Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa
File: f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa (raw, json)
Hash identifier: TGm9AlTdN93bdUpETbwDkFaVCWLQGhWDE7lXzrUzU44=
Subject key identifier: 7F:B2:E8:42:58:37:C2:1F:E6:0C:1F:4C:F2:D2:51:3D:CF:69:8D:18
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 019428255D6707C86416C56C17F8E3021FC8
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa
Signing time: Thu 02 Jan 2025 17:52:04 +0000
ROA not before: Thu 02 Jan 2025 17:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136468
IP address blocks: 2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
2a00:edc0:469::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5d:67:07:c8:64:16:c5:6c:17:f8:e3:02:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb2e8425837c21fe60c1f4cf2d2513dcf698d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:7f:2c:aa:ce:e6:b0:66:49:e3:bf:39:5a:
e6:95:f8:59:04:a2:86:34:8e:c7:a5:4e:e1:11:5b:
e0:ba:05:6c:cb:82:e0:bc:8b:76:72:c6:24:c3:f9:
df:c7:15:33:87:c4:05:37:ff:3b:5e:0c:b9:f7:85:
cf:3e:2c:80:c9:3c:7a:79:4a:c8:d5:1e:23:f5:3b:
55:20:20:f1:d1:5f:d6:e6:13:51:00:aa:9b:c1:89:
c4:b0:22:51:0a:15:3c:49:ee:5b:c3:b1:0f:16:16:
ca:55:76:b6:38:c8:e9:0f:7c:3e:4a:5b:9b:b8:0d:
49:70:ba:ca:3c:58:86:1b:d5:49:35:17:e2:97:87:
6b:ba:63:dd:50:53:2e:9d:64:34:72:06:cd:b4:a6:
1a:e7:ce:2b:c5:fd:00:88:47:43:19:41:c7:9e:15:
f1:2c:1a:f6:02:9d:59:b1:ce:a2:6f:ab:09:96:88:
dd:78:49:bd:86:fc:ee:ca:ad:fd:0f:89:7b:2e:b1:
fa:a5:60:23:e9:50:f2:a0:4c:25:4c:f6:2c:fb:fd:
5c:fd:8b:b4:f9:c5:8f:fd:28:4e:1e:f2:3e:c6:ca:
98:e2:16:c3:ff:6c:4d:eb:3b:49:80:fe:a0:00:a1:
e9:8e:61:06:20:5f:87:c1:83:9e:74:e3:27:75:dd:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:E8:42:58:37:C2:1F:E6:0C:1F:4C:F2:D2:51:3D:CF:69:8D:18
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:136::/47
2a00:edc0:469::/48
Signature Algorithm: sha256WithRSAEncryption
76:27:74:ef:ce:30:f2:53:7a:8d:2e:54:0a:1f:6b:fc:aa:69:
87:e7:97:68:d9:b1:44:a7:da:74:52:e7:7e:61:bf:88:be:0e:
d7:f3:be:36:8e:d0:10:9b:d0:3d:64:f4:3f:39:77:a6:79:4d:
20:b8:ec:86:0e:f6:54:e6:83:5b:5a:4a:1d:23:bf:ab:17:5d:
0a:92:08:60:e2:79:5b:9b:fa:63:5d:34:1f:6e:4a:3a:3f:ac:
13:db:bb:cb:c1:7e:4e:f7:e5:cc:99:d1:66:2d:92:db:7e:05:
cc:1b:b1:bc:3f:7a:b7:be:ee:1c:25:52:16:f1:b7:17:05:75:
d1:18:0a:e9:ce:9c:77:42:e3:3e:24:e7:7c:9d:95:77:1c:79:
57:51:28:e7:50:5d:12:40:70:22:c9:1e:81:cb:92:c5:47:db:
ba:4e:6d:27:cf:91:bf:f7:bf:0c:22:e7:cb:91:a5:da:90:89:
c3:af:30:e0:82:7f:fb:b6:0b:24:30:03:08:a8:20:4b:af:57:
c8:ed:ec:5d:36:7a:f3:f0:88:17:60:f6:9f:d0:00:73:ec:dc:
ef:52:79:b3:46:0e:2f:d8:b1:61:ff:79:e0:a4:93:3d:94:ec:
ad:62:87:d1:96:70:f4:4a:bf:c3:d5:34:15:5c:dd:c1:e7:5f:
2e:5b:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:31 2025 by rpki-client