Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/deLk9rfHRHIEZj6qxk5HK11BbyY.roa
File: deLk9rfHRHIEZj6qxk5HK11BbyY.roa (raw, json)
Hash identifier: cmqf+k54YIMW8mGSaPn1/I4uF3yZN97LRO5WSfzSGw8=
Subject key identifier: 75:E2:E4:F6:B7:C7:44:72:04:66:3E:AA:C6:4E:47:2B:5D:41:6F:26
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 018CC2DAEAB5B5132E0D2ED043E197F4BC09
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/deLk9rfHRHIEZj6qxk5HK11BbyY.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5610
IP address blocks: 2a02:9b8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:b5:b5:13:2e:0d:2e:d0:43:e1:97:f4:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75e2e4f6b7c7447204663eaac64e472b5d416f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:c1:f1:86:e8:a5:b5:30:7d:25:9e:2a:58:
62:ed:9a:31:72:dc:4d:4c:2e:01:a8:4f:fc:11:1e:
ca:1c:7c:c9:60:c4:f1:c1:fc:f1:6a:49:6c:ce:d0:
d6:61:bb:1f:da:85:61:e6:8f:7c:72:17:a7:5f:b8:
b5:c3:ff:99:96:d8:e0:3a:ba:b2:5a:90:ed:aa:47:
d5:b5:8d:15:b1:ec:75:6f:be:ad:7f:90:5d:40:05:
3e:cf:72:31:10:cf:58:a4:07:00:b6:35:52:29:0f:
78:17:2b:18:f7:9f:ab:23:14:b8:5d:03:40:59:a5:
f8:29:90:d2:a8:2f:e5:5e:1a:79:06:9b:9d:f1:dd:
b8:cd:a8:d5:ef:f9:e6:fa:eb:07:0f:7e:b2:c8:24:
82:fd:5b:1c:88:70:8a:38:53:8d:83:2d:75:6f:ca:
6c:ff:af:b2:44:16:28:23:a4:f3:df:3c:67:8b:d9:
eb:4c:a1:21:43:c6:0e:1b:18:0e:96:aa:c7:e7:6f:
c7:98:94:33:5f:6d:7d:9a:10:22:1e:37:9d:87:96:
c8:40:61:5b:9b:a1:96:8c:0f:ec:04:5c:81:3c:3a:
ad:fa:e6:23:f6:66:43:46:7d:b9:d8:5c:b1:60:4f:
02:6d:96:d0:50:d6:5c:1a:96:2e:e6:7a:51:be:f0:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:E4:F6:B7:C7:44:72:04:66:3E:AA:C6:4E:47:2B:5D:41:6F:26
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/deLk9rfHRHIEZj6qxk5HK11BbyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9b8::/31
Signature Algorithm: sha256WithRSAEncryption
69:78:af:2b:7d:09:36:87:82:12:6a:8d:ac:8b:c0:91:65:7f:
ed:a0:37:c0:fa:07:e1:7b:53:0b:09:f2:f3:3d:f0:40:40:16:
54:8a:25:91:87:91:e4:bc:2a:3c:e8:67:a9:d0:0f:82:00:72:
21:bf:ee:88:9e:89:65:ca:2e:36:e1:fb:41:0b:36:00:42:86:
72:60:fa:6d:90:de:28:4b:a2:0b:66:c1:6f:3c:55:a1:1c:e1:
ce:b2:f0:9e:0f:f8:49:e5:0b:c9:f7:9a:fb:ef:18:97:b0:c8:
5f:49:d1:f3:55:66:b6:b9:fd:5f:e0:52:b6:ea:e9:56:44:60:
b5:b7:09:15:08:f3:77:cd:00:43:9e:1a:7f:64:f9:35:ff:50:
30:1e:8e:86:36:8e:69:27:16:a8:1c:96:73:ff:b0:fb:73:8d:
26:75:c3:3d:cf:70:cb:99:b9:b0:66:81:0e:0c:e1:b9:03:b1:
b6:5b:c4:cd:3a:0a:3b:7a:3d:98:3b:bc:85:57:6e:3a:98:f2:
6e:ec:99:20:5a:50:20:19:8b:b1:b3:8d:1f:44:8a:0f:34:51:
bf:a5:48:c6:40:22:f8:11:7f:87:30:6c:e4:56:f7:b8:19:4c:
f8:25:bc:ad:49:5d:b1:86:e0:f4:e4:c0:80:81:35:44:64:f3:
5a:20:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:14:29 2025 by rpki-client