Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/si-h3EMZPum7ZeFVKrM-JgEvS5s.roa
File: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (raw, json)
Hash identifier: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=
Subject key identifier: B2:2F:A1:DC:43:19:3E:E9:BB:65:E1:55:2A:B3:3E:26:01:2F:4B:9B
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E484FB189BC6DD369A4D0DD39E82
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/si-h3EMZPum7ZeFVKrM-JgEvS5s.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52048
IP address blocks: 2a06:c3c0::/48 maxlen: 48
2a09:d000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e4:84:fb:18:9b:c6:dd:36:9a:4d:0d:d3:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22fa1dc43193ee9bb65e1552ab33e26012f4b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:9b:61:f8:9b:d5:8c:b7:94:46:0d:fb:6a:
9e:1f:dc:c8:4b:e5:a3:cd:93:9a:d5:87:19:eb:16:
7d:dd:68:e5:a3:37:99:4b:cd:a4:dc:98:29:a3:ba:
bc:94:26:e2:79:3c:c1:9e:1d:33:b0:e8:28:c9:91:
ad:73:78:a4:6d:c4:e2:06:f1:1f:61:8d:c6:4a:0e:
d9:0f:55:fd:1a:90:ac:10:f9:05:4b:f2:2b:11:8c:
5d:b0:ac:86:15:92:51:0d:91:06:21:4d:b7:0d:87:
25:0c:ef:5b:ad:fe:a9:ed:17:1b:e5:c5:d9:0f:42:
8a:11:16:86:50:8b:32:dc:aa:f2:da:69:3e:41:c2:
1e:d6:64:e0:15:46:07:23:ab:e5:15:78:cb:83:20:
65:3c:61:f2:a7:52:b5:55:4f:24:65:74:21:8d:07:
c7:7a:41:59:2d:17:75:fe:3b:03:8c:e6:27:14:f8:
fb:5e:77:10:22:d1:8c:d8:34:c9:64:e5:6f:4b:6e:
6c:4f:66:06:80:09:51:28:96:6c:98:95:17:34:03:
7b:b8:93:55:70:cd:8a:12:28:ec:94:27:09:f6:8e:
55:2e:65:14:44:b5:ca:1c:4a:79:f5:96:7e:49:61:
97:e3:8b:d1:85:6c:28:fd:7e:40:ad:6b:3e:d0:c6:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:A1:DC:43:19:3E:E9:BB:65:E1:55:2A:B3:3E:26:01:2F:4B:9B
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/si-h3EMZPum7ZeFVKrM-JgEvS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0::/48
2a09:d000::/48
Signature Algorithm: sha256WithRSAEncryption
88:2d:54:0d:32:1f:b5:a5:33:f8:03:19:81:6b:b6:41:8f:4f:
d3:ae:b3:7b:d3:d9:57:e4:58:17:34:44:6a:a1:ac:48:0f:c1:
51:5b:a0:7c:c5:41:c1:e2:39:33:63:1b:04:0c:6a:93:51:11:
a7:0a:09:10:02:aa:5b:d3:3a:23:d9:ca:77:e7:d9:6a:a4:c7:
6f:ec:e8:9d:f9:ce:97:63:6c:8e:b8:a3:be:63:57:d2:31:55:
44:8b:96:e8:4a:8b:79:b7:b9:e4:66:bb:ff:bc:50:57:38:9d:
46:39:e4:80:c3:56:bb:d0:27:fe:f2:a3:d1:82:91:40:41:1c:
3c:1b:d3:7b:8e:96:e1:e4:a6:66:d3:76:75:63:f2:ce:2b:80:
c9:6e:3a:35:f7:1c:59:39:45:f5:1c:d6:a5:14:7e:33:0b:73:
ae:e8:c8:78:df:fc:d6:dd:f6:f3:4d:38:bb:29:df:57:af:d7:
c0:9a:86:d4:bc:95:5c:6c:63:b6:5d:20:16:f6:dd:b6:ba:3d:
1d:0f:03:fe:d7:6e:2d:c0:de:42:7f:4d:92:1a:21:50:1d:30:
1c:2f:a3:2b:a7:e0:1d:52:6e:04:f7:d3:97:5d:65:03:c0:ec:
91:fc:73:11:5b:24:a6:9e:bd:43:82:dc:64:22:55:b7:d3:16:
6f:de:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:06 2025 by rpki-client