Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/98qVerjgriIu-fM4dC4HlDL1MbY.roa
File: 98qVerjgriIu-fM4dC4HlDL1MbY.roa (raw, json)
Hash identifier: Gdlj0cjXRyDK3WJPVAUbbdR8B2CMH/WaRbQ2/GziFGY=
Subject key identifier: F7:CA:95:7A:B8:E0:AE:22:2E:F9:F3:38:74:2E:07:94:32:F5:31:B6
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C40E51
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/98qVerjgriIu-fM4dC4HlDL1MbY.roa
Signing time: Sat 01 Jan 2022 13:07:39 +0000
ROA not before: Sat 01 Jan 2022 13:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 2a0e:1c80:8::/48 maxlen: 48
2a0e:1c80:6::/48 maxlen: 48
2a0e:1c80:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12848721 (0xc40e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7ca957ab8e0ae222ef9f338742e079432f531b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:48:52:8e:db:4f:6c:3a:64:f4:e8:54:7a:
a3:32:53:77:be:43:ae:0f:ba:a5:13:61:98:3f:f4:
77:30:9d:24:f1:06:e0:a4:40:32:80:ca:af:db:cf:
6b:a7:a6:b4:b6:b1:d0:d9:4d:e0:6f:e1:d5:b1:cc:
46:62:e5:8f:55:bb:14:d9:5b:d6:f5:29:ca:9e:c5:
8e:5c:5f:89:e3:fc:7d:b4:84:b2:6b:5e:19:a6:cd:
10:d7:91:f6:38:1d:4c:ec:b9:35:ad:40:4f:3b:9d:
fa:ed:4e:b2:02:96:74:5b:36:2c:71:2d:db:42:b7:
25:8b:ce:84:5d:66:d9:d8:3d:99:cf:06:8f:86:3b:
75:67:a9:75:cc:ba:73:e8:6e:ad:21:66:5e:f3:e9:
9a:ff:25:f1:4a:50:19:f5:03:ce:8a:a5:78:75:c7:
b4:f0:f0:e2:ed:f4:f2:6c:fd:52:4c:4c:31:e9:f4:
dd:3b:45:87:80:d3:50:bd:bb:21:19:14:37:07:ef:
5f:9a:0d:8a:e8:ff:3c:8a:ce:8d:f1:74:fb:96:8a:
9f:17:c0:67:33:90:50:6f:7f:dc:d4:a4:3a:88:6a:
13:5c:41:a7:9a:10:a5:6c:55:d2:e0:54:e5:58:54:
74:b6:01:5e:e4:b3:a9:78:d4:ff:30:39:3f:9b:5d:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:95:7A:B8:E0:AE:22:2E:F9:F3:38:74:2E:07:94:32:F5:31:B6
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/98qVerjgriIu-fM4dC4HlDL1MbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:6::/48
2a0e:1c80:8::/48
2a0e:1c80:f::/48
Signature Algorithm: sha256WithRSAEncryption
41:63:37:d1:e7:7c:bb:ff:49:c0:03:c5:26:40:fb:54:b8:fd:
d4:be:b1:f5:04:04:dc:c1:1b:e1:d2:c4:6f:bf:5c:1d:fb:ba:
6f:ee:5f:48:15:57:59:a8:ad:ef:e1:2a:84:d0:cb:dd:bb:ac:
ce:11:ca:74:59:64:34:24:ca:72:e0:a9:3a:b9:57:cf:56:c9:
ee:45:e0:ec:57:af:53:e8:c9:d8:e3:5c:a3:18:83:27:31:26:
91:b8:f8:d4:cd:c1:5b:25:ff:42:c7:81:df:74:f0:c7:fb:7a:
06:e9:e4:ff:eb:a6:79:bc:a7:af:64:c4:51:be:87:fc:6a:d8:
fc:14:b5:20:49:f2:2a:40:3f:f7:19:51:90:9b:ff:d1:3d:54:
81:cd:01:d8:d3:6a:83:d7:95:5e:02:05:a3:7a:3e:0f:51:94:
46:a9:e0:bc:4e:a0:51:f6:ac:0b:a9:96:f2:ec:86:ee:0e:96:
e0:eb:52:5f:04:a2:eb:47:7d:83:87:61:ea:d3:4b:f4:93:1d:
c9:84:79:ce:e1:f2:5e:d8:4d:4f:91:c0:49:a5:d3:19:b8:01:
77:67:6b:44:7e:61:94:0e:fe:8a:97:c4:3c:83:66:1a:99:2d:
74:f3:3a:b7:e3:a8:54:43:39:6d:7f:a5:b7:3e:f3:4b:d9:41:
fb:cf:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:23:24 2025 by rpki-client