Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa
File: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (raw, json)
Hash identifier: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=
Subject key identifier: 80:09:D3:0F:48:8D:AF:B9:B5:AF:5A:58:45:A6:80:E5:F5:C7:87:EB
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01941F8CA3E33EAF14F2DEBFEBD662AE8303
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:e3:3e:af:14:f2:de:bf:eb:d6:62:ae:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8009d30f488dafb9b5af5a5845a680e5f5c787eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:1b:17:56:96:57:ff:92:4a:cf:a0:22:06:
b2:46:76:a8:ca:37:c6:0c:02:e1:2b:e9:c2:53:35:
21:70:e8:a7:41:25:5f:33:19:7e:9c:f7:95:e2:33:
ea:7e:d9:06:99:51:c9:1d:e4:80:f8:16:1d:2f:f1:
59:e7:1e:70:95:22:cf:70:11:e0:3a:8f:91:a6:95:
18:47:3b:87:c9:ed:87:f3:a3:af:80:ac:6d:56:d3:
81:cb:3a:6c:e1:88:38:72:4d:8d:0a:13:c4:48:45:
f2:d5:7d:92:f0:49:21:17:ae:9b:37:13:b2:01:a5:
83:8b:15:65:ea:53:f9:12:f6:e0:e9:fb:60:ff:5d:
0e:e3:58:47:8f:62:c7:ef:bc:e8:f3:9c:34:d1:ba:
7d:38:a1:32:53:5a:69:1f:64:64:45:4c:49:0c:4b:
ea:6d:b6:fe:cb:57:58:e8:b6:df:21:9e:6f:0b:85:
ad:37:fd:13:7a:b5:a0:6a:76:49:06:50:83:b2:2b:
b6:45:e5:99:74:65:cf:ef:3b:0f:8c:96:42:76:96:
94:f7:20:7e:77:a4:54:bc:0c:df:4e:36:7b:1d:fd:
9f:d9:f7:86:91:50:b5:00:bd:38:32:b0:f5:0b:bc:
3e:e3:98:64:a3:ac:23:98:3c:8b:40:ea:da:25:fb:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:D3:0F:48:8D:AF:B9:B5:AF:5A:58:45:A6:80:E5:F5:C7:87:EB
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:25:c2:ae:ab:b9:e9:ca:73:69:93:6c:6c:7e:d4:b7:bb:d6:
68:6f:97:8a:d2:70:a6:da:a3:d2:61:f4:19:f0:7f:3d:de:38:
9d:f8:5b:6f:0b:76:06:95:0d:50:78:43:6e:95:3b:69:1c:6d:
29:91:2f:d4:9a:33:3e:36:b1:28:e7:e5:8c:94:7f:c6:2e:dc:
48:07:90:75:4b:a1:c2:3f:f0:c1:90:d2:36:79:73:93:81:8d:
6d:4c:b8:88:b9:83:a3:c6:a0:89:07:4d:88:ff:34:d8:dc:66:
b4:5a:57:48:6f:06:4c:ea:74:8a:b6:a1:5b:76:d6:d6:31:3f:
93:71:b2:42:f6:51:ef:d4:60:db:56:00:99:4f:14:9b:73:d5:
40:e3:d5:73:77:2e:ee:90:23:3a:cc:4d:0b:ec:45:48:08:15:
83:fb:3e:bc:28:16:76:9b:6f:bd:e9:42:a5:0e:09:69:85:cf:
f0:ed:4f:ef:8d:a4:9b:f3:b0:ee:70:76:19:3a:bc:d4:8e:fe:
95:61:9e:36:ee:ce:9e:ed:c5:46:d7:d0:88:7a:08:45:9c:6b:
a4:b8:95:64:3d:59:81:42:55:72:9c:9e:32:9a:0b:1c:4f:9b:
9f:ef:97:10:22:cf:cb:7a:79:92:d1:ff:78:a5:8f:96:f9:e4:
5b:2e:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:22 2025 by rpki-client