Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Eo8Q1bLhi8kv6o8DtxlyG9dR8ck.roa
File: Eo8Q1bLhi8kv6o8DtxlyG9dR8ck.roa (raw, json)
Hash identifier: PDqosQTblspNcWop1jk63xcwjoNWlsdxuWbsmYPl2eo=
Subject key identifier: 12:8F:10:D5:B2:E1:8B:C9:2F:EA:8F:03:B7:19:72:1B:D7:51:F1:C9
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA90C4D57F63A04C9D328E55F24473
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Eo8Q1bLhi8kv6o8DtxlyG9dR8ck.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209294
IP address blocks: 2a0c:b641:310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:90:c4:d5:7f:63:a0:4c:9d:32:8e:55:f2:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128f10d5b2e18bc92fea8f03b719721bd751f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:7f:08:b8:a1:da:65:1f:cf:9c:09:04:1d:
9a:2b:6b:f0:15:b3:de:20:66:23:f1:fb:1d:dd:1b:
59:a9:ab:00:41:8d:75:e5:a9:33:d8:52:e8:82:c3:
73:d2:ca:f7:bb:f9:9a:9b:cf:47:40:bc:95:61:2e:
39:99:02:5a:7b:28:7f:27:67:b9:dd:aa:a9:cb:4b:
52:f3:fe:1a:b3:c7:09:70:bb:c3:a0:d6:04:87:2e:
fd:e8:93:6b:75:ff:cc:8a:c9:86:a4:ce:00:42:46:
7f:2a:6d:a7:08:c6:db:7c:ed:32:84:28:32:e0:92:
3b:04:7b:75:84:ca:01:a4:11:44:d0:32:37:99:40:
d9:96:8f:ca:c2:43:de:01:25:87:e8:e8:e9:c8:59:
20:de:0c:1d:6d:cb:58:96:bd:3a:0f:c1:da:7f:f9:
de:11:22:ef:e7:8e:7c:6d:f8:e7:92:d7:ee:48:19:
a4:51:06:dd:e8:4f:71:88:27:32:d0:3a:8d:80:82:
15:b9:8a:e0:79:fa:3a:0e:39:2e:36:43:79:f4:61:
1b:37:26:0a:4e:ab:f3:57:2f:12:88:d5:d3:93:71:
f8:f1:43:05:bf:48:4f:17:54:42:95:3b:d9:54:cf:
1c:16:42:40:61:44:94:46:44:de:81:40:be:fb:bb:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:10:D5:B2:E1:8B:C9:2F:EA:8F:03:B7:19:72:1B:D7:51:F1:C9
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Eo8Q1bLhi8kv6o8DtxlyG9dR8ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:310::/44
Signature Algorithm: sha256WithRSAEncryption
9c:f7:08:46:1d:8f:2b:68:00:6f:0e:e2:f6:c0:8c:db:86:e4:
66:f5:c3:82:f3:51:5c:0f:b5:06:09:46:e8:af:ef:2e:b4:67:
d3:79:23:da:f4:02:01:81:f6:4f:4e:50:60:5c:23:16:5f:da:
b6:f9:db:c7:a8:13:59:2d:7f:68:35:27:f2:6a:48:1f:12:66:
61:74:d7:c1:ee:3f:9d:99:d1:17:db:4a:8c:cd:59:af:21:8d:
e6:90:55:9a:ab:19:7f:89:2b:22:fc:bb:e9:98:6c:6e:f8:17:
ed:f5:ae:0c:ca:3e:e9:b5:84:46:34:23:81:ee:f6:0b:01:a4:
68:96:56:23:40:11:45:d1:92:4a:c6:36:1a:80:ed:6f:6f:ec:
2e:47:e3:df:a4:fb:92:9c:af:29:9a:c5:91:44:21:8e:0f:31:
ab:94:91:2b:a9:7a:80:ea:50:46:d5:18:1a:da:cb:ef:5b:29:
93:40:0c:30:78:d0:30:69:57:ee:d4:33:b9:2a:ea:d0:22:2b:
c2:87:0d:a4:be:b2:c6:80:dc:79:21:27:12:9a:15:68:78:4a:
99:5d:32:35:38:c8:19:15:9b:5f:d3:a9:b0:db:04:4e:a4:76:
af:a6:73:45:bb:c0:e8:c2:cf:4d:eb:92:86:30:ec:00:56:bb:
03:2b:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:34 2025 by rpki-client