Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa
File: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (raw, json)
Hash identifier: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=
Subject key identifier: 69:3C:67:32:EA:EB:1E:7A:09:66:58:14:C8:F4:CD:1D:3E:08:AF:C4
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01956BE6745A2C58CE11ABEEFEF6575A488F
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa
Signing time: Thu 06 Mar 2025 14:40:19 +0000
ROA not before: Thu 06 Mar 2025 14:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213705
IP address blocks: 2a09:2fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:e6:74:5a:2c:58:ce:11:ab:ee:fe:f6:57:5a:48:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Mar 6 14:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693c6732eaeb1e7a09665814c8f4cd1d3e08afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:d7:0e:1c:d1:20:51:67:5d:69:19:b3:a3:
9b:c2:52:7d:ba:d8:ed:d2:4d:e0:08:cb:d1:c4:44:
87:c4:d7:6d:ef:77:c5:22:df:ee:7b:25:df:9f:60:
eb:21:95:94:50:79:ca:cf:a2:7c:36:60:38:0d:21:
7e:cf:6b:c2:07:cf:fc:a4:1c:94:5e:36:c5:5c:48:
c4:4b:f7:d1:7b:cf:74:76:ca:ed:77:47:49:12:39:
05:17:9c:e5:c5:0c:45:fc:f3:42:f8:d9:d9:d8:02:
29:d2:85:bb:1f:7e:6b:bb:21:3c:48:0f:e6:82:f1:
83:56:83:96:b5:62:91:45:19:d0:b7:9f:ed:6d:56:
d6:99:86:17:c7:d9:15:db:be:a4:88:e9:f9:0e:c9:
c2:11:9d:dd:ee:07:6a:31:4a:0a:67:98:95:df:6d:
13:0d:db:03:c3:af:c0:0a:05:12:c4:52:df:7b:93:
a9:53:2a:18:da:74:00:ce:55:1f:07:9b:62:e0:fd:
e1:e9:a1:d0:78:1f:45:93:64:6f:53:f2:fa:62:a1:
fd:eb:0d:2d:b9:40:8d:6c:25:f6:31:69:1d:ee:78:
09:f2:65:f3:64:4a:d8:8a:b0:77:a2:af:0a:99:6f:
86:2a:bb:c4:3a:bd:ee:43:9e:97:72:ef:48:ca:f9:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:67:32:EA:EB:1E:7A:09:66:58:14:C8:F4:CD:1D:3E:08:AF:C4
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:d4:c6:9f:c3:25:de:ca:ab:63:c4:41:c5:88:04:76:60:f0:
53:1e:16:f0:a8:70:9d:a6:cf:4d:5b:67:43:fe:75:85:90:67:
15:b6:85:02:bb:2d:22:95:97:e6:e2:83:8a:45:63:bf:19:39:
91:44:09:9b:b4:a1:2a:02:b1:7f:b1:0d:d7:58:15:80:41:2b:
b0:23:01:8c:02:3b:9b:dd:3d:96:52:6f:20:b9:0e:d8:fb:3f:
b4:01:a9:60:4c:aa:7e:87:e0:0f:54:17:84:29:ce:6b:63:d8:
35:b3:7f:c5:d5:3b:f3:51:39:6a:b8:a5:6b:6b:b1:3d:37:a2:
36:0a:ca:8e:a1:a0:51:9e:1e:93:93:39:89:89:eb:3f:d6:25:
bb:9c:aa:e8:df:b5:27:8b:c3:13:62:ba:af:ac:8e:95:8a:19:
c6:2a:1b:d0:13:30:03:0b:1a:7a:88:19:e6:bc:86:ef:a6:36:
f7:b4:7e:bf:64:14:5d:53:6a:cf:a1:df:0a:7b:1f:bb:14:8f:
95:31:a7:91:79:d9:53:53:ae:30:ba:21:b0:2a:c4:88:b7:49:
0f:1c:9c:21:62:cf:38:4c:a2:df:be:eb:c7:df:68:54:7b:22:
63:fe:a0:f0:b8:04:c4:22:28:a5:34:9f:90:12:0d:26:23:50:
8c:20:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:39 2025 by rpki-client