Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/16a5p3FEoxzMlPOn_LMRkAVMWPM.roa
File: 16a5p3FEoxzMlPOn_LMRkAVMWPM.roa (raw, json)
Hash identifier: CAvRxc353RmNaSkvIaea1XUSlBQ6PIMrwGBaF2+uNro=
Subject key identifier: D7:A6:B9:A7:71:44:A3:1C:CC:94:F3:A7:FC:B3:11:90:05:4C:58:F3
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 0194DF641838997671FA8C203CE3A1157C14
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/16a5p3FEoxzMlPOn_LMRkAVMWPM.roa
Signing time: Fri 07 Feb 2025 07:51:06 +0000
ROA not before: Fri 07 Feb 2025 07:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394144
IP address blocks: 2a0e:7580::/29 maxlen: 48
2a0e:7581::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:64:18:38:99:76:71:fa:8c:20:3c:e3:a1:15:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Feb 7 07:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a6b9a77144a31ccc94f3a7fcb31190054c58f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:cf:f6:fb:55:29:93:40:ce:d5:b7:eb:67:
ef:25:68:c5:0d:ba:30:c3:4f:ea:fe:e6:39:95:fc:
3f:92:8a:b7:4e:44:e8:90:f3:c8:03:dc:02:ea:17:
f7:94:6f:9b:9d:df:04:0f:3d:b5:5a:af:cd:2e:2d:
23:f0:1e:33:38:34:e8:c4:28:e5:40:e2:b4:11:8c:
55:be:0d:08:6f:cd:34:ed:5f:74:b8:3f:78:9f:54:
23:a8:7c:2b:d1:63:13:0d:9e:b2:fb:a1:4e:a1:06:
11:97:e8:5f:99:eb:7b:5c:6f:78:ba:e6:33:f5:b1:
3c:47:f1:a1:0e:9b:5f:09:50:7a:a4:7b:37:71:ba:
41:06:5a:d0:b3:a1:f4:4d:c0:0d:4c:62:16:f6:15:
7c:f5:cc:7f:15:a6:15:13:ee:8e:b4:c5:49:fd:ff:
6f:75:f5:6a:4a:5f:d9:f2:d8:0c:7a:c3:16:71:49:
1b:1c:0d:16:87:03:ae:9b:83:84:85:c4:14:6a:ba:
8d:88:f9:4d:9e:00:c9:f5:0b:fd:40:01:d8:03:78:
44:a3:c3:0e:fc:0a:21:ad:b5:fa:e2:2d:12:0c:3d:
c6:5b:b9:e7:46:75:31:bf:95:c9:ae:77:76:ec:fd:
90:23:dd:78:6e:5e:9c:95:eb:45:01:f0:c0:26:33:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:B9:A7:71:44:A3:1C:CC:94:F3:A7:FC:B3:11:90:05:4C:58:F3
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/16a5p3FEoxzMlPOn_LMRkAVMWPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
6b:1e:0d:56:19:30:d7:eb:79:ef:c6:0c:1c:0b:a8:7b:6e:58:
e7:f0:eb:bc:3a:06:3c:c5:3a:96:67:3d:a3:e4:32:06:f1:f7:
e1:92:cd:90:2c:a5:cb:98:89:87:3b:ac:62:7b:c8:70:75:45:
e3:90:93:47:d6:e2:4c:bd:27:95:10:04:38:79:31:3f:71:e7:
e4:f3:09:07:17:a4:e0:48:23:af:4b:63:fe:42:4e:a6:65:43:
f6:a6:79:74:76:24:44:e7:69:29:af:0c:2d:ac:da:a3:97:35:
79:f7:89:b8:65:e6:25:75:9a:fb:e2:75:bf:bd:06:69:6b:d6:
7a:0e:5c:0f:3b:58:fd:67:b2:15:5f:f3:84:9d:3b:99:c1:cb:
e5:c3:1a:72:89:65:50:de:29:78:5e:7e:dc:2e:62:84:27:14:
f6:63:89:f4:09:b9:5e:9f:01:e4:8c:25:ce:c0:ce:8e:33:5c:
d3:50:4d:db:b9:f4:05:2e:d3:92:1c:b1:e9:5b:87:ab:cf:97:
d8:83:56:fb:e3:e3:b5:07:4e:e2:b1:10:ca:e5:7d:f3:66:75:
14:80:95:02:9d:dd:c9:01:09:a6:47:4e:ec:78:2f:c2:e0:cc:
dc:ee:18:ad:71:85:37:25:2b:64:16:b9:ec:6d:1c:88:67:5b:
fe:34:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:01 2025 by rpki-client on console.sobornost.net