Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i9jGNVB3_y2MQs912MYdMO4X1uU.roa
File: i9jGNVB3_y2MQs912MYdMO4X1uU.roa (raw, json)
Hash identifier: bQhHawxk3Ex5lHEEbLUW1r83UFQJsQlxwzATKaNUeHY=
Subject key identifier: 8B:D8:C6:35:50:77:FF:2D:8C:42:CF:75:D8:C6:1D:30:EE:17:D6:E5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481B2E33A4DA828C73267868588DD7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i9jGNVB3_y2MQs912MYdMO4X1uU.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 2a0f:1584:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1b:2e:33:a4:da:82:8c:73:26:78:68:58:8d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bd8c6355077ff2d8c42cf75d8c61d30ee17d6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:77:59:2f:6c:35:cf:f8:c7:ee:48:43:1a:
e8:87:88:ba:29:d9:1a:27:ee:a9:b1:4c:f5:98:8b:
f2:57:03:c1:94:bd:a1:ae:ec:c6:f8:9e:f1:5d:0a:
1f:c2:6f:09:46:c9:e5:e2:80:5c:3c:d0:6d:34:c7:
df:66:01:c2:b3:a4:94:fa:7d:2b:fa:a3:c3:80:52:
03:cd:f8:1a:d7:5c:c6:8a:d5:d4:0f:5a:c0:a5:13:
6f:46:a2:42:2b:e0:62:a4:34:c0:45:b9:50:16:ff:
6f:6c:5e:88:f3:24:69:f0:4f:77:11:19:b9:d2:a5:
31:8d:f4:d6:28:0a:5d:15:2b:37:22:a4:9e:8f:00:
44:8b:fd:2d:4f:8a:c0:e5:92:85:27:41:d9:2c:c5:
68:91:46:55:5c:28:83:fa:17:1f:5c:ec:84:ea:8b:
18:76:6b:e2:7e:b8:8f:1d:29:e6:a4:37:09:61:4a:
e3:44:a5:77:04:a1:e6:a8:3d:f7:29:f3:e8:8d:67:
cc:a1:ff:ec:d8:08:e7:8c:83:e8:da:a2:0d:05:5c:
85:9f:28:98:ce:d4:18:77:aa:e1:3b:db:6d:44:9b:
93:ef:fc:e2:46:72:35:fa:67:94:d4:af:40:03:00:
ef:22:cc:a3:b3:44:6c:6c:01:2f:85:e4:cd:3e:b2:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:C6:35:50:77:FF:2D:8C:42:CF:75:D8:C6:1D:30:EE:17:D6:E5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i9jGNVB3_y2MQs912MYdMO4X1uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1584:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:7e:8f:ea:07:9d:1b:68:ae:3d:99:0b:ab:1f:b4:b5:b6:ed:
f9:5c:74:aa:42:ab:77:70:eb:66:79:05:b6:2f:7e:93:4a:c7:
5e:a7:32:89:07:4e:2f:0a:1a:68:a9:f8:07:e9:c5:dc:b8:5d:
8a:82:d2:74:51:c5:9b:4b:a1:34:05:cf:dd:d5:77:f4:29:fd:
30:89:3c:2a:85:9a:52:ac:d1:88:06:7a:e1:b0:3b:45:11:f6:
9d:c4:2f:1c:66:1d:68:81:61:aa:be:d2:f2:ea:8d:cc:e6:38:
05:ea:c3:bf:c9:5e:01:7e:ce:0b:6f:ba:66:0f:c6:1d:9e:c5:
a1:75:7b:05:60:2a:77:22:56:3d:37:35:04:63:ad:ec:9b:5b:
b6:83:66:f6:71:f7:c8:10:e4:9d:04:45:87:4d:16:f8:a1:da:
f4:ad:c3:b8:b5:64:06:91:08:f4:53:f4:cc:54:92:63:d2:33:
8a:d6:06:49:f4:0c:21:d7:70:d1:a8:08:71:6f:e9:1a:a6:1d:
b2:1d:ae:e9:b2:47:d3:12:f9:bb:2f:82:93:bf:27:f9:85:57:
fb:57:21:98:1e:ec:10:53:e1:bf:4a:c9:29:bf:29:25:86:5c:
dc:67:ba:62:97:41:24:3e:78:cf:6a:0b:cb:de:f2:d8:4f:78:
8e:d4:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:56 2025 by rpki-client