Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/s4AKgCvHin14a0p0jz13CHksENw.roa
File: s4AKgCvHin14a0p0jz13CHksENw.roa (raw, json)
Hash identifier: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=
Subject key identifier: B3:80:0A:80:2B:C7:8A:7D:78:6B:4A:74:8F:3D:77:08:79:2C:10:DC
Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial: 0194258F6B5E708F179CD4DFDD40543AFDF2
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/s4AKgCvHin14a0p0jz13CHksENw.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197569
IP address blocks: 2001:67c:2f8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6b:5e:70:8f:17:9c:d4:df:dd:40:54:3a:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3800a802bc78a7d786b4a748f3d7708792c10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:fc:8e:8d:41:45:83:93:0c:01:71:a2:75:
4c:6d:eb:e1:f7:ba:41:52:44:d0:64:a6:57:e3:e2:
3f:8b:c8:01:5e:36:1e:a8:9d:a8:7a:59:2c:4b:f5:
65:ef:48:ff:79:f0:b9:be:06:67:77:49:cc:de:08:
e7:f4:d5:b5:2d:19:fc:e9:bd:97:41:97:ef:58:b0:
99:8e:1e:09:cd:38:76:d7:a3:31:58:33:3d:3c:c9:
42:e6:5d:f0:ed:da:ae:ce:02:9a:94:5f:2d:92:f1:
3d:2f:bc:d8:bd:99:f8:76:cd:90:08:cc:b4:24:c1:
b2:bb:23:51:63:35:69:e8:74:51:51:d2:e5:9d:3f:
13:81:1e:b3:bf:88:2e:0d:be:4d:4d:fc:fc:e2:69:
41:58:07:63:87:85:38:d1:b7:39:5e:4d:b3:26:e0:
68:46:ae:33:18:c6:cb:20:f3:94:20:a1:9a:64:34:
cb:46:53:f9:e9:92:84:87:5f:f2:25:dd:85:61:ca:
c0:e5:76:07:70:fa:0c:59:f6:a3:f1:f2:19:5e:1c:
04:c4:8d:66:07:b6:d1:11:e7:b7:94:18:35:b4:d1:
8f:44:7f:8c:90:6c:a2:0e:c3:b9:ec:69:93:42:c0:
f6:04:4a:c8:64:e7:d5:07:aa:53:40:6a:66:a1:76:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:0A:80:2B:C7:8A:7D:78:6B:4A:74:8F:3D:77:08:79:2C:10:DC
X509v3 Authority Key Identifier:
keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/s4AKgCvHin14a0p0jz13CHksENw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f8c::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7e:75:57:40:6c:b4:48:2d:47:46:70:c9:24:89:87:80:31:
2a:9b:23:be:82:0e:87:6d:43:06:35:18:7b:92:8b:3e:bf:46:
a0:12:9d:f8:80:00:04:2f:94:44:2b:ea:80:68:8c:51:ab:4e:
e6:30:26:23:f7:9f:12:18:fa:8c:57:d1:81:2a:b0:d5:c9:85:
dd:0e:6c:f0:ff:1e:bf:45:dd:33:c9:e8:40:95:09:91:dc:3a:
56:e1:e5:61:48:e2:c3:97:71:ee:80:df:10:f6:cc:e9:38:dc:
90:af:d8:3d:e8:8c:ec:13:33:60:b3:66:06:25:a4:4a:62:47:
d8:ec:89:ea:5f:a2:47:b9:62:b1:bd:6e:84:2f:42:b6:5c:bb:
bc:9b:22:f1:5c:11:c2:17:eb:81:34:a7:f1:31:f3:40:e0:d1:
ae:56:cc:c9:76:b5:89:c0:23:eb:31:d5:99:25:bc:7b:20:76:
8e:a5:7e:22:d1:b5:e3:94:03:79:9c:9f:2e:b7:37:9f:3d:d3:
e2:32:41:c7:72:a4:ef:9c:81:ab:2c:cc:b4:fd:44:b6:ed:cd:
11:57:dd:b7:bc:28:c4:bb:b4:4b:f8:f6:c7:41:eb:6e:a7:d3:
b4:43:35:2c:6c:57:dc:13:7e:c6:be:96:90:86:52:2b:19:65:
39:2a:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:54 2025 by rpki-client