Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9hsG7dvY2qOzN_FbrnnFv32AdEg.roa
File: 9hsG7dvY2qOzN_FbrnnFv32AdEg.roa (raw, json)
Hash identifier: D8eXrayH1TOgnzre+xPPeq+E/rXm726lfZTPCZWOnGQ=
Subject key identifier: F6:1B:06:ED:DB:D8:DA:A3:B3:37:F1:5B:AE:79:C5:BF:7D:80:74:48
Certificate issuer: /CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Certificate serial: 01942521FA090657A398DC2E832C64737B65
Authority key identifier: F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9hsG7dvY2qOzN_FbrnnFv32AdEg.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198186
IP address blocks: 2001:67c:1244::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fa:09:06:57:a3:98:dc:2e:83:2c:64:73:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f61b06eddbd8daa3b337f15bae79c5bf7d807448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:83:1e:2a:23:5d:7b:46:1a:fb:50:8e:74:
89:b0:23:10:1f:ba:38:e4:c2:e4:9a:c1:57:75:3c:
67:6e:d3:77:a9:f3:e4:33:36:8d:c7:bd:5c:e5:94:
61:f7:c0:91:2f:eb:00:20:ed:c5:21:f3:c0:c4:79:
ca:31:67:eb:31:1f:e9:a3:45:c7:5d:63:b7:ae:63:
d6:ee:25:58:ea:e4:1b:45:53:5b:0c:cb:12:e1:be:
23:60:98:bf:fe:75:18:fb:3f:2e:66:66:ed:cb:c6:
2c:6d:57:46:3d:0f:96:4c:8c:f3:09:21:63:3e:e0:
b4:f2:2f:49:7c:9e:ab:cd:ec:de:31:de:d4:43:32:
d2:2f:e8:aa:47:d3:cb:22:49:76:de:6c:19:88:78:
d6:74:0f:ec:aa:71:f1:3c:10:96:42:66:3f:f0:69:
d2:3c:bf:ba:20:aa:46:50:45:27:21:28:35:36:da:
60:dc:e3:a6:5c:e2:80:92:02:bb:20:e7:45:6c:ba:
5c:99:60:4a:2e:84:6a:4c:3d:84:35:9f:9d:dd:f7:
9a:5d:c0:f9:6e:44:31:4a:0c:52:e4:6f:97:54:71:
bc:32:a2:86:9d:a2:51:46:17:8b:a7:0b:f2:a6:a4:
ff:e1:6e:d2:17:ab:20:a4:20:7b:b1:d1:3c:93:58:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:06:ED:DB:D8:DA:A3:B3:37:F1:5B:AE:79:C5:BF:7D:80:74:48
X509v3 Authority Key Identifier:
keyid:F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9hsG7dvY2qOzN_FbrnnFv32AdEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1244::/48
Signature Algorithm: sha256WithRSAEncryption
4b:34:58:5f:03:9b:ca:67:ca:ff:80:7c:d2:70:6c:8b:94:bc:
d5:8e:1d:4e:7b:8a:61:50:8f:e6:0c:c0:e5:cf:6c:de:1c:1e:
49:45:16:77:82:a8:0c:35:93:24:2d:90:ee:d1:01:de:20:e5:
43:99:7a:f4:97:e8:3b:94:8b:c2:5f:a4:be:33:b0:65:24:13:
ef:54:4d:0b:4b:65:eb:ac:ef:9c:e6:92:ff:19:6a:34:49:ca:
ee:70:bc:6b:02:89:cc:87:22:ce:7a:d0:e9:e1:97:99:b4:f3:
cf:84:90:ad:9e:d0:0f:e0:3e:d6:ae:23:6c:bd:70:e1:47:90:
5d:38:b7:58:18:08:e2:1e:10:ba:be:22:90:0d:b1:be:d6:cb:
c9:93:9e:c4:d6:17:83:fe:a1:08:2d:fa:45:29:a8:05:a9:1b:
e0:e4:6e:b8:93:6d:74:fa:04:6d:c5:39:ac:45:ec:92:3f:08:
ff:16:f9:5e:4f:75:d4:05:ff:a2:8d:51:93:32:ff:a4:39:d4:
ec:1a:e5:8d:a5:a7:d1:35:e2:00:d1:d2:58:1d:a8:e5:88:e3:
aa:24:7e:0a:8d:f8:28:fb:ac:c9:d2:6a:e2:c5:32:79:4c:e3:
3c:e6:65:b1:cc:bf:fe:82:df:4d:52:82:19:d1:f8:a6:51:53:
da:95:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:12:59 2025 by rpki-client