Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6-815sbQ_gtZbrx-DXW0OTDaL-g.roa
File: 6-815sbQ_gtZbrx-DXW0OTDaL-g.roa (raw, json)
Hash identifier: GSm+6a//lgDMPfK7aoPKN4fXVkaF6S4bvs58gm8FP/M=
Subject key identifier: EB:EF:35:E6:C6:D0:FE:0B:59:6E:BC:7E:0D:75:B4:39:30:DA:2F:E8
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D985BF329E4CC5BB0A9695E6883F10
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6-815sbQ_gtZbrx-DXW0OTDaL-g.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203083
IP address blocks: 2a03:5840:290::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:85:bf:32:9e:4c:c5:bb:0a:96:95:e6:88:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebef35e6c6d0fe0b596ebc7e0d75b43930da2fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:35:fd:4c:18:57:1f:7b:95:33:27:13:48:
9c:17:48:bf:cd:09:f3:ce:42:a8:27:a2:b7:dd:26:
20:f5:41:e0:7e:07:ae:83:03:0d:36:87:d1:1b:e8:
3f:25:d7:53:2b:9a:f3:e4:e0:ce:a5:b3:57:43:0a:
2b:5b:c0:f2:e5:f2:09:00:2d:ac:54:09:15:62:f4:
c8:fd:7e:49:c8:f0:46:4a:af:2a:3b:8a:ae:2e:c2:
97:5d:66:00:e8:ce:4a:6a:66:57:a4:89:f9:59:c5:
5c:c7:3a:c8:c9:52:2d:12:59:ec:ec:fa:34:a8:5c:
5d:80:b4:8c:f9:46:17:19:ae:09:22:34:a5:66:d5:
7e:ac:4a:c6:20:45:8e:51:a2:e8:c9:15:ee:5e:16:
23:bd:3e:75:54:e2:23:e4:d0:ba:2b:7d:36:73:f6:
59:9d:cc:a1:39:34:22:90:0e:da:49:92:c2:5c:d6:
09:2b:50:af:de:d1:f0:45:cd:14:e6:dd:fe:38:5b:
59:36:b7:14:9e:77:b5:e5:88:dd:ef:14:2a:4f:cc:
ea:86:4f:14:31:61:f9:2a:51:d8:f0:8c:cb:06:b7:
e0:2b:06:5c:49:3c:9a:3b:0e:08:92:a5:7e:31:14:
2a:ad:56:e1:ed:98:65:7a:aa:3d:2c:1a:05:8d:22:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:35:E6:C6:D0:FE:0B:59:6E:BC:7E:0D:75:B4:39:30:DA:2F:E8
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6-815sbQ_gtZbrx-DXW0OTDaL-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:290::/44
Signature Algorithm: sha256WithRSAEncryption
26:38:ed:21:7e:80:9a:e2:ec:6c:53:50:98:f3:0c:2b:a8:a5:
1c:b0:d2:d1:01:23:c3:26:18:16:aa:f3:f5:d5:e4:0f:e9:56:
91:e2:47:35:75:ac:31:be:90:d0:62:81:c7:cb:94:87:99:3e:
8b:91:af:b1:7e:30:ec:21:93:33:99:cc:f0:95:eb:1e:26:d2:
11:db:a6:29:70:40:a0:39:ec:95:78:0b:82:b6:b2:5e:87:9c:
35:a4:65:ab:d1:1e:72:81:94:c6:e9:79:3e:e9:a1:28:0a:8f:
ed:21:5c:6a:a7:d9:4b:e6:f0:36:58:1e:7b:4c:40:51:e2:fc:
cf:62:33:b4:45:85:e7:86:e9:6c:f5:eb:7b:26:b9:8a:84:43:
97:b1:49:4d:e8:96:4e:06:de:6a:3d:63:f9:e5:e8:d4:2c:a3:
0f:e5:bc:82:d0:7c:80:96:11:5e:68:08:7d:0f:63:d5:4d:79:
1b:74:34:7f:fa:8b:9a:79:47:a2:7b:34:b9:98:83:c4:61:a5:
1f:d6:b4:c1:3b:8f:87:63:8c:72:58:f5:32:21:53:8f:a1:83:
58:7e:33:74:bd:a3:48:80:d4:cf:dd:c6:fa:8d:b5:88:c4:d0:
b4:3f:47:c2:90:3b:09:1e:65:0c:90:26:b2:e9:38:9d:b7:89:
f9:ae:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:34 2025 by rpki-client