Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JC2onM3zxUfIxlmyEd5nLYfsdDE.roa
File: JC2onM3zxUfIxlmyEd5nLYfsdDE.roa (raw, json)
Hash identifier: 4GnXYE2DGg8mHrAA3dtnIW3cRwCEWUZQRuP/PNB1AYk=
Subject key identifier: 24:2D:A8:9C:CD:F3:C5:47:C8:C6:59:B2:11:DE:67:2D:87:EC:74:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01948CE10D4B4DCB58E9B5D4FD26767A4E4E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JC2onM3zxUfIxlmyEd5nLYfsdDE.roa
Signing time: Wed 22 Jan 2025 07:19:06 +0000
ROA not before: Wed 22 Jan 2025 07:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 2a0f:3540::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:e1:0d:4b:4d:cb:58:e9:b5:d4:fd:26:76:7a:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 22 07:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=242da89ccdf3c547c8c659b211de672d87ec7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:b9:e3:f4:54:9a:f8:fe:30:58:0b:5b:72:
d7:13:4d:c7:55:1d:0d:fd:5e:4c:69:39:11:15:86:
3e:df:4e:23:53:ff:90:be:23:ec:ac:34:5c:c3:2c:
70:64:47:4c:64:d6:ef:36:3d:5e:f5:6c:38:c1:bb:
3b:88:53:c7:a5:23:92:51:dc:c2:7b:7c:9e:f3:15:
6b:ad:68:c7:85:4a:5d:70:d5:cd:26:f9:3c:02:25:
69:62:f3:ec:21:68:80:25:9e:35:6d:09:3a:7c:42:
02:41:1f:29:f6:ed:ca:51:7e:25:b2:c5:61:63:9e:
22:2c:0c:83:39:a8:9a:39:5e:c2:14:a6:09:f0:11:
f1:c7:10:0d:f2:49:a8:ed:1f:ba:85:9e:7e:69:d7:
0e:79:93:0a:12:95:3e:29:8f:d0:34:7f:43:49:22:
0e:8b:3f:de:58:9f:68:cf:9f:6e:c9:f0:99:93:53:
6c:b8:36:c8:87:a8:33:83:f7:7f:ee:ed:0c:52:84:
cb:96:75:30:09:fd:53:97:b2:4d:79:27:08:65:be:
b1:b6:fa:14:6e:11:dc:45:5c:96:0a:01:18:fc:d8:
6f:ce:55:23:84:a8:4d:69:37:08:ad:69:54:c8:cd:
ec:5a:2d:68:95:ab:00:8b:63:82:d4:85:6f:70:c7:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:A8:9C:CD:F3:C5:47:C8:C6:59:B2:11:DE:67:2D:87:EC:74:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JC2onM3zxUfIxlmyEd5nLYfsdDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3540::/29
2a0f:3640::/29
Signature Algorithm: sha256WithRSAEncryption
3f:52:3a:21:56:1b:12:11:ba:55:c7:33:84:a2:78:57:87:c5:
0e:4f:0e:4b:3d:16:16:76:50:df:b4:4d:33:1a:44:47:04:16:
a6:a1:99:63:87:a2:80:aa:cd:d1:18:31:5f:a7:30:07:94:eb:
44:e3:45:51:18:b2:68:d8:a1:cf:a1:a5:2f:ca:60:e1:dc:6d:
6e:40:ac:ac:9a:12:b7:ed:78:c2:50:58:8a:96:58:7a:f1:c5:
b0:de:2c:2a:f7:14:ee:68:0f:cc:32:25:76:cb:d4:0e:4e:ca:
97:51:15:4a:67:b4:ce:53:7f:17:ad:9f:c0:57:45:6c:b3:33:
53:7b:c9:ea:7f:83:b6:82:1d:8d:91:2e:85:3d:59:6a:00:58:
0c:76:cb:1f:d0:d5:e2:ec:69:17:c6:d9:bd:d5:2e:f3:0d:6b:
16:46:a0:1e:53:b9:ab:83:55:66:56:49:fb:f0:28:0c:8b:61:
29:d9:39:6c:ba:2c:b5:da:17:c9:d2:10:85:2b:44:a5:4d:7f:
c8:66:b3:48:7e:f4:1e:08:3e:d7:9c:ab:cd:7c:7d:1c:55:fc:
b8:ec:aa:98:d0:43:b4:1e:28:15:2a:56:ad:b4:bf:c0:5c:bc:
57:d8:dc:94:d7:1d:34:a5:25:a3:4a:78:cb:94:5c:70:49:04:
34:36:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:32 2025 by rpki-client