Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6NUzhdPLOTimUoPxeMPLM0W-THw.roa
File: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (raw, json)
Hash identifier: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=
Subject key identifier: E8:D5:33:85:D3:CB:39:38:A6:52:83:F1:78:C3:CB:33:45:BE:4C:7C
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 0194252183C058C58943937E77E103139BD9
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6NUzhdPLOTimUoPxeMPLM0W-THw.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34019
IP address blocks: 2001:7a8:800::/47 maxlen: 47
2001:7a8:810::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:c0:58:c5:89:43:93:7e:77:e1:03:13:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d53385d3cb3938a65283f178c3cb3345be4c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:be:90:a2:61:86:c4:32:02:20:10:e5:0d:
a2:5f:95:01:9c:54:fa:06:c3:c2:65:37:d3:43:6e:
6a:95:16:1b:83:6c:b3:9b:8c:35:e3:a0:2e:6f:21:
fb:ba:19:aa:b9:e6:5d:8b:76:ae:d6:85:4d:87:bd:
94:7f:37:55:65:11:1d:39:98:17:0c:a5:20:d1:01:
25:4f:b5:8d:1b:2c:b1:1d:d1:71:be:58:45:6e:de:
94:b4:b1:4f:b0:b5:db:dc:39:8f:41:04:4e:80:a5:
70:04:fc:b6:0d:b3:9a:19:2d:0e:b2:73:65:89:c8:
60:4d:f5:5a:6e:61:86:bf:f2:fd:55:b1:91:56:b4:
ea:54:12:2d:99:af:2c:e5:2b:21:51:f1:3d:6d:bc:
c4:7f:28:95:8c:a8:8a:0e:f3:9f:f1:a0:3d:50:f4:
b2:2c:5e:87:cd:50:ae:a6:15:60:b9:8e:b9:9a:82:
c7:9f:a7:c4:33:ff:52:4f:2b:3d:f7:26:d9:8a:a8:
ea:13:7b:18:c6:b7:37:ad:2d:17:2a:22:2a:66:9b:
ca:83:5c:3a:c4:d4:b0:41:67:b7:0c:c0:dd:5b:8b:
4e:25:9b:de:29:9e:27:b7:ef:e4:2f:a6:dc:d7:01:
ad:3f:fd:19:b1:6f:21:95:cd:fc:18:d0:8f:b5:f9:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:33:85:D3:CB:39:38:A6:52:83:F1:78:C3:CB:33:45:BE:4C:7C
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/6NUzhdPLOTimUoPxeMPLM0W-THw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7a8:800::/47
2001:7a8:810::/44
Signature Algorithm: sha256WithRSAEncryption
83:7d:59:7a:89:98:10:90:b6:df:63:95:8a:3e:a1:b1:af:52:
5e:2e:38:92:f3:46:e0:31:90:57:36:c8:ec:11:99:5a:32:5e:
fc:b8:0d:1f:53:d6:36:0a:86:df:31:63:be:5f:f4:cd:12:fd:
5a:c7:6e:93:49:1f:6b:e1:ae:f8:a5:6c:c1:bd:de:40:05:b9:
12:3a:cb:b6:7f:e5:3a:03:39:ef:38:0e:2f:67:7a:cd:83:d1:
05:1e:e0:74:3d:d6:b4:ff:e6:83:db:9b:54:6a:9f:7f:a1:db:
c5:fc:c8:e0:3c:1c:0d:6a:9f:46:c6:9a:5f:56:57:cb:bd:e2:
63:17:d3:b7:bc:f4:41:51:8c:4e:50:5a:36:52:0f:01:a4:4b:
66:b0:e9:f8:eb:27:5e:05:14:f1:2e:99:a4:c5:a9:8e:8f:6e:
c2:9f:03:45:f3:b4:31:2d:a7:0a:28:73:33:25:d1:4e:2b:65:
32:e0:2a:83:cb:47:fe:d8:26:e0:ea:f3:04:2b:6d:1d:dd:78:
ee:96:d3:77:b0:51:c0:e3:84:f0:11:2a:10:2c:84:2a:a7:7b:
2c:1b:3d:c6:ad:76:7e:2b:1e:11:6c:d0:98:71:9a:c5:4d:de:
41:8a:c3:a8:48:6d:36:ed:fa:a2:1e:a0:40:5f:2b:e4:cd:ee:
7f:39:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:21 2025 by rpki-client