Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/902A4ToiQzymYMcD3pXbf2e5yrc.roa
File: 902A4ToiQzymYMcD3pXbf2e5yrc.roa (raw, json)
Hash identifier: DVG/ZgXFiaBo9LhWew3HuJ5AKLyMJe+chV57zXPxO+Y=
Subject key identifier: F7:4D:80:E1:3A:22:43:3C:A6:60:C7:03:DE:95:DB:7F:67:B9:CA:B7
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 01942825A65DF2350CB8C2223CC02725C682
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/902A4ToiQzymYMcD3pXbf2e5yrc.roa
Signing time: Thu 02 Jan 2025 17:52:23 +0000
ROA not before: Thu 02 Jan 2025 17:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:b00b::/48 maxlen: 48
2a0f:5fc0:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a6:5d:f2:35:0c:b8:c2:22:3c:c0:27:25:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Jan 2 17:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74d80e13a22433ca660c703de95db7f67b9cab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:43:fd:e9:32:d0:d6:64:94:64:26:ff:62:
d6:3f:69:20:ba:e6:cb:fd:36:4c:c4:74:b2:06:1f:
c9:2d:ca:fd:0e:90:8c:90:63:d0:1d:d1:2e:49:6c:
65:0f:6e:c1:fd:b5:da:f0:11:1e:05:10:76:e9:f6:
87:92:ca:b9:e4:d5:f6:d7:22:27:dd:9a:0d:84:cf:
3a:42:24:c4:ea:17:cc:fd:83:72:c6:c8:7e:81:24:
46:49:50:ba:d8:41:bd:c9:eb:a5:d2:a2:a6:ab:1b:
12:27:e7:d8:f8:e6:ca:dc:7e:6c:dc:98:80:b6:99:
21:44:d7:be:e0:57:a1:4a:55:53:ea:09:d0:ed:6a:
46:4c:7b:7d:25:5e:08:49:57:4b:cb:b2:37:db:57:
9f:49:89:50:07:a4:1d:82:0f:eb:cf:28:df:97:85:
74:1d:ad:a0:fb:b1:68:dc:3d:46:59:0f:dc:66:2d:
31:09:c2:fc:d2:44:9a:ab:42:15:c5:bc:75:d5:bf:
82:40:58:ac:86:be:6e:ae:52:a8:9a:84:fe:a4:2c:
3f:f5:62:03:6e:64:76:aa:36:95:92:89:d6:2f:e2:
6a:5c:6e:39:f1:60:ed:b1:f7:c2:c8:dc:8a:7c:c5:
70:51:21:b0:78:bd:f9:de:b7:1f:a8:17:c4:63:5e:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4D:80:E1:3A:22:43:3C:A6:60:C7:03:DE:95:DB:7F:67:B9:CA:B7
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/902A4ToiQzymYMcD3pXbf2e5yrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:b00b::/48
2a0f:5fc0:beef::/48
Signature Algorithm: sha256WithRSAEncryption
1e:b3:08:ac:4a:87:a1:71:cc:df:b2:95:f0:08:50:f1:fe:4c:
29:4c:11:7d:e2:7d:2f:92:cc:a3:2d:ec:c9:84:77:ed:32:fb:
c6:5b:a2:52:37:03:3a:9b:1d:2f:c4:a9:12:19:25:35:60:59:
ab:ad:fe:94:0f:ae:b8:0d:f7:cf:b8:87:1e:ad:64:0d:0c:08:
73:3a:db:f8:dc:e7:65:17:ac:5f:b9:5f:af:3e:d3:a1:57:9e:
e0:a1:30:f6:6b:f3:b7:1f:b5:e9:4d:65:c7:b7:1d:5c:38:36:
f0:fb:74:c3:8c:1d:36:ef:3c:80:d1:c4:a9:17:90:1c:8b:d1:
c9:dd:cd:5e:6b:53:2f:97:ae:b6:57:d8:ee:15:5d:b7:ce:b6:
70:ab:20:fb:63:b5:5b:3c:21:08:4e:d4:3f:5c:bf:34:0c:d7:
2d:99:d3:f2:f9:11:fb:8a:d1:de:bd:3c:df:d9:c3:51:54:93:
88:4f:93:6a:9f:79:4a:74:f6:9f:97:b5:4a:54:01:7d:08:8d:
76:fa:54:4b:11:1f:88:8b:0c:de:96:1b:a1:12:79:70:5d:58:
6c:14:0a:45:4f:e5:d4:8b:e7:a1:11:f9:2a:62:9b:74:1d:e4:
e6:40:66:7c:21:ca:22:6c:6c:37:06:4a:b7:de:44:8d:07:2e:
89:4d:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:09 2025 by rpki-client on console.sobornost.net