Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa
File: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (raw, json)
Hash identifier: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=
Subject key identifier: 8C:66:9E:43:4E:51:DE:12:C8:B3:13:53:6F:B7:69:73:C1:5A:3B:AC
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 01942825583E409CDFC2A11837701A81EAE9
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa
Signing time: Thu 02 Jan 2025 17:52:03 +0000
ROA not before: Thu 02 Jan 2025 17:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12430
IP address blocks: 2a01:800::/32 maxlen: 32
2a01:801::/32 maxlen: 32
2a01:807::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:58:3e:40:9c:df:c2:a1:18:37:70:1a:81:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 17:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c669e434e51de12c8b313536fb76973c15a3bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:d6:5b:fb:39:af:fa:4d:52:59:8d:28:6f:
2f:a1:4a:a6:73:af:fb:c5:c7:f1:73:ae:3b:aa:11:
c9:7c:8e:66:50:aa:f3:31:73:0c:a1:e6:cd:27:56:
c8:9c:70:0b:3c:3a:ab:bc:5b:b0:ea:a2:25:4c:9f:
a1:1d:d6:f2:4c:15:12:02:ca:20:9e:0c:69:e1:dd:
86:cc:01:46:33:a6:37:67:77:cd:c2:d8:9e:d9:dd:
de:92:ce:e3:61:4b:2c:a9:84:63:ee:74:fc:8b:4a:
55:5a:28:76:fa:b0:59:c8:a0:f8:45:de:97:54:ec:
46:e6:74:c3:33:bf:91:62:00:bb:a3:95:f5:7a:78:
7d:e4:b4:7f:f6:e0:91:4e:4a:82:86:8f:8d:aa:c3:
e6:49:e2:6f:12:ec:81:99:d5:d9:cc:09:42:14:af:
1c:cb:f9:f0:86:ec:a5:74:43:53:b4:ca:ea:9b:15:
3f:1c:6c:ee:1d:df:aa:c5:c7:ca:b3:3c:df:78:61:
03:6f:a5:98:05:7f:74:98:13:04:91:94:30:b5:10:
5c:0d:47:25:5d:a5:42:9b:73:26:0f:00:0d:52:b7:
3b:fd:09:09:99:77:ef:58:36:aa:64:74:f9:11:b5:
70:75:97:79:6f:87:2f:87:c8:42:d5:99:ad:09:96:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:9E:43:4E:51:DE:12:C8:B3:13:53:6F:B7:69:73:C1:5A:3B:AC
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:800::/31
2a01:807::/32
Signature Algorithm: sha256WithRSAEncryption
8c:90:43:1a:17:34:2a:4f:3d:9a:c9:1a:9c:29:3f:10:cc:9b:
e2:e7:06:d8:58:fa:cb:5c:96:43:f3:51:a0:a4:0e:24:f5:a5:
b5:9f:05:e9:78:fd:75:69:ef:3f:8e:70:76:79:84:05:72:14:
f7:dc:f6:4f:b4:f1:91:22:27:46:7d:b5:ed:27:28:30:58:77:
07:e1:d8:3d:18:cf:a8:48:78:09:c1:b8:37:26:2c:73:33:c3:
fc:cf:4e:8c:30:5d:99:17:9a:c3:4c:b1:f2:1b:e6:d3:46:a3:
84:b8:b4:13:fd:84:94:fc:e6:4a:d7:e6:f0:0a:ef:2d:c5:7b:
09:f2:83:37:52:00:61:b7:1c:62:a5:ac:28:d1:5b:bf:e6:2d:
77:d4:09:55:24:3b:e0:ca:64:ed:dd:12:07:87:a4:2a:84:ab:
2a:81:c4:2d:86:82:f4:99:b2:e2:b9:25:a2:65:4f:f2:80:07:
4e:ee:90:7a:46:31:82:cc:c0:e1:36:dc:81:6c:10:40:24:35:
98:05:8e:5b:73:42:64:c9:50:15:61:7b:35:e8:2e:46:17:38:
7a:f8:32:ec:62:22:71:5f:e8:34:bd:a9:78:b6:25:b9:49:3b:
2c:a6:36:f5:71:15:da:d1:73:76:ef:14:eb:8f:b8:ba:76:42:
b6:87:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:30:38 2025 by rpki-client