Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/EdqqDtQ8KSFcwW63Q-yc5yY49GQ.roa
File: EdqqDtQ8KSFcwW63Q-yc5yY49GQ.roa (raw, json)
Hash identifier: f7Afge3HY2bq844PWsDMkX7xaTiUUVRSCE8Ik0wZSi0=
Subject key identifier: 11:DA:AA:0E:D4:3C:29:21:5C:C1:6E:B7:43:EC:9C:E7:26:38:F4:64
Certificate issuer: /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial: 09F07FCF
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/EdqqDtQ8KSFcwW63Q-yc5yY49GQ.roa
Signing time: Sat 01 Jan 2022 09:59:11 +0000
ROA not before: Sat 01 Jan 2022 09:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211942
IP address blocks: 2a09:be40:be00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166756303 (0x9f07fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Validity
Not Before: Jan 1 09:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11daaa0ed43c29215cc16eb743ec9ce72638f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:34:4f:22:ed:db:72:64:99:1d:44:90:a3:
cc:2b:4c:4b:39:84:55:88:f0:ba:bb:37:86:ac:a9:
a5:d1:9e:02:2f:90:46:44:7f:7c:ef:20:55:7b:ce:
44:8f:fb:f8:76:c5:86:97:19:bf:f2:8c:97:2d:e7:
96:0e:d9:05:72:66:40:53:1c:59:5c:9d:c5:6d:59:
d3:a5:e4:21:f5:9e:8c:7b:29:e1:19:30:3e:2e:57:
38:0e:a8:0c:83:4c:4e:68:bf:10:fb:80:b5:ff:24:
8b:12:e7:93:f9:fa:f3:c7:12:b9:e5:fd:db:29:c8:
d3:ca:56:d1:43:4c:3c:b8:ec:41:08:20:28:53:7d:
e9:2f:5b:8f:e7:f8:1b:60:2b:bf:5e:14:d4:95:84:
ef:46:91:60:f3:4f:ac:3b:99:27:f0:2d:df:77:7a:
e1:52:f6:3d:50:0e:b8:e2:7f:23:d7:8f:38:1d:5c:
6b:c0:6e:bb:c5:3b:a4:e7:da:5d:1f:0a:8f:8e:e8:
d7:fb:f2:72:e7:99:66:e5:d1:02:00:58:f7:00:0d:
c2:28:5f:0a:3a:c1:7b:ed:76:d3:c4:69:61:e7:c7:
45:81:1b:13:d9:b7:ee:b7:95:fa:6b:c5:06:4f:0c:
e8:67:72:35:0a:98:cb:28:76:34:85:9f:71:47:1e:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:AA:0E:D4:3C:29:21:5C:C1:6E:B7:43:EC:9C:E7:26:38:F4:64
X509v3 Authority Key Identifier:
keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/EdqqDtQ8KSFcwW63Q-yc5yY49GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be40:be00::/40
Signature Algorithm: sha256WithRSAEncryption
23:d7:60:64:3e:b2:2c:26:8b:72:7c:12:2c:20:9a:7b:8d:bf:
a2:68:00:5c:2d:e2:d2:7d:5f:16:9d:9b:49:03:b7:9e:0b:9e:
fb:ea:b5:6c:35:3e:2d:08:50:85:74:40:eb:7a:88:1b:62:fb:
bb:ef:b7:ab:20:98:1f:63:d6:4d:5f:34:93:03:9d:6a:9d:3a:
d1:90:47:06:89:4f:13:2e:8d:2c:7d:83:df:dd:f2:7c:9b:df:
64:01:e3:0d:e6:80:99:55:84:4c:27:4e:0f:87:67:93:da:e4:
b0:21:68:35:bb:0e:d1:22:09:62:35:82:db:9c:cd:05:16:96:
36:33:53:52:2f:33:8d:5c:b5:0a:7e:5c:60:55:cb:aa:09:ca:
6d:87:8c:e0:47:74:3c:68:e0:79:ca:97:ce:bb:a6:a0:01:27:
d0:04:a0:0f:d7:44:e2:a5:60:56:bc:fe:1e:68:9c:bc:7f:21:
9a:71:52:19:a5:13:8b:25:5f:af:0d:e7:a8:a0:55:53:47:b1:
25:0a:47:99:81:be:86:03:15:dd:26:ec:e8:6c:33:a2:fc:a1:
b4:20:13:f1:1c:08:31:e6:36:c1:41:1f:e5:d9:8e:a4:94:e9:
5e:88:d7:a6:91:34:12:13:72:58:ea:62:a6:a8:b0:0d:6f:fc:
bf:8d:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:50:06 2025 by rpki-client