Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sE0-7UVQDIzqkSUPmPz3MugeZEo.roa
File: sE0-7UVQDIzqkSUPmPz3MugeZEo.roa (raw, json)
Hash identifier: yUTlVlXxYa/+pgs6/wsGgcKa3GlP0YWZuY1Ke1D8eJk=
Subject key identifier: B0:4D:3E:ED:45:50:0C:8C:EA:91:25:0F:98:FC:F7:32:E8:1E:64:4A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA7EA950273E50CCD6F42F7CBAB09A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sE0-7UVQDIzqkSUPmPz3MugeZEo.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136620
IP address blocks: 2a0c:b642:1a04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7e:a9:50:27:3e:50:cc:d6:f4:2f:7c:ba:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04d3eed45500c8cea91250f98fcf732e81e644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:6d:99:64:0d:89:58:a5:9f:41:12:43:d3:
74:c1:4d:12:48:ab:03:83:11:db:38:f8:d9:0b:27:
18:35:3c:94:f1:af:4f:80:80:cc:87:a5:19:3f:e2:
5a:62:fe:69:fc:75:d8:5d:5c:f5:a2:9c:d6:98:06:
a3:2b:27:13:7d:ee:59:59:b8:c4:12:dd:7c:14:40:
cb:1c:39:eb:e1:1a:2b:9b:94:89:3b:5f:b6:18:7b:
dc:f7:fe:60:14:8e:ed:1f:9d:62:37:7d:eb:f0:4c:
ab:f4:6a:8f:07:3d:9d:9d:c6:c5:d2:5d:5d:e3:cb:
a3:95:99:a0:f9:82:6b:6d:8b:f6:80:86:3d:66:8d:
7c:93:60:0e:ab:63:b8:f6:57:48:fc:b8:f2:41:4f:
e9:52:11:d4:9d:16:a2:a5:ac:4d:13:79:2a:32:63:
53:25:04:e1:da:35:3c:1f:1f:be:73:f4:ea:11:c4:
a7:a8:29:9e:84:4d:80:e2:d4:c2:b7:dd:23:0f:eb:
5b:4d:85:4c:a8:22:e8:dd:1b:eb:6f:4e:3b:a0:b2:
89:0c:3a:0e:ab:56:2f:e9:ed:80:2d:96:9a:5e:21:
3d:98:35:f3:37:cf:2e:88:62:8e:c4:a5:e9:4f:4d:
2e:c4:84:cd:62:f7:a0:19:b0:86:15:16:a2:3b:92:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:3E:ED:45:50:0C:8C:EA:91:25:0F:98:FC:F7:32:E8:1E:64:4A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/sE0-7UVQDIzqkSUPmPz3MugeZEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a04::/48
Signature Algorithm: sha256WithRSAEncryption
2b:48:e8:95:31:08:5c:0b:11:2b:91:f5:ad:30:b9:64:93:cd:
1b:28:e7:d6:e4:69:da:40:35:d3:4b:a9:90:ea:ee:f7:52:51:
4c:bf:f9:6b:83:4b:89:30:af:13:57:34:83:1d:58:af:da:5c:
17:28:2c:a0:c8:cd:fa:55:c5:f7:8d:9e:84:84:5f:24:c5:1a:
48:72:a5:f4:bb:0d:04:c7:b8:c7:16:01:00:13:bc:fa:96:8e:
d4:a1:b9:d3:c6:bf:eb:1a:3f:93:71:32:ae:19:30:b1:d4:4a:
88:51:b9:dd:62:1a:49:5c:6a:b6:6f:81:b2:40:5c:da:e6:1b:
7d:02:e5:c3:5d:24:25:3e:83:f6:57:cc:9e:29:2d:5f:8b:d9:
c6:74:9d:bf:3e:d3:8a:96:80:a1:3c:89:10:79:f0:67:48:48:
26:73:92:c0:69:f0:e1:d9:34:21:be:10:f7:eb:3a:cd:c1:1f:
c9:91:74:bc:1e:63:f9:04:f1:a8:6d:46:a5:f1:c4:37:58:21:
48:a8:b5:5e:61:d0:06:29:6d:17:96:51:4a:2f:ab:09:af:91:
57:d2:a4:ff:bc:dd:a5:3a:19:3c:20:31:3b:e7:5b:9c:7c:d0:
15:5e:89:95:ca:86:25:1e:99:62:17:15:38:43:17:3e:d9:82:
0f:1f:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:22:51 2025 by rpki-client