Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jEs9cTY-vJiLWnJr5i7IySuq8xE.roa
File: jEs9cTY-vJiLWnJr5i7IySuq8xE.roa (raw, json)
Hash identifier: z9kFyeVKDvHVStroglBFTRpYAEwMaVZzO7WSjg42c64=
Subject key identifier: 8C:4B:3D:71:36:3E:BC:98:8B:5A:72:6B:E6:2E:C8:C9:2B:AA:F3:11
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019440A81E35E682D8E94111242CC2203328
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jEs9cTY-vJiLWnJr5i7IySuq8xE.roa
Signing time: Tue 07 Jan 2025 12:05:47 +0000
ROA not before: Tue 07 Jan 2025 12:05:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2a00:15c8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:a8:1e:35:e6:82:d8:e9:41:11:24:2c:c2:20:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 7 12:05:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c4b3d71363ebc988b5a726be62ec8c92baaf311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7d:35:f8:d4:c5:33:dc:76:1f:8f:33:f1:21:
d6:4a:fb:7e:1b:2d:f9:77:4f:1c:fb:aa:4e:04:a6:
af:a2:05:13:cc:5c:4b:eb:d2:ef:38:45:c9:c1:d9:
09:8b:18:5b:5a:cb:76:88:69:32:7c:b6:d7:0a:e6:
1b:c4:bd:88:50:ae:2b:8f:03:99:78:dc:67:e8:e2:
65:89:66:91:df:9c:91:ec:19:50:1f:be:e7:65:fa:
45:1d:f2:32:4b:99:c9:67:a5:3e:e5:08:8c:3b:fe:
b8:97:d9:da:56:38:7e:6c:b9:58:1d:e2:5d:60:70:
7f:f9:f4:6e:08:80:03:f7:4a:2a:51:ea:db:f0:b5:
36:f6:50:bc:2f:e2:8e:1a:a0:f9:68:bb:1c:44:4f:
15:ab:0c:ca:62:69:42:7a:67:23:a9:99:4a:b8:87:
98:5b:c1:fb:21:09:d5:da:e2:23:17:eb:f8:ff:88:
0d:55:f0:d9:fb:8a:cf:8e:dc:fa:6b:47:0b:36:9a:
e5:9c:a4:cb:63:8f:32:e5:61:e5:e6:18:1c:86:87:
0f:2f:64:a0:a4:dd:f0:e0:86:73:00:a2:18:b7:e9:
d1:46:d8:ca:09:86:fc:05:67:b4:df:b2:bb:fe:9c:
50:27:04:98:bc:27:be:19:1f:37:ef:3a:34:e8:b6:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:3D:71:36:3E:BC:98:8B:5A:72:6B:E6:2E:C8:C9:2B:AA:F3:11
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/jEs9cTY-vJiLWnJr5i7IySuq8xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:15c8::/29
Signature Algorithm: sha256WithRSAEncryption
92:16:a0:45:84:d1:ad:21:55:d6:aa:ca:23:f7:0e:4a:05:ff:
a0:31:3b:50:3a:67:97:5b:de:00:c5:35:bd:b7:73:7c:84:49:
ec:8a:94:3a:5f:84:86:22:c9:c9:2a:2a:0e:2b:06:21:1b:39:
b4:d8:e2:0e:02:1a:df:ce:51:92:c0:82:a7:d7:7b:78:75:f4:
c6:cb:78:9f:f1:e0:41:25:22:5b:b8:0b:d8:e3:83:bd:6e:a0:
72:a7:25:b3:6d:d0:28:00:0e:2f:ba:de:46:cc:c4:e3:23:a0:
85:3d:f3:23:eb:d8:0b:48:4c:08:a5:b5:14:0f:54:27:e0:a3:
6b:80:c9:c7:2a:67:32:bf:3a:40:64:c1:7a:ea:8f:b1:83:c4:
48:23:0a:56:27:08:c6:71:93:f7:e3:d0:9a:86:9c:17:31:8c:
5d:f1:11:5e:d9:87:09:68:68:29:f5:90:9e:5e:e2:9d:ea:50:
77:76:4e:16:b8:01:d5:87:45:ad:71:2d:5f:06:71:5e:be:36:
76:5a:cd:85:4c:bf:ba:eb:ae:15:21:22:42:49:6f:15:ef:66:
0c:7d:22:17:b5:dc:c0:2d:68:66:9f:4a:82:ad:21:29:71:12:
20:9d:37:40:fb:67:04:f6:6c:4c:67:80:96:18:e2:99:cb:b9:
e8:4e:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:58 2025 by rpki-client on console.sobornost.net