Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/1-498Z7vh8fq99O9xScVcy6k-waA.roa
File: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (raw, json)
Hash identifier: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=
Subject key identifier: FB:8F:7C:67:BB:E1:F1:FA:BD:F4:EF:71:49:C5:5C:CB:A9:3E:C1:A0
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01942521BFB764FB8644A143DBF20B9EEC15
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/1-498Z7vh8fq99O9xScVcy6k-waA.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61292
IP address blocks: 2a05:e883::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:b7:64:fb:86:44:a1:43:db:f2:0b:9e:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb8f7c67bbe1f1fabdf4ef7149c55ccba93ec1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:a7:d2:36:49:4e:a7:7b:bb:79:ff:29:38:
84:99:0d:9b:74:9e:c3:bb:46:ed:8b:db:71:fa:70:
7e:32:b8:bb:18:88:5c:da:c1:81:1c:b0:c5:fc:2b:
62:7c:c1:3f:0e:a9:e8:4b:d9:25:c3:b3:dc:eb:13:
81:c7:58:cd:69:5d:ce:8d:d9:b5:a0:ec:15:d1:09:
3d:71:e1:94:e9:40:f4:e0:6d:26:48:1f:ce:3d:09:
f8:c8:a3:53:5b:e4:92:df:b6:e1:dc:79:2b:0c:45:
2e:41:6e:54:83:97:28:b1:17:47:42:0a:9f:be:98:
f7:56:cf:5d:0f:ed:d7:fa:de:ae:4b:07:05:45:05:
bf:b3:1f:5c:fa:c5:1d:4d:0f:82:28:1f:55:a8:07:
64:5a:34:35:2b:13:b6:c8:58:38:df:45:32:61:65:
a6:32:88:09:69:7f:46:ff:9a:32:8e:2a:e7:1f:b7:
b5:b6:3e:d6:d3:ab:bc:6c:e8:8c:8e:a6:5d:b7:46:
6d:17:99:99:59:14:6f:0d:ec:31:f6:a8:20:52:11:
e3:a9:89:2a:ee:54:b0:a4:50:b8:6a:ae:dc:21:4a:
7d:d4:63:cb:96:bc:57:71:64:e9:cb:79:77:6e:87:
c4:67:d6:86:2d:f0:40:43:17:b1:d3:75:50:f1:87:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:7C:67:BB:E1:F1:FA:BD:F4:EF:71:49:C5:5C:CB:A9:3E:C1:A0
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/1-498Z7vh8fq99O9xScVcy6k-waA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e883::/36
Signature Algorithm: sha256WithRSAEncryption
78:b3:06:b6:ae:6d:1b:ae:40:19:b9:49:97:74:33:97:95:8e:
66:63:c5:bd:3f:e5:e9:8f:21:6e:6e:9a:37:66:68:19:17:9c:
78:e9:ee:fa:74:19:20:ea:10:65:d3:f3:d3:ab:be:31:37:6b:
33:7d:ea:40:0b:67:59:0b:3f:f8:e8:80:48:4f:7f:f3:af:f6:
23:70:cd:77:61:bb:49:7e:d9:73:50:27:9a:57:b5:3d:da:e8:
8a:45:f7:fb:f7:65:71:6f:7f:7a:f0:da:13:88:88:1d:90:cf:
92:b8:58:40:54:0c:23:e3:b2:3f:44:2f:ce:53:d4:3b:2d:6f:
a1:0f:1a:69:45:bc:1b:ef:4f:6f:a3:f7:4e:62:fb:a8:8e:80:
51:bf:77:af:ab:c7:b6:d6:5d:34:df:1d:ce:40:88:fd:73:81:
de:1f:c9:1a:e0:b1:17:00:f9:8c:7f:d2:be:55:fd:ba:d6:f0:
f5:fb:01:08:60:e0:3b:ae:51:0f:56:60:32:19:96:30:08:05:
63:9b:17:40:65:97:6a:64:cb:74:f0:aa:1f:b7:2c:c7:9f:03:
58:82:00:79:14:3b:77:96:d6:1d:85:e6:53:bd:78:b0:7d:25:
50:20:d7:1f:cf:56:16:1c:65:ec:e2:c6:3f:40:71:06:c9:b6:
ab:c8:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:00 2025 by rpki-client