Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa
File: RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa (raw, json)
Hash identifier: VExSYS2yUuqfk1LC6juwXPrWXoN/wolLvgvP0orlLd4=
Subject key identifier: 45:D0:8E:55:92:F2:86:0F:37:63:F6:51:A8:59:F3:5C:B7:3D:1E:C5
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B687EEEE9CA040B13577DB26B5A948
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213120
IP address blocks: 2a02:2370:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:87:ee:ee:9c:a0:40:b1:35:77:db:26:b5:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45d08e5592f2860f3763f651a859f35cb73d1ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:5c:e5:88:c6:50:0c:4b:62:94:8d:a6:ea:
73:fe:37:86:7c:b9:d6:00:32:88:07:bb:f4:1f:b3:
20:d8:3e:11:23:bc:66:be:29:49:cd:c8:d0:16:d0:
ed:91:28:ac:45:12:08:81:14:eb:5c:8f:ca:50:50:
9f:1c:6c:55:df:c2:d6:06:96:2b:d9:3c:72:3a:44:
4e:4a:d1:9b:dd:c6:3a:8e:52:5e:ed:aa:84:59:21:
dd:42:8c:32:ea:de:d5:09:d3:86:f4:49:ad:72:6c:
9b:74:24:28:f9:e6:a0:6a:05:0b:72:1e:96:f6:7a:
a1:29:e4:fc:80:90:f0:1d:b2:9d:55:60:b5:af:cf:
89:a0:f9:50:8f:aa:c6:39:5a:2d:3d:67:98:b9:ee:
bf:be:c7:39:45:a8:b6:d3:95:e3:22:aa:b1:b2:c8:
e5:c0:e7:c5:e6:c5:d5:19:f6:d1:74:9b:72:68:32:
a5:50:fe:2e:e2:8a:90:32:e8:02:65:60:84:7e:de:
6e:78:8d:54:8b:0f:e0:d8:d7:ec:1c:bb:0f:d7:89:
d5:2e:90:15:74:bf:0f:b5:1f:f0:a5:b6:05:5d:cc:
29:1c:dd:41:d8:51:cc:2b:7a:7d:e9:5b:ec:10:8a:
c3:37:49:b6:ac:ef:9a:fb:87:9b:6d:42:11:49:d2:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:8E:55:92:F2:86:0F:37:63:F6:51:A8:59:F3:5C:B7:3D:1E:C5
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RdCOVZLyhg83Y_ZRqFnzXLc9HsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2370:1000::/48
Signature Algorithm: sha256WithRSAEncryption
82:96:7c:f6:2a:f2:7e:4b:2b:3d:d2:a8:5b:29:64:d3:24:38:
f3:24:5c:4f:54:70:02:13:49:5b:16:a5:92:7f:17:64:47:d7:
ac:22:95:d8:00:d0:1c:8b:28:f7:7d:b8:c4:25:aa:a7:56:79:
75:52:fb:57:6d:f5:81:4a:d5:ca:38:38:1b:a0:1d:51:e8:de:
9e:31:91:38:99:79:b5:f2:76:96:fb:c8:28:ea:93:82:b6:14:
4a:8b:66:5e:ee:c8:71:67:79:9a:1c:30:12:16:ab:91:b0:5f:
3d:f3:2b:03:80:18:2a:88:44:d1:4f:60:b1:c6:d9:0d:7b:bb:
4f:89:b2:1f:6f:a6:2a:19:54:c2:48:f4:96:11:32:a4:8d:df:
8c:89:14:4f:7b:6f:4f:13:01:3f:98:ab:9a:1a:37:94:4c:98:
27:96:77:6d:67:95:0d:03:cc:29:ae:f2:46:cd:06:17:10:7a:
5f:04:fd:89:c1:e6:11:61:5c:b9:dd:3d:b6:17:d1:eb:b2:c8:
e6:4f:d4:1f:11:f8:f9:e1:82:28:22:d0:a5:a8:af:71:e0:c8:
00:48:84:d2:4a:92:b9:5a:92:70:39:23:71:07:07:e4:12:4f:
45:1d:48:47:b5:a3:2e:fe:50:84:cc:70:05:0b:ee:97:10:f4:
2e:33:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:20:33 2025 by rpki-client