Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/b9wkPnLySz-ATLfF0ql-d4ycVn8.roa
File: b9wkPnLySz-ATLfF0ql-d4ycVn8.roa (raw, json)
Hash identifier: 9oUyMaJaRwmTAQVIcoe9p1Xl0C9S5KqKUeBPGeCZniU=
Subject key identifier: 6F:DC:24:3E:72:F2:4B:3F:80:4C:B7:C5:D2:A9:7E:77:8C:9C:56:7F
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0194B22A5694088017CAB2DE497C268347EE
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/b9wkPnLySz-ATLfF0ql-d4ycVn8.roa
Signing time: Wed 29 Jan 2025 13:05:06 +0000
ROA not before: Wed 29 Jan 2025 13:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200291
IP address blocks: 2a00:fe00:6000::/36 maxlen: 36
2a00:fe00:6000::/38 maxlen: 38
2a00:fe00:6800::/38 maxlen: 38
2a00:fe00:a000::/36 maxlen: 36
2a00:fe00:a000::/38 maxlen: 38
2a00:fe00:a400::/38 maxlen: 38
2a00:fe00:a800::/38 maxlen: 38
2a00:fe00:ac00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:2a:56:94:08:80:17:ca:b2:de:49:7c:26:83:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 29 13:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdc243e72f24b3f804cb7c5d2a97e778c9c567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:ee:23:56:e4:ec:33:a5:8d:a4:d8:e8:82:
36:85:3f:55:61:18:b9:34:0c:20:3e:f3:61:a2:4c:
1c:43:db:2b:df:74:9f:e2:c0:e3:19:33:53:ce:a7:
94:81:43:9f:97:64:16:69:6e:5b:f3:b8:ea:ed:a7:
c1:be:b1:be:ba:4d:4f:e3:85:15:2a:89:5b:fe:3f:
80:89:3e:e1:09:71:49:b6:8a:03:cc:5e:2b:2e:25:
29:63:88:92:fc:9b:23:b7:33:c1:08:a0:5c:68:38:
1b:d9:75:dc:55:ee:13:34:55:9d:86:0e:0c:94:4d:
93:6d:d2:28:1a:57:7f:08:ab:b0:5e:15:79:42:1f:
79:ab:f9:7e:61:ad:20:8c:42:b3:1d:ec:3a:f7:85:
84:47:f4:dc:92:56:16:19:a5:cd:6b:75:f3:70:02:
f8:b6:47:db:13:d6:08:f5:fa:35:8c:59:ce:4e:35:
fc:eb:72:85:7c:17:53:9e:2a:79:94:bd:02:ef:4e:
7f:12:87:7e:23:d4:4d:63:bb:69:f3:d6:90:10:dc:
af:d6:2b:ab:10:f7:f1:8f:30:6f:8c:57:d9:76:35:
c5:01:b8:99:15:10:b8:9f:61:74:bf:00:eb:dd:26:
8a:09:da:70:84:05:de:66:9c:af:52:55:28:b5:9f:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:24:3E:72:F2:4B:3F:80:4C:B7:C5:D2:A9:7E:77:8C:9C:56:7F
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/b9wkPnLySz-ATLfF0ql-d4ycVn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fe00:6000::/36
2a00:fe00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:07:78:e6:b1:65:bb:bb:d1:37:b1:e2:78:2c:1a:c9:a6:d1:
19:1b:49:e6:ed:82:42:ff:a5:e5:ab:15:c9:11:53:66:32:6d:
e1:f0:b7:82:5c:4e:c8:5f:e8:f6:70:9b:d5:ef:c8:ba:14:4f:
54:e0:0a:7b:2d:8d:2a:6c:61:5d:dd:d2:1e:21:c6:17:e9:c6:
63:2c:1e:87:43:4f:a4:34:58:13:97:25:16:06:67:79:c3:27:
0c:44:1a:d6:44:9d:01:8d:68:66:ac:41:64:f8:45:ba:23:e7:
37:9b:b1:e8:f5:83:cf:e3:cb:1f:89:1a:f6:3b:1d:00:a1:64:
fd:ca:e8:e9:12:b1:ed:56:a5:5c:2a:d7:39:75:e7:c9:7b:9c:
4c:8c:17:06:53:34:91:61:65:20:63:e1:cb:19:17:8f:51:6c:
6e:d7:24:ed:1d:b7:37:25:9a:9f:be:e8:8c:23:4d:08:a7:c1:
1d:e7:84:62:80:ae:4c:bb:00:3e:2f:a3:63:8b:8d:71:7e:21:
f8:17:56:1c:1e:44:8e:97:6c:74:ba:ee:96:02:ac:c0:31:9f:
d2:13:88:15:65:67:d2:69:e5:65:2b:77:a6:b3:56:03:77:5b:
3d:49:ea:6c:a0:a8:63:80:00:5f:d7:10:dc:be:0a:b2:5b:cd:
e7:9b:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:00 2025 by rpki-client