Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa
File: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (raw, json)
Hash identifier: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=
Subject key identifier: D9:BD:C1:D1:23:0E:DB:EF:44:93:F7:2A:AA:32:4A:93:7A:4E:49:93
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 01942369613E93ABB95A694E799DAAF6FEA3
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa
Signing time: Wed 01 Jan 2025 19:48:16 +0000
ROA not before: Wed 01 Jan 2025 19:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57201
IP address blocks: 188.0.48.0/20 maxlen: 20
2001:67c:23d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:61:3e:93:ab:b9:5a:69:4e:79:9d:aa:f6:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Jan 1 19:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9bdc1d1230edbef4493f72aaa324a937a4e4993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:09:ce:3a:fe:57:fb:5a:a8:39:43:a7:4d:
20:ce:13:bb:8c:71:34:14:dc:e4:ae:d8:62:67:96:
4f:62:82:2b:c2:85:56:31:86:1a:60:cb:45:43:fe:
5f:32:0e:c1:4e:57:87:cc:d3:57:9e:c6:79:7f:5b:
d9:e5:84:53:dc:d4:b6:5f:d8:05:ad:35:d4:30:ad:
1d:56:1d:c7:0b:25:b2:3e:ca:bd:ee:d7:78:e7:91:
66:8d:b1:16:ad:fd:f0:ad:e6:56:ed:ff:37:3a:78:
a0:bb:29:34:2c:ce:33:f0:b2:ba:dd:f4:4e:a7:8e:
8e:c9:ad:dc:4a:52:63:78:71:f6:03:33:90:1a:ac:
70:8e:e1:87:53:d1:e0:5e:72:a6:9a:b3:fd:8a:e5:
ab:31:90:02:b3:78:ff:b9:05:18:be:33:bc:44:dd:
13:fa:50:12:2d:da:02:89:08:c7:95:e2:9f:3c:d4:
af:b5:d0:45:0f:13:79:1e:4f:76:40:9f:e4:51:cc:
0c:6a:a7:cf:9f:eb:dd:08:38:40:02:e6:b8:9c:89:
bf:cd:09:2b:24:5a:f2:42:d6:b9:33:56:51:d7:81:
7d:6a:d6:dc:02:a6:d3:c2:bc:88:2d:f8:b5:2b:40:
bc:65:53:8e:fb:f6:23:4a:68:8f:cc:03:07:25:ef:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:C1:D1:23:0E:DB:EF:44:93:F7:2A:AA:32:4A:93:7A:4E:49:93
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.48.0/20
IPv6:
2001:67c:23d4::/48
Signature Algorithm: sha256WithRSAEncryption
91:7e:9d:e2:a8:60:91:87:61:e9:32:c5:ea:0b:be:a3:88:bc:
18:36:ba:0c:d0:2d:ca:bc:67:0d:5b:2a:0c:76:f4:83:0f:15:
5c:a6:8f:17:f0:31:61:05:df:50:fd:e3:e6:96:41:91:21:52:
60:59:9c:d4:9a:f4:93:35:76:ed:81:cb:07:e5:b4:be:e4:37:
52:e0:19:ce:13:4b:0f:bd:0a:13:4c:ac:42:e8:59:32:45:1a:
3c:9d:fd:e1:2c:6f:a0:ad:b2:87:7e:3c:7e:fc:ed:84:07:e2:
b0:3c:47:77:91:44:b8:36:22:e3:21:fc:5b:ae:6c:11:ac:3e:
f0:ab:06:70:d3:ab:45:6f:3a:91:12:ac:e7:4f:7b:76:33:a8:
34:54:95:85:6c:29:c3:61:74:6d:97:47:56:43:9b:d6:d0:bb:
82:15:d9:38:2e:70:6f:47:79:6f:e1:4c:0f:f3:73:1d:1c:d5:
d6:01:cc:11:72:78:ea:d4:94:03:fe:d9:cd:5e:b1:58:18:10:
fc:25:56:39:bb:c0:ec:fe:ad:ce:aa:2b:21:cd:76:2d:38:be:
15:c7:f5:12:10:ea:7e:bf:eb:93:44:40:4b:bb:78:0b:ef:ff:
39:8d:65:a9:3d:17:4b:bb:c8:c5:27:3e:8e:56:7b:a3:e2:04:
e4:fb:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:53 2025 by rpki-client