Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8Bq8NrYqb-lUWdlswhr61eBzmt0.roa
File: 8Bq8NrYqb-lUWdlswhr61eBzmt0.roa (raw, json)
Hash identifier: aXudeXmCPp5fQRTZASdnzqcsAUAR94FOMw3z4A2htIc=
Subject key identifier: F0:1A:BC:36:B6:2A:6F:E9:54:59:D9:6C:C2:1A:FA:D5:E0:73:9A:DD
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ECC59251F25CF97B75E860C361C70
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8Bq8NrYqb-lUWdlswhr61eBzmt0.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149007
IP address blocks: 2a0e:aa07:e300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cc:59:25:1f:25:cf:97:b7:5e:86:0c:36:1c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f01abc36b62a6fe95459d96cc21afad5e0739add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:8c:d0:48:33:8f:72:70:e6:0c:63:7a:8d:
d9:87:f5:f5:42:41:80:56:5a:63:3d:a3:e2:38:1a:
a0:06:62:52:f4:35:81:71:1a:8c:e4:7e:dd:59:eb:
e2:20:2f:ec:ec:c1:d4:1a:ee:29:04:a4:31:8b:1d:
d2:bb:8c:03:10:c6:65:1d:7e:0c:83:ef:be:63:c4:
58:c4:81:40:91:96:a5:83:40:c0:6d:e0:5f:05:16:
00:12:7a:c2:f8:51:e3:f5:95:cf:43:4d:00:01:82:
87:b2:e4:b3:09:c7:45:13:e0:db:ba:16:02:52:31:
2c:d3:76:d5:d8:81:ff:f7:b1:e2:03:e3:8e:d5:79:
fc:43:6d:87:4e:c2:59:5c:19:2b:3e:e9:a0:22:7d:
64:0a:01:d2:c3:3b:b6:c4:d8:ce:db:02:40:e7:af:
dd:a0:ee:a8:48:e8:e2:7b:de:ee:19:53:fd:b8:e9:
ce:d4:97:84:9c:c3:1b:fa:1c:d8:d8:06:5b:20:9b:
82:db:6a:97:30:29:59:d2:e4:a8:e3:b1:73:59:8d:
e4:43:e8:a8:2d:6f:e1:09:f2:a1:32:21:9f:34:60:
ec:fa:9c:66:6f:07:5c:7d:f9:2d:e3:72:df:69:58:
48:31:eb:38:b4:26:0a:eb:c4:14:94:0b:57:00:24:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:BC:36:B6:2A:6F:E9:54:59:D9:6C:C2:1A:FA:D5:E0:73:9A:DD
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8Bq8NrYqb-lUWdlswhr61eBzmt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e300::/48
Signature Algorithm: sha256WithRSAEncryption
b7:ba:09:eb:5c:0c:dc:77:a2:d7:bb:5d:3b:d5:93:4a:5c:f5:
89:ba:55:6b:eb:8b:28:f4:56:31:09:e9:05:83:60:f7:6c:01:
c4:6a:65:50:08:67:90:5e:e3:0a:6c:a8:bb:b5:95:89:78:18:
8a:9a:2d:93:27:59:19:e9:a7:21:00:a2:c0:93:95:db:8e:4b:
2b:87:8a:9c:e8:2b:21:49:9f:a9:30:43:83:45:f6:f0:94:13:
7f:89:98:32:50:7f:b6:dd:5a:88:f1:b3:f1:26:3c:55:23:3f:
3a:a4:ff:a2:c3:9d:ca:99:5f:ec:2d:f6:70:17:81:a7:93:cf:
16:17:23:01:de:cb:b1:ff:71:c5:a9:d0:4e:ac:de:90:2d:d1:
a2:76:f6:71:e7:bc:b4:d2:85:31:32:83:b4:89:62:0c:c8:c5:
aa:85:10:3a:a6:5e:f2:4b:ea:15:cf:65:2c:d0:e2:5d:25:36:
f1:fd:e4:4f:5d:e6:21:03:36:00:33:90:0f:1e:25:ac:56:45:
3a:fb:d3:b7:44:29:61:4a:ef:f0:d4:02:e5:1e:93:b5:10:de:
8d:03:a5:ca:ac:8f:82:e8:30:74:2a:bf:d2:a2:a4:f0:a2:20:
f1:9c:21:d3:0d:26:ec:17:75:89:8a:39:8b:16:6f:9b:9c:a9:
f4:0b:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:00 2025 by rpki-client