Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa
File: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (raw, json)
Hash identifier: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=
Subject key identifier: F0:F1:16:15:A8:AD:AA:C5:19:EB:3D:5C:98:7B:80:1D:46:5B:D0:14
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 0194A21360F9465834384648C6BBD406BE03
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa
Signing time: Sun 26 Jan 2025 10:06:06 +0000
ROA not before: Sun 26 Jan 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2a05:7a80:fffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:13:60:f9:46:58:34:38:46:48:c6:bb:d4:06:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Jan 26 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0f11615a8adaac519eb3d5c987b801d465bd014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:23:0e:fc:01:15:62:d4:00:30:16:44:ff:
88:04:86:e4:c4:eb:85:b4:c9:d1:de:c9:a7:99:b7:
93:2b:a9:89:18:4b:29:e1:fe:a1:82:e2:82:70:88:
36:d8:83:2e:27:93:02:34:d4:92:d3:59:a8:ff:61:
6b:e6:0d:f3:9e:aa:ea:61:7e:14:5b:f8:0e:2e:24:
82:20:20:0e:54:a3:ba:d9:82:52:63:2e:da:d1:c0:
84:5b:75:7b:5c:f8:4d:2a:77:a0:6b:68:5b:34:f5:
47:4d:83:24:b5:e6:ea:a5:35:3d:2e:21:ef:5f:9b:
98:2c:52:9a:81:69:07:db:b0:1d:de:ef:f5:36:6f:
05:8b:8f:e5:f6:a0:b5:f2:bd:22:ab:ed:24:88:20:
41:5f:c0:95:7a:97:36:15:a0:e5:aa:fb:87:74:5d:
17:9f:a7:fb:02:e7:aa:33:74:9c:b6:30:ec:4b:f4:
e3:a7:68:2b:ce:54:e0:27:25:22:b2:96:0a:fc:f7:
79:00:d8:67:75:54:84:58:d1:56:55:fd:44:f5:ea:
f7:02:f3:1a:7b:16:18:af:bd:18:5e:5e:4d:45:81:
69:f1:2d:3b:bf:a6:76:55:38:52:80:cd:3b:b5:94:
b2:76:ca:1e:98:5e:99:94:05:a7:7e:d8:e4:d0:1f:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:16:15:A8:AD:AA:C5:19:EB:3D:5C:98:7B:80:1D:46:5B:D0:14
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7a80:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
0a:b6:6d:9f:39:a4:c5:cf:e5:2b:15:9d:21:ba:b6:a9:10:42:
cc:6a:cc:aa:f6:dd:c9:98:4c:36:45:e7:01:cb:ad:06:11:65:
c3:f7:49:a6:7b:9e:76:f1:d7:a7:46:d6:6d:7b:18:9f:a4:7f:
e6:2a:58:68:f4:5b:a8:67:3d:36:11:91:f3:42:36:96:5f:e5:
6c:b6:5c:0d:b2:b2:d9:8f:93:d9:ec:45:ee:1b:2d:e9:57:6d:
ce:2e:cb:2c:1f:fc:a8:cf:d9:77:8d:ff:46:b4:ee:f6:f6:9b:
5c:a7:dc:b8:df:29:0d:64:17:16:82:9d:27:93:c6:03:a6:96:
a4:10:29:98:6e:e2:85:2c:7c:f2:c2:b7:e8:c0:3c:27:57:94:
fb:c3:ac:4c:8d:c4:ed:ac:a0:2a:9a:bd:f7:5b:34:31:2a:5c:
38:73:9c:46:76:09:dc:97:93:85:dc:dd:cc:fd:bf:a1:b2:36:
ec:b9:0c:6b:28:fd:35:fe:31:25:20:e1:79:da:ef:19:b1:64:
c1:70:b9:ce:73:a3:64:80:36:67:bd:0e:73:cb:b9:57:75:95:
f6:4d:3c:ab:ad:bc:12:cc:13:59:5b:0a:4c:c9:c6:a1:7f:74:
47:eb:79:8e:40:28:1c:da:04:6a:dd:fc:89:7b:a0:b4:49:68:
98:e0:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:29 2025 by rpki-client