b2:1c:66:69:a8:4b:79:f5:
7a:e8:26:19:d6:ba:6d:3b:fe:28:dd:34:b8:3c:ca:0d:68:e2:
ec:5b:98:97:28:5d:4e:0b:53:7f:34:99:a9:9e:ad:10:53:60:
ac:1d:58:6b:c6:ca:04:11:cd:70:6a:93:f6:ca:ee:09:a5:b1:
59:a7:c3:99:a1:73:a7:5d:8a:fc:b2:22:cc:06:dc:7e:ce:18:
7b:76:8c:ad:50:3b:2b:07:7f:3d:5a:4b:c0:02:ae:4c:7c:01:
b5:f0:5b:7e:52:37:a3:f0:ac:82:55:94:93:2c:2f:bb:57:75:
b4:1c:91:79:d1:bf:38:96:17:ff:23:2b:68:ca:f1:7b:f2:2c:
22:3a:e8:06:9b:1c:a7:8a:ac:b6:4b:0d:db:18:35:f1:80:86:
5b:ad:f8:f7:c4:c2:d5:5e:39:76:c4:b1:a5:51:f2:54:61:8b:
78:86:d4:23:58:4a:e4:12:04:04:97:46:46:f0:f8:a1:ad:b8:
52:82:8a:24:7d:f8:a8:95:4b:a2:f9:ad:c3:54:07:47:da:80:
1c:4e:d3:2d:b9:17:86:d7:bb:20:10:63:08:db:65:56:ac:de:
e8:69:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:50 2025 by rpki-client