Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa
File: 5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa (raw, json)
Hash identifier: v2uCv1ouDdkiX0lyLyC8bVmuGUM1Kkuub/JlhDDXphQ=
Subject key identifier: E6:5D:45:39:81:11:A7:3C:23:09:66:7B:14:D4:DB:C8:0B:1F:33:9A
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01956BF1717133021BAE3401E5206244CD0E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa
Signing time: Thu 06 Mar 2025 14:52:20 +0000
ROA not before: Thu 06 Mar 2025 14:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203098
IP address blocks: 2a11:4200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:f1:71:71:33:02:1b:ae:34:01:e5:20:62:44:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 14:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e65d45398111a73c2309667b14d4dbc80b1f339a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:40:99:71:bd:f7:ca:1f:ac:83:1e:48:93:
f8:7a:2a:26:7e:07:dc:88:55:ad:4d:85:83:85:c6:
de:c2:61:b7:f8:8c:cd:17:03:43:a4:60:b6:4f:76:
92:bb:8c:c4:bb:63:03:ee:a1:ab:7a:da:dc:d4:42:
fd:7e:c2:7c:e7:29:03:f5:97:0a:e1:17:01:4f:5e:
d4:ae:62:d0:fa:6f:0b:55:ec:af:30:80:bf:70:38:
38:b7:e2:51:35:5f:db:a9:07:c2:07:21:74:7d:84:
ac:e3:bd:c5:21:51:b5:96:3a:71:3b:5c:ee:63:91:
aa:f3:d1:bc:ad:53:e0:08:17:e0:bc:ee:15:16:51:
84:8f:df:47:a3:ba:cb:ab:f9:0e:5b:53:7d:ae:ed:
34:0f:b1:43:78:0a:c8:92:f4:1e:e0:46:65:ad:d8:
2d:02:e5:fa:00:09:5c:ba:37:17:92:16:b3:54:e6:
05:5f:1c:4a:85:58:f0:5e:74:b3:4a:31:d4:b0:ab:
0a:9e:d7:d9:c9:2a:20:78:e9:ff:e6:b0:fd:a9:16:
93:89:82:26:96:23:02:49:f3:39:2f:54:bd:93:44:
0b:46:b5:c8:b1:9e:a3:fe:07:97:a0:3f:d8:26:48:
9b:37:d9:62:c8:02:4f:1d:7f:71:14:6f:a1:43:87:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:45:39:81:11:A7:3C:23:09:66:7B:14:D4:DB:C8:0B:1F:33:9A
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4200::/29
Signature Algorithm: sha256WithRSAEncryption
5e:2f:96:b8:f2:69:81:43:9d:5f:bb:a6:88:3f:0d:5f:c1:58:
85:cc:bc:91:1d:59:8d:67:7f:21:77:c9:92:97:ee:61:33:23:
39:5d:cc:72:9e:ca:e3:0e:47:18:73:b7:d6:7d:18:b9:7d:98:
b8:39:88:de:44:1a:c7:4f:63:db:07:76:ad:3a:60:9e:ca:58:
e6:c5:2e:b7:4a:e4:f8:7c:33:23:dd:15:ce:49:f8:87:f6:82:
f7:1d:04:ec:c7:b0:b8:77:61:ee:55:fe:51:d8:30:22:3a:b8:
b7:42:84:d7:0a:3d:21:3d:71:a4:d2:4b:54:04:bf:52:82:f4:
5a:51:77:f6:7d:12:e3:1e:1d:c0:bc:53:5d:d2:d8:2b:73:5c:
34:c6:9c:71:21:2a:ae:74:26:bb:49:0e:73:40:ca:8e:3a:d2:
b1:ca:b6:a4:b5:5b:9b:4f:49:1f:47:a0:31:2c:20:8c:40:66:
33:8b:e9:a3:b3:17:29:ac:91:d0:48:7e:9b:80:01:d5:4b:9c:
d9:35:d1:db:f8:a6:f7:21:37:9b:8e:72:5d:f4:eb:44:3e:e0:
18:42:1d:23:49:b2:a7:39:18:65:e3:af:76:6f:34:92:2d:6a:
40:78:df:ce:39:80:0c:74:4e:02:38:e8:a8:76:d6:fa:e6:1d:
b2:55:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:14 2025 by rpki-client