Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jPUOn6unGxOXNyP0wLNgFLf9zaI.roa
File: jPUOn6unGxOXNyP0wLNgFLf9zaI.roa (raw, json)
Hash identifier: 4pdIemb0H73HmdQHXC8SynBsaZWGGJ2x3MWXR4Pr754=
Subject key identifier: 8C:F5:0E:9F:AB:A7:1B:13:97:37:23:F4:C0:B3:60:14:B7:FD:CD:A2
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FBD7F0D741D15CB511CE74ECC7B28
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jPUOn6unGxOXNyP0wLNgFLf9zaI.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8246
IP address blocks: 2001:4190:8025::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:7f:0d:74:1d:15:cb:51:1c:e7:4e:cc:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf50e9faba71b13973723f4c0b36014b7fdcda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:30:28:69:4e:a7:1f:dd:7c:66:63:5a:46:
e7:6e:af:19:20:b8:6f:76:ea:62:c2:14:f2:2a:01:
ac:78:37:ee:b0:da:21:f9:1c:86:eb:c8:a7:bc:fc:
b2:04:8e:d8:22:82:c2:84:c3:1b:42:3d:13:c3:a9:
fa:14:7f:4a:10:dc:63:c2:42:9a:50:a1:c7:47:88:
68:5a:63:07:8b:5f:d0:31:2c:ba:16:15:bd:8a:2e:
ae:89:2d:6e:65:10:a5:1f:cb:e0:c2:40:ad:af:dd:
a0:25:15:b9:f6:bc:d8:61:de:66:ef:f2:a9:e1:02:
da:ae:2f:55:ff:ec:0b:17:6a:b2:e8:7e:21:d5:ad:
d0:87:d9:0a:f9:95:1b:38:02:ca:02:87:e3:88:6b:
10:ee:43:88:84:41:f0:1b:cc:2d:c6:53:2e:b4:80:
d7:9e:2f:4e:50:00:20:d4:72:9a:56:1f:d3:91:60:
b2:39:cc:59:76:dc:b3:0a:6c:22:57:73:93:8d:b8:
3f:dd:4b:22:8a:68:55:fb:fd:83:18:ca:f4:6e:95:
35:87:83:90:d8:84:4f:4b:a0:26:dc:e8:2e:32:c4:
8a:30:ea:90:e6:67:a9:82:ae:05:c4:7f:2b:d7:29:
0d:1f:01:b9:54:f2:5c:f8:c2:c7:71:f4:54:f0:ec:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:0E:9F:AB:A7:1B:13:97:37:23:F4:C0:B3:60:14:B7:FD:CD:A2
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jPUOn6unGxOXNyP0wLNgFLf9zaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4190:8025::/48
Signature Algorithm: sha256WithRSAEncryption
31:c8:92:d7:bc:1e:00:fd:59:40:d9:11:81:7b:72:28:91:d5:
03:13:bb:96:4f:1f:73:27:c0:14:b5:bc:56:fd:91:8b:71:99:
23:d4:74:12:61:22:fe:ae:41:b7:97:9a:78:43:c6:c5:e4:4f:
38:29:24:52:65:93:ca:61:e4:1e:27:7e:33:76:b7:b0:00:63:
65:20:26:b0:93:f7:ef:34:97:e4:c5:86:ba:82:a1:78:26:88:
1c:58:c8:29:1f:77:c9:c0:5f:b3:74:a6:6b:05:61:ca:88:24:
48:86:7a:89:da:85:dc:29:60:6b:e8:09:c9:fe:b3:3d:60:84:
d1:2e:cc:80:8b:37:1d:68:54:6d:d8:73:f5:3a:82:19:19:f1:
a2:01:e7:df:7d:3e:3a:72:ea:29:78:d2:6d:ca:06:98:33:ab:
98:ae:e0:a9:7a:7e:bf:9d:9a:e6:57:89:db:b6:f7:79:7b:0d:
37:f6:cf:29:f7:df:6e:8f:ee:bd:67:78:d1:03:3a:2d:5e:d0:
8d:02:d7:9f:01:8a:b1:15:c3:70:a8:66:02:b9:a3:ca:72:22:
79:9e:00:52:8b:97:c2:c2:e6:20:dc:96:97:14:0c:ef:41:87:
aa:52:c5:34:67:62:8d:54:b5:1a:c6:27:7a:fb:2b:a9:06:a3:
17:82:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:01 2025 by rpki-client