Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rA1bGIYeh7Jj4R3Jncep0Haebqs.roa
File: rA1bGIYeh7Jj4R3Jncep0Haebqs.roa (raw, json)
Hash identifier: Ut7BBLqU9wIoAklnkEdnLZy9ED47UnHZHkwm5D5Zq2k=
Subject key identifier: AC:0D:5B:18:86:1E:87:B2:63:E1:1D:C9:9D:C7:A9:D0:76:9E:6E:AB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8743D343D602FA9347B663BB5C04
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rA1bGIYeh7Jj4R3Jncep0Haebqs.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204765
IP address blocks: 2a0c:b641:8b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:87:43:d3:43:d6:02:fa:93:47:b6:63:bb:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0d5b18861e87b263e11dc99dc7a9d0769e6eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:f3:fa:62:7f:e7:8d:f0:22:ed:72:41:26:
a8:32:be:67:6f:e5:95:a7:f1:98:4b:da:d0:4a:37:
56:78:35:cd:cd:f8:75:4c:02:e1:d5:f0:6d:30:b8:
7c:f4:ee:d8:00:aa:17:ce:67:ae:1e:25:86:64:2b:
60:1d:24:41:ce:cc:3e:08:7e:89:4c:de:a6:bf:52:
03:bf:c1:c5:20:53:b4:23:df:0e:42:84:20:1c:99:
78:5e:d2:b7:83:00:d4:54:fe:7a:8a:a5:0b:1b:85:
7d:8a:12:29:20:3d:a6:81:7e:d2:19:53:37:88:02:
36:5c:68:5f:c6:97:79:5c:b2:a0:c0:a7:32:24:54:
e5:f1:34:f0:33:ff:c6:bc:b3:05:e6:0a:38:e9:1a:
2f:c6:f3:09:36:02:1d:cc:25:ee:26:85:c5:bc:42:
70:bb:56:5d:5f:ff:96:09:f5:dc:fd:5f:0d:cb:3d:
b1:ab:0d:73:e6:29:0b:e7:a5:59:e4:65:e1:3e:46:
4f:c1:8f:80:25:f0:a8:ab:ab:27:12:a5:fd:8c:32:
ed:60:b5:b0:34:2a:97:6f:76:51:6a:5e:08:27:31:
05:67:66:92:d2:5d:f2:ef:e8:00:2a:5b:60:37:63:
9d:df:77:7d:b3:bd:ef:31:3f:82:f5:2f:47:af:39:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:5B:18:86:1E:87:B2:63:E1:1D:C9:9D:C7:A9:D0:76:9E:6E:AB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rA1bGIYeh7Jj4R3Jncep0Haebqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:5a:4b:4f:d1:97:4d:92:8c:02:c9:d7:1e:42:e9:48:a1:04:
e0:83:f2:73:ec:97:d3:e6:e7:93:5a:e9:56:24:aa:81:40:06:
e9:6f:da:91:07:34:d3:35:0c:83:58:9e:c9:35:24:b2:c8:9a:
8d:9b:d8:6d:52:cc:dd:1f:21:00:20:ee:77:00:b6:80:e3:b0:
28:8e:d5:aa:4e:46:b9:ab:2b:a0:9b:b3:3f:f2:6e:9b:71:fa:
17:7a:54:22:2c:90:4b:cd:67:5b:98:f9:db:ad:ea:04:21:06:
3f:93:4b:94:96:b4:64:b9:d7:7d:ff:56:8c:2d:4f:b2:13:1b:
8e:65:e5:08:fe:6f:e3:6c:3e:38:89:ca:18:40:b7:83:8b:28:
92:89:5c:5f:ce:e3:aa:55:50:d9:b0:fb:6d:34:de:03:6a:7c:
b5:ab:d6:c0:89:eb:5e:6e:45:c5:b2:cb:da:d3:02:4a:4a:ed:
06:38:34:54:af:e1:4f:c9:bc:5d:04:47:89:6f:0e:9b:8f:22:
a7:fa:c4:e4:89:91:f8:32:82:32:7a:5f:37:9b:00:ba:d1:94:
6b:7d:e3:2c:64:3a:c9:7d:2a:86:60:d4:75:e9:b1:13:87:3e:
86:f8:bd:60:6c:f0:da:60:c1:bb:f8:d1:c6:01:ae:f2:bc:70:
49:1d:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:42 2025 by rpki-client