Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/jfUqkf_BnbSeyvKiFitEY3b5cmY.roa
File: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (raw, json)
Hash identifier: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=
Subject key identifier: 8D:F5:2A:91:FF:C1:9D:B4:9E:CA:F2:A2:16:2B:44:63:76:F9:72:66
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019424B2706018A286159123409DA2A60E12
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/jfUqkf_BnbSeyvKiFitEY3b5cmY.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30847
IP address blocks: 2a01:8900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:70:60:18:a2:86:15:91:23:40:9d:a2:a6:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df52a91ffc19db49ecaf2a2162b446376f97266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:c8:3a:ff:84:5a:e3:d6:06:ee:5c:66:a5:
03:14:36:35:45:ad:7b:4d:c6:b2:78:9c:df:c1:b3:
6a:2c:f2:bc:5c:83:d0:14:60:22:88:c9:cf:df:27:
ba:7a:78:9b:27:61:a5:f6:3d:ed:9b:e2:e5:fd:d1:
79:af:47:35:17:53:81:c0:f5:15:33:37:2c:d6:84:
ec:53:7c:a8:8f:25:59:e5:06:d5:bb:0f:1a:99:e7:
aa:8e:18:3d:b1:dd:d3:ab:f3:ca:88:61:37:16:74:
c1:58:7d:ea:96:0a:b2:69:b6:0a:7c:75:03:36:c0:
3d:c5:6b:fc:ea:99:c5:19:f6:a8:45:79:86:b5:7d:
5a:9c:76:a4:77:a7:2f:b3:fd:02:72:8e:1a:ce:83:
61:ff:74:0d:87:1c:08:b1:69:35:8d:66:2e:b0:0c:
12:02:db:d3:c0:9c:71:ea:c2:96:12:b2:02:7f:3f:
a0:aa:9e:67:ab:5a:e5:96:2f:97:b7:1a:1e:ef:c5:
3a:30:5a:cf:97:fe:c7:03:7e:16:99:d1:d3:91:41:
ed:d5:88:c0:c5:29:9c:27:c8:8c:01:70:56:00:14:
b5:5f:7d:f4:69:4f:3b:14:df:c7:15:ff:13:f4:03:
7f:ed:d0:77:59:2d:d6:42:a1:05:0a:e5:d9:23:7c:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:2A:91:FF:C1:9D:B4:9E:CA:F2:A2:16:2B:44:63:76:F9:72:66
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/jfUqkf_BnbSeyvKiFitEY3b5cmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8900::/32
Signature Algorithm: sha256WithRSAEncryption
0f:cf:3b:92:05:67:67:59:e0:e8:a0:a2:f0:61:75:02:c3:1e:
e6:d6:35:e1:ae:f1:6c:01:45:e8:36:33:69:63:14:c2:c2:78:
e8:ce:ee:3f:e4:54:bb:ad:44:85:ba:9b:63:89:4a:f6:c2:4a:
2f:4e:05:dd:ac:04:b8:20:2f:93:05:2b:92:a5:35:af:7f:b7:
26:5a:36:09:8f:e2:b9:d6:46:55:94:8b:09:90:f1:fc:3d:17:
e0:a6:fa:3c:d2:80:34:39:1d:bf:b2:25:89:d4:cb:6d:5c:ad:
b0:9f:7e:dd:25:e1:bd:0e:dc:1c:cf:15:38:aa:e6:58:ff:62:
fc:a8:9f:eb:82:d9:7a:56:53:17:46:97:ca:cf:1a:73:74:75:
e4:ba:53:54:6b:cd:0e:07:08:ac:58:2a:d4:9c:ac:27:ab:7a:
24:b9:2a:20:d6:62:d1:35:d9:62:12:e9:60:b3:4f:93:e6:9b:
5e:75:0c:ef:71:7c:dc:0d:2e:e0:c1:86:0c:fb:ef:72:88:9b:
1d:7e:1a:06:28:6b:e7:31:7a:83:4d:5e:5b:ee:01:7d:db:3a:
fe:0c:70:ad:d2:5f:6a:87:53:5e:b4:66:70:9a:4f:57:a9:b5:
97:c7:c7:10:b3:d8:81:03:1b:7b:02:2f:e6:c9:25:45:b8:eb:
5f:d1:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:14:06 2025 by rpki-client