Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa
File: P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa (raw, json)
Hash identifier: eyPYhbBHlHybHAFvY42BHBhkxjH8RlGXuW3S7/1wkOw=
Subject key identifier: 3F:F7:BF:85:F1:5D:38:88:38:45:D8:50:EE:46:C9:75:83:F7:F9:1E
Certificate issuer: /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial: 01942144695896A5B04A048A3AE45D357AC6
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205255
IP address blocks: 2a0c:ec00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:58:96:a5:b0:4a:04:8a:3a:e4:5d:35:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff7bf85f15d38883845d850ee46c97583f7f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:48:73:8e:f9:4b:18:81:b0:82:a8:79:d3:
87:87:3f:fc:3a:de:b2:d2:81:fb:62:c1:07:a6:5e:
5b:b8:b7:02:00:a8:58:25:06:93:86:04:71:89:c8:
5c:38:99:53:d1:7b:b6:4a:ee:12:a1:91:bf:9a:ee:
8f:96:92:2d:55:75:a1:c7:f6:a8:95:f9:6f:f3:49:
40:f0:41:7b:2a:16:ef:cb:2e:b2:bb:82:87:09:c4:
d5:10:ad:28:73:97:53:ef:75:64:00:dd:2a:61:5a:
b8:7f:6f:83:72:ae:dc:57:a1:6b:c3:08:5a:85:12:
26:2f:6c:01:9f:93:7b:b5:96:a2:26:7c:f9:26:c4:
64:0b:84:56:13:6d:f4:7e:40:a1:46:08:06:70:da:
a1:23:d6:dc:9b:69:44:9b:a8:42:47:4b:ce:5e:fc:
4a:42:68:de:e9:a9:f3:d8:42:9b:de:dc:c6:d9:b7:
7f:37:95:39:9e:56:40:87:82:5a:db:be:71:45:fa:
f8:6b:c7:60:d6:a8:4f:05:cf:ef:50:7d:6f:7e:0f:
f3:48:f4:2a:27:05:7b:74:10:83:53:a7:ef:44:f7:
b8:77:7a:19:b4:a4:38:4e:18:ef:b7:3c:eb:9f:1e:
fc:68:c4:ee:c5:80:bc:db:21:54:ba:36:50:8a:30:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:BF:85:F1:5D:38:88:38:45:D8:50:EE:46:C9:75:83:F7:F9:1E
X509v3 Authority Key Identifier:
keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
50:b4:6e:a8:5b:ae:f2:e5:ad:97:45:b2:6d:a1:ac:3b:9d:f2:
d4:da:95:57:df:e0:ec:9f:e6:65:01:8d:eb:3b:8a:68:72:72:
92:b5:65:4c:24:df:80:d1:4e:e6:95:41:46:f4:eb:80:14:dc:
e8:03:fa:48:16:6e:33:b8:cd:ff:db:f5:19:f6:1e:24:5f:2f:
92:af:2d:0f:e6:54:e6:2a:57:f8:da:53:91:3a:29:a4:54:72:
7a:37:95:58:70:fd:76:d8:d9:50:28:71:2d:59:79:c0:8c:27:
7e:c7:aa:ad:77:6e:e1:c6:07:f8:98:63:6a:d5:9c:49:15:41:
a1:40:ea:42:b0:98:d2:6f:27:fc:eb:7d:d1:e9:ce:4c:64:7b:
3b:b0:84:1d:10:ab:f7:44:81:a3:a9:28:c7:39:f1:cf:81:26:
be:70:d5:9d:a3:4a:86:33:50:b9:00:59:4e:57:93:08:a2:e4:
e4:95:66:45:b2:52:4d:a3:73:07:da:0c:11:73:a8:55:76:68:
6b:57:61:2f:d5:60:48:8c:08:33:f2:a2:a8:d3:7c:1a:a9:cc:
2e:83:3b:36:12:9d:6b:a2:e4:65:93:19:90:4c:49:9c:d9:76:
2b:72:70:38:cd:5a:cd:5a:8d:e0:34:b7:c1:e3:29:58:13:f3:
3f:4f:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:05 2025 by rpki-client