Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/4QLia7FxnBTzrBWh2rXszBzsZXE.roa
File: 4QLia7FxnBTzrBWh2rXszBzsZXE.roa (raw, json)
Hash identifier: 4aQTpbccaIcRf6qv6KWWXLl0AprwkUt0p/UTHHsG+TA=
Subject key identifier: E1:02:E2:6B:B1:71:9C:14:F3:AC:15:A1:DA:B5:EC:CC:1C:EC:65:71
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0194963CFB701D7B34609CC07D41BD0A3EC9
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/4QLia7FxnBTzrBWh2rXszBzsZXE.roa
Signing time: Fri 24 Jan 2025 02:56:06 +0000
ROA not before: Fri 24 Jan 2025 02:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a09:a380:100::/40 maxlen: 40
2a09:a380:200::/40 maxlen: 40
2a09:a380:300::/40 maxlen: 40
2a09:a380:400::/40 maxlen: 40
2a09:a380:500::/40 maxlen: 40
2a09:a380:600::/40 maxlen: 40
2a09:a380:700::/40 maxlen: 40
2a09:a380:800::/40 maxlen: 40
2a09:a380:900::/40 maxlen: 40
2a09:a380:a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:96:3c:fb:70:1d:7b:34:60:9c:c0:7d:41:bd:0a:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Jan 24 02:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e102e26bb1719c14f3ac15a1dab5eccc1cec6571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:c5:16:5f:41:f2:55:cd:36:ae:62:fa:39:
2e:bb:ac:37:48:08:f9:b0:f7:37:60:b0:a7:f8:a0:
19:40:fc:6a:b6:87:88:65:42:2e:39:8a:13:c0:7c:
44:ac:a7:5e:29:fb:5a:77:38:73:07:3f:16:5c:27:
2c:c9:38:65:6f:3a:47:1d:9c:09:e7:39:92:75:ce:
4f:b9:5f:ef:7d:3a:e9:e7:7e:54:98:f4:2b:9a:09:
5f:c5:11:c9:4e:f5:88:06:19:1c:22:9d:b3:57:43:
38:a6:d3:ed:10:b0:d6:bf:34:b1:16:97:44:13:a8:
a2:87:e0:69:35:6c:c4:2a:06:df:a3:46:31:66:fc:
97:2f:2a:11:17:dc:f6:33:c4:b4:6c:99:d4:be:9b:
a7:05:ec:49:9e:8b:c2:c6:65:c5:4b:3f:d3:46:88:
70:b3:8e:77:01:34:8c:1e:14:79:34:d7:b3:b5:8d:
4c:0d:a1:c1:60:b5:a2:8e:65:aa:9f:9c:99:3f:5f:
8d:e3:4f:59:c1:08:c0:64:a1:2b:67:59:e4:77:44:
6e:3b:de:f8:48:df:2b:90:13:b6:38:3d:d7:08:78:
6e:93:5b:ae:97:11:ce:81:51:ba:9a:e5:c0:74:bf:
47:1f:16:7d:fa:fb:b0:c6:4c:f2:e7:e8:f6:aa:e9:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:02:E2:6B:B1:71:9C:14:F3:AC:15:A1:DA:B5:EC:CC:1C:EC:65:71
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/4QLia7FxnBTzrBWh2rXszBzsZXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a380:100::-2a09:a380:aff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:63:0f:21:94:52:56:c8:3d:9d:0d:f1:40:56:9c:88:02:f8:
f4:7a:a3:fe:31:22:f1:61:ce:5b:df:57:b0:5a:64:83:6c:24:
68:51:e9:48:d7:fc:e9:f5:ff:5a:3b:3a:c6:40:34:b3:86:a8:
d2:9a:bc:3c:61:69:ad:82:eb:d3:28:70:61:b6:4c:18:ac:ca:
dc:f8:b3:c2:da:42:94:61:03:91:95:73:3b:91:e8:ac:ab:5d:
f4:a2:0a:4e:19:d2:cd:cb:ee:d4:56:39:42:49:5f:86:d4:6a:
01:82:80:18:d7:77:64:e7:90:12:07:14:e5:ad:b6:75:33:ca:
28:f2:d1:07:1c:a1:95:99:27:cc:37:88:b1:ac:23:e5:67:45:
a7:a4:7a:5c:12:1a:e3:db:9f:07:16:b9:a5:e1:56:1f:03:3c:
21:42:5b:c3:c0:4c:eb:31:57:fa:98:92:00:4c:2a:23:87:01:
50:fc:c3:81:c3:fe:85:3e:77:4f:35:7d:58:9e:12:a7:68:12:
23:1a:49:36:51:c9:53:39:2c:d5:eb:7a:93:f9:c5:3f:66:b5:
e1:f6:d5:62:c5:be:af:3b:6c:4a:21:56:ad:f9:3d:7b:03:b8:
1c:6b:56:32:ad:56:82:b3:47:06:9f:91:57:e6:60:cc:f2:2e:
58:fa:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:42 2025 by rpki-client