Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/l-051BYsRCxKE3vQ5NqqDTviFr4.roa
File: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (raw, json)
Hash identifier: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=
Subject key identifier: 97:ED:39:D4:16:2C:44:2C:4A:13:7B:D0:E4:DA:AA:0D:3B:E2:16:BE
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 01941FFA4860DE6BF0EFB0E42702A27ADDB7
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/l-051BYsRCxKE3vQ5NqqDTviFr4.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a11:9c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:48:60:de:6b:f0:ef:b0:e4:27:02:a2:7a:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ed39d4162c442c4a137bd0e4daaa0d3be216be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:1d:51:a4:91:fc:be:0e:96:fd:8d:1e:65:
4f:07:3f:bc:83:75:90:e2:47:25:37:43:9b:cb:a0:
a4:7d:f8:0f:d1:0e:5f:47:0d:34:d4:c2:43:da:3b:
81:e1:e9:f6:b2:fd:9f:46:6f:cd:fe:10:54:f6:53:
a1:7e:7a:83:27:fb:81:0e:13:21:02:ae:d6:84:f2:
6a:9b:c0:65:b3:65:06:f8:4d:74:3b:79:1b:c8:20:
d4:aa:3d:f3:52:8b:59:3d:bb:0d:af:39:a4:21:f8:
ec:74:15:54:b6:4f:31:fe:55:21:63:89:92:57:3a:
d4:c7:8e:98:40:fc:be:55:59:60:d9:d9:7c:e5:e9:
b2:5e:95:fd:83:1d:36:d1:f4:0d:be:69:7a:57:9f:
53:9b:ea:e1:05:43:a2:ed:37:ef:ff:69:ad:05:d4:
62:24:f7:86:1b:69:a6:4f:60:66:6d:c7:8c:2d:be:
d3:06:a9:eb:35:e1:66:76:0c:17:be:33:f1:2f:31:
30:8b:c9:f9:b6:f3:7e:5e:46:ba:51:35:f5:c8:c2:
e8:c5:27:44:f0:16:37:6c:24:5b:0c:98:74:ae:ba:
f7:2f:93:94:b2:83:75:f4:be:4c:e4:b6:5f:73:07:
a6:23:e7:bf:61:cf:1d:0c:a1:b3:d6:f0:b9:ae:b9:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:39:D4:16:2C:44:2C:4A:13:7B:D0:E4:DA:AA:0D:3B:E2:16:BE
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/l-051BYsRCxKE3vQ5NqqDTviFr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:e2:ce:8a:e0:05:7d:b5:5d:ee:7b:6e:81:f6:ed:0e:f9:86:
79:f5:b6:20:0e:f1:37:2a:57:77:71:2f:27:52:99:3e:b8:dd:
cd:b9:df:d3:77:5c:cd:f9:f5:37:a6:a0:7f:76:b2:53:56:36:
ce:0e:27:cd:c0:7e:7e:fa:4c:d7:01:24:8f:e1:2e:ba:5c:40:
18:af:6c:f8:7e:91:f0:d0:02:2f:c1:32:bb:ad:28:89:50:01:
a2:02:e2:a1:19:89:b9:6b:cf:c3:c5:eb:1a:4c:58:5d:d6:9c:
2e:46:91:2d:98:a5:3b:60:ff:76:47:cc:01:49:ae:e0:98:f6:
21:18:74:61:0b:4c:60:50:a2:15:03:37:29:39:a5:bc:03:72:
b6:8f:18:a4:8c:53:ec:af:52:63:06:ef:b8:dd:0b:76:f7:5c:
51:26:84:f1:72:02:3a:29:26:02:6d:6e:7b:bf:c3:78:fb:74:
dd:56:36:80:1a:89:e5:2e:57:93:fc:25:ce:d1:10:a9:b0:3c:
9b:e2:02:70:89:ec:9d:69:d9:2b:ff:ff:9f:62:12:bc:b4:36:
1b:40:79:6f:d9:d9:d6:3b:52:8c:17:3e:3c:31:8c:7f:89:ea:
ba:c0:bd:ce:6d:b1:14:87:bc:b7:5f:7a:fc:fa:03:53:2a:c6:
ef:29:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:55 2025 by rpki-client