Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa
File: CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa (raw, json)
Hash identifier: oCKOi7GJALUFPXeLK9MWcGccq1tZ9vcEgFN5xNZTkgo=
Subject key identifier: 09:57:B1:09:96:5C:AE:1F:59:70:F3:68:1A:51:A3:EA:0D:9C:3C:D6
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 019423D743CF499112C5640E43B3B233731E
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204680
IP address blocks: 2a00:139b::/32 maxlen: 32
2a00:139b:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:43:cf:49:91:12:c5:64:0e:43:b3:b2:33:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0957b109965cae1f5970f3681a51a3ea0d9c3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:00:ab:04:09:86:29:28:42:32:73:ae:b8:
c0:0f:39:d3:8a:4a:45:db:50:ae:30:db:2f:85:c4:
de:29:70:21:7c:12:26:d7:b1:e7:a0:81:2c:99:5c:
45:68:be:41:65:95:0f:2b:70:27:e2:cf:5c:6e:11:
5b:a1:fc:ff:58:d1:85:91:9a:bc:8e:9b:6b:d3:9d:
6f:d7:12:6e:0e:c4:3d:29:31:0a:2c:19:e8:16:b4:
dc:17:4f:ce:1f:10:4d:79:f9:74:04:d0:ff:e1:e0:
64:75:53:b0:68:c6:f4:34:5b:5e:f4:f4:88:75:ce:
b3:89:21:96:ef:79:ae:e2:4e:b8:5d:c4:04:c4:3c:
e1:2d:0c:14:88:65:12:f4:a7:5d:52:f6:6b:5b:3f:
2e:0d:90:7d:fb:0f:d3:62:0a:8a:d5:4d:19:8d:75:
a1:bc:69:f6:ac:56:61:d2:06:67:df:04:8e:bb:99:
c3:b2:fe:4b:1f:42:a5:03:82:d6:9c:41:83:81:10:
89:a6:2c:ca:9a:5e:24:a2:3a:d0:06:0f:46:e7:81:
ba:f7:e8:d3:37:f2:20:87:67:ab:d3:7c:a0:82:db:
cf:45:cf:0a:e9:d4:6e:7d:80:e5:88:80:22:78:9a:
4b:2b:d0:39:7f:65:f0:24:08:ee:8f:2d:48:ee:cb:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:B1:09:96:5C:AE:1F:59:70:F3:68:1A:51:A3:EA:0D:9C:3C:D6
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:139b::/32
Signature Algorithm: sha256WithRSAEncryption
39:9b:11:38:f4:e3:be:33:fd:24:92:17:ed:ed:92:f3:07:cb:
cc:88:39:34:62:01:d4:fc:02:66:27:bb:3a:45:82:b8:b1:dd:
0e:25:db:5e:c6:19:e3:ee:4e:06:92:7a:ae:9f:1f:29:c9:8b:
e3:c1:00:a6:7a:c8:f2:24:b7:27:81:03:f6:58:19:56:f8:4a:
8c:59:d1:67:15:0c:96:a3:05:72:4e:ad:fd:9d:aa:28:b7:a5:
88:e6:e7:5f:39:02:07:87:1e:12:dc:e5:f9:3b:85:03:3e:56:
ff:7d:45:00:5d:c4:9d:d5:ba:45:2e:c0:e5:ec:cb:d7:e0:23:
92:1f:01:2c:95:b0:08:f0:8b:71:a8:72:72:f9:16:bb:93:a3:
ef:bd:3d:b0:ca:e0:5d:29:89:66:6c:63:3d:5d:68:24:c9:fa:
05:3d:41:e4:d3:81:28:4a:cb:1c:8f:36:9e:6d:05:2a:9c:d6:
a4:ff:86:c3:22:fd:87:5d:4b:c4:98:d4:e0:7f:c3:29:20:df:
fb:7a:d0:f9:1e:63:84:38:cb:0b:fd:ba:36:c0:7f:cf:6b:2e:
09:ad:d4:a0:d2:65:7a:aa:13:42:c6:4a:df:19:d3:49:84:8e:
e8:64:90:71:2d:0b:9c:d7:a3:31:9a:8d:bf:38:8c:5b:7c:6e:
4b:5f:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:44 2025 by rpki-client