Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/KdP10NQIkPLpYDe8EkDADSXJabc.roa
File: KdP10NQIkPLpYDe8EkDADSXJabc.roa (raw, json)
Hash identifier: LC+AJP/I8a/FE7wz/g24eng4x/BJmIRbXCjgAdN0xAo=
Subject key identifier: 29:D3:F5:D0:D4:08:90:F2:E9:60:37:BC:12:40:C0:0D:25:C9:69:B7
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019424B27848D7980CEC0AAEC65CF964B37A
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/KdP10NQIkPLpYDe8EkDADSXJabc.roa
Signing time: Thu 02 Jan 2025 01:47:43 +0000
ROA not before: Thu 02 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:2080::/28 maxlen: 28
2001:2093::/32 maxlen: 32
2001:2094::/30 maxlen: 30
2001:2098::/29 maxlen: 29
2001:20a0::/27 maxlen: 27
2001:20c0::/26 maxlen: 26
2001:2100::/24 maxlen: 24
2001:2200::/23 maxlen: 23
2001:2400::/22 maxlen: 22
2001:2800::/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:78:48:d7:98:0c:ec:0a:ae:c6:5c:f9:64:b3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d3f5d0d40890f2e96037bc1240c00d25c969b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:d8:90:30:7c:a9:32:4b:96:13:e5:94:d2:
19:45:b6:f8:b9:4d:a7:51:9f:fe:26:3b:7d:46:07:
b2:36:c3:df:7c:c9:31:c0:88:9d:6e:0a:61:ce:8d:
40:4e:9d:71:a1:b5:29:ab:73:bb:91:51:af:46:25:
99:7d:f0:94:e3:0c:56:10:74:e6:19:88:08:2e:6e:
49:4e:6e:b4:78:99:27:31:e7:f4:48:56:04:f6:c0:
8b:24:68:1e:31:1f:d1:66:f6:69:51:dd:c7:f6:95:
29:ae:ba:6c:7e:76:86:2d:8b:50:ee:42:02:ce:ed:
46:93:1d:d1:b7:82:d7:5c:95:8e:b9:86:6d:88:f3:
df:f4:88:56:f7:15:66:cb:eb:ab:8a:3a:dd:76:3d:
52:4d:b3:1f:ee:b9:89:04:35:6a:f5:fa:35:5f:52:
43:8b:ea:04:74:12:ef:13:ae:6d:41:8f:c3:e5:07:
b8:eb:d7:61:07:91:03:1c:14:22:6d:7f:73:31:47:
08:3a:1c:14:0c:89:84:a8:a9:e9:3f:1c:37:7d:e4:
36:ff:92:9d:c7:53:7c:9f:48:a8:03:41:d7:12:86:
2b:7d:89:19:19:e7:39:48:e8:46:cf:c4:1a:ce:2a:
de:0f:f3:72:97:a6:72:43:19:46:af:2f:f9:f0:3d:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:F5:D0:D4:08:90:F2:E9:60:37:BC:12:40:C0:0D:25:C9:69:B7
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/KdP10NQIkPLpYDe8EkDADSXJabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2080::/28
2001:2093::-2001:2fff:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:c5:46:d7:2e:23:01:4a:d3:71:7f:52:e8:ba:8f:f0:68:ce:
8e:a9:84:6b:c8:5a:02:e9:d8:ce:aa:5f:0a:27:54:67:d7:94:
f0:19:42:9d:21:28:ec:7c:28:55:63:03:e1:74:cf:9d:df:d9:
fd:24:f2:54:58:49:61:da:d1:bf:b4:d7:d8:0c:88:b7:cb:b8:
57:fb:af:9e:86:0f:9d:58:c2:19:b9:b6:f7:88:72:68:4f:e0:
81:31:d8:e9:cc:38:24:7d:3c:01:ca:9e:18:2b:b4:2b:8c:3b:
4c:ea:79:ce:68:3a:7e:e6:d0:ad:55:4c:ca:b7:04:ff:51:b0:
cb:b5:21:69:8f:35:73:cd:33:a0:67:f8:8a:aa:40:4c:ec:6b:
93:8c:87:20:4f:55:08:b4:9c:7f:42:47:32:ad:06:f5:98:02:
d2:44:54:9a:7b:fa:16:17:66:97:e7:1d:76:f9:71:81:dc:95:
f3:de:4e:f6:21:f6:34:fe:a4:8e:7f:81:56:d5:5d:09:85:86:
c2:75:6f:c8:b3:fe:25:b2:ae:12:ac:a1:70:ba:03:7d:f6:94:
cf:89:c9:79:5d:8c:97:56:06:32:cc:3d:c3:25:e2:30:64:4d:
27:bc:06:88:5b:41:9a:fe:8e:de:92:46:3f:42:02:3c:db:e4:
27:3d:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:41 2025 by rpki-client