Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/0kNkc387z7I2x4Yteehk0180PTE.roa
File: 0kNkc387z7I2x4Yteehk0180PTE.roa (raw, json)
Hash identifier: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=
Subject key identifier: D2:43:64:73:7F:3B:CF:B2:36:C7:86:2D:79:E8:64:D3:5F:34:3D:31
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019420D5A45BD8D71154B31FE58766B5AB82
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/0kNkc387z7I2x4Yteehk0180PTE.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41562
IP address blocks: 2a03:2040:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:5b:d8:d7:11:54:b3:1f:e5:87:66:b5:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24364737f3bcfb236c7862d79e864d35f343d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:37:e8:d9:db:77:fc:da:a8:fd:5c:f8:b2:
57:5b:4c:83:29:11:e7:4f:47:2b:58:eb:0f:1d:96:
50:71:f4:61:a8:3e:4b:54:b3:55:c4:02:a8:4b:02:
ad:73:c9:c4:e2:2d:d8:39:4f:80:b0:2a:3d:8a:6a:
4b:19:85:0a:35:a4:9c:55:d2:b7:80:67:8e:1a:d3:
f9:a9:3b:36:80:d5:a8:b9:81:77:fe:3e:a2:13:97:
36:aa:6d:6b:f3:ed:cd:40:ab:5d:5e:dd:76:21:ee:
35:55:83:af:83:87:c8:87:53:ee:f2:3c:36:26:97:
c4:d6:f0:28:20:e8:c3:87:f0:6e:1c:1c:38:07:bd:
59:2f:5f:48:c9:69:91:34:8e:44:dd:8e:57:06:31:
35:a7:24:45:c0:d8:ff:dc:1e:22:39:92:ea:b7:b0:
98:f5:e4:4a:5e:fc:18:df:b2:be:ec:a1:00:3d:a9:
b7:ae:d7:a3:40:b3:4c:fb:f3:1f:cd:2f:b8:05:f3:
8b:b2:4d:d5:8a:f9:a0:df:22:dc:71:03:8f:98:85:
a7:c5:cf:32:e2:3e:a4:44:1f:9f:73:b5:9f:3a:2f:
5a:34:63:01:19:3e:24:fe:30:db:e9:06:dd:c7:a7:
98:6c:91:d3:ed:e0:21:44:13:6c:53:c5:68:ab:09:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:43:64:73:7F:3B:CF:B2:36:C7:86:2D:79:E8:64:D3:5F:34:3D:31
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/0kNkc387z7I2x4Yteehk0180PTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2040:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
4a:c1:0b:b0:4c:52:9e:ed:9d:4e:86:38:69:53:1e:19:82:91:
da:b9:9f:3a:ac:76:30:a7:c8:27:e4:db:16:28:de:46:20:91:
e2:a4:74:df:ee:d5:64:70:55:e5:e3:77:ea:7c:88:6b:23:f1:
67:6b:d7:30:a0:3a:1d:53:e0:b1:7a:2c:60:23:de:b9:72:60:
c6:a6:0d:20:81:3a:c6:fe:63:17:5f:2d:11:38:1f:aa:3a:97:
51:33:bb:81:d0:9c:a9:d7:41:e9:d6:34:88:1c:e6:8b:5c:29:
55:bf:c2:24:2a:ce:17:d8:4c:97:0b:01:b0:2c:a9:1b:04:fe:
de:31:ed:84:e3:90:d0:7a:23:65:b2:c1:17:38:3c:62:70:22:
7f:27:1c:75:12:af:a0:34:7c:5c:d1:41:6e:b9:56:52:86:3b:
e1:6b:31:3b:4d:6d:1d:3c:df:69:d9:bf:7d:06:99:12:b2:bd:
53:bb:bf:a7:0b:49:49:6e:49:e2:70:af:0a:51:3a:cb:e4:aa:
df:7a:72:d0:c2:d2:4b:9a:2a:c9:fd:cd:72:11:b2:6e:a0:71:
a4:67:61:67:16:2c:2b:34:91:e9:1a:5c:7c:6c:06:7a:d8:1e:
c8:6f:9d:3c:ba:52:57:21:7f:bc:09:99:35:8a:37:14:ba:d9:
c6:de:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:13 2025 by rpki-client