Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/bpJQADgUamylt2o_w_KHeqymchY.roa
File: bpJQADgUamylt2o_w_KHeqymchY.roa (raw, json)
Hash identifier: narn2zF+w6BAt5TNk48BM6B9fT9dHMMHb9pvuxXZczs=
Subject key identifier: 6E:92:50:00:38:14:6A:6C:A5:B7:6A:3F:C3:F2:87:7A:AC:A6:72:16
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019422FBD83EE8B3FA57B8EA320A6E671085
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/bpJQADgUamylt2o_w_KHeqymchY.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53813
IP address blocks: 2a03:eec0:3211::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d8:3e:e8:b3:fa:57:b8:ea:32:0a:6e:67:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e92500038146a6ca5b76a3fc3f2877aaca67216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:6d:cc:57:7b:b7:c8:ab:06:1d:38:8c:c0:
9a:b7:a8:ec:ca:50:4a:c1:d0:05:b2:2b:90:3b:2d:
35:5c:c6:fd:b6:56:a7:20:62:74:b4:ef:11:85:c0:
24:a5:0b:42:dc:b4:12:8d:2d:3a:19:77:1a:b5:2e:
b0:9c:a5:38:e0:fb:1f:71:bd:01:ed:f6:f2:1b:5f:
37:7d:46:2e:4e:bb:cd:cb:c7:be:95:4f:15:9e:69:
6e:31:cd:22:d0:dd:c3:ab:2a:bc:6d:11:8a:5f:b2:
79:c4:ec:3d:ae:b4:00:f8:9f:78:78:fb:eb:e3:f6:
98:cf:bb:a7:e9:28:c4:83:0f:39:02:6e:b5:ab:e8:
e9:2e:c2:9d:f5:56:a1:2f:26:08:7a:23:dd:2b:90:
20:f0:e3:19:21:02:5d:b6:53:3a:fa:f3:23:1a:90:
47:83:66:14:9a:fe:49:54:be:47:dd:bc:0e:55:64:
16:ef:6d:0c:40:dd:ca:c0:53:65:f4:9b:7d:b3:b6:
f8:c5:ac:3e:ed:cf:a6:a3:12:d0:cf:16:fb:e8:88:
d7:d5:01:10:ab:c9:e2:0b:1d:85:84:11:b2:40:5b:
f2:ea:78:1f:5a:30:10:2d:30:57:5d:a0:ec:35:de:
72:45:90:c3:36:db:01:60:cf:c2:e7:11:66:24:f5:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:50:00:38:14:6A:6C:A5:B7:6A:3F:C3:F2:87:7A:AC:A6:72:16
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/bpJQADgUamylt2o_w_KHeqymchY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:eec0:3211::/48
Signature Algorithm: sha256WithRSAEncryption
72:95:a4:1d:9a:a2:d2:68:1d:ee:f4:fd:10:72:d3:35:9b:9a:
ca:ed:35:cb:45:27:b5:1f:ff:e5:9a:a1:07:15:74:22:40:03:
04:21:09:85:d7:cf:97:2f:8d:a2:38:cf:40:2b:f9:38:c8:cb:
a2:79:53:bd:32:97:81:9b:bb:e2:d0:2e:2e:c7:fe:32:bc:2f:
db:c9:42:b1:49:be:87:6b:1f:79:93:77:dd:04:a2:2c:ce:7d:
48:30:9c:93:41:1f:49:e5:f3:62:9f:37:3d:29:e0:96:8a:29:
97:b5:b6:e5:32:60:97:d2:86:f8:3f:e4:9c:94:96:88:81:69:
52:d1:a7:dd:80:db:7e:8d:3a:0a:8e:37:04:1b:4a:2e:3e:cb:
20:5a:29:9c:ce:b0:3f:71:26:b3:53:ed:b7:e9:60:b3:cb:90:
47:b9:eb:fa:83:cc:b0:3c:2d:15:8a:48:21:95:77:01:3a:8c:
31:7a:3e:c4:a2:d2:39:fc:5f:67:26:07:d8:df:ed:02:95:ba:
f2:59:23:5d:8b:d7:75:a9:6b:92:85:99:da:ae:11:68:aa:d2:
8e:44:a6:d7:eb:84:06:eb:fd:a5:4a:f9:2c:6a:c3:06:67:27:
a4:42:c1:88:60:67:d3:3b:ed:6c:13:ac:20:85:15:ac:c8:d8:
45:1e:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:31:45 2025 by rpki-client