Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa
File: yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa (raw, json)
Hash identifier: EWK0TzEQAkMC45IBHaxXqenmmaQ9qqJ8lOmSyj9LXKw=
Subject key identifier: C8:EF:CB:29:2D:D8:36:C3:60:25:1B:C6:97:47:0C:CE:EA:49:D3:0E
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FBF0AFDD4EA2A606C7D71CA896D7
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa
Signing time: Thu 02 Jan 2025 13:49:10 +0000
ROA not before: Thu 02 Jan 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 2a0b:4140::/32 maxlen: 36
2a0b:4140:7028::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fb:f0:af:dd:4e:a2:a6:06:c7:d7:1c:a8:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8efcb292dd836c360251bc697470cceea49d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:d0:bc:2f:4b:21:51:72:ec:7e:15:20:a5:
7a:36:04:e2:f6:0b:93:8f:c1:00:29:f5:3d:45:4b:
95:34:ac:d4:d2:2c:f2:cf:3a:a0:17:21:6f:73:b6:
3a:eb:6e:41:13:fc:2d:9c:ac:f7:78:04:7a:f2:e4:
2b:ef:74:d8:e7:58:ec:4b:6e:18:81:06:31:fb:53:
89:12:cb:20:d8:24:78:b2:4d:b6:0c:a4:bc:4d:3d:
12:81:d6:d6:ed:36:cd:73:cf:37:87:07:43:17:84:
c2:c0:9d:2d:b1:13:32:95:b0:2d:79:b0:81:c1:d5:
fa:f1:27:1e:e4:49:cb:5d:67:7a:48:fd:26:5f:df:
e3:f1:c7:80:5a:b3:b0:d2:51:f0:53:ab:d1:60:cc:
b1:c3:8d:b2:67:ab:12:91:c3:fd:93:a7:c6:88:5d:
7e:83:0a:8d:7c:fd:30:40:39:fe:27:61:b8:bb:85:
14:74:37:c8:a2:1f:7b:17:81:76:2a:d2:ea:98:1e:
24:a0:a7:ac:67:36:76:9f:f3:56:13:bf:b7:7c:b6:
6d:14:e7:88:e1:4b:d5:f5:ec:37:dd:fb:fb:6f:82:
b4:a2:c4:e6:a5:cb:4a:e2:d4:4f:5b:fc:b4:b5:dd:
0c:da:29:75:00:c7:2d:67:86:db:e5:bf:79:dc:2c:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:CB:29:2D:D8:36:C3:60:25:1B:C6:97:47:0C:CE:EA:49:D3:0E
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4140::/32
Signature Algorithm: sha256WithRSAEncryption
97:1b:95:52:4e:bb:62:c3:68:2e:27:e8:ee:70:0f:f7:e5:78:
4c:b8:29:06:43:ec:b9:84:7c:9f:96:eb:f6:2b:77:8d:c9:dc:
9b:2b:0c:b4:09:a1:7b:9f:ce:45:64:f8:3c:db:29:ba:f0:3a:
38:16:2e:3a:49:ba:73:12:3a:1a:a8:c7:8b:04:16:59:73:dd:
10:7d:99:10:a6:e6:e3:af:4d:5e:81:1e:2b:29:01:85:85:a2:
5c:1d:84:a5:d0:f9:21:4a:f0:4d:bc:e1:2e:2c:fa:33:30:92:
02:ad:a6:79:0e:e8:4b:c5:57:db:12:b8:e7:50:08:f1:53:45:
10:e0:ea:f7:74:af:78:fd:e0:aa:c9:c7:f6:b4:37:ab:8e:ab:
fd:d4:af:08:d4:f4:8a:7c:72:d9:1d:ff:dc:0c:06:65:3c:42:
fa:35:b9:68:88:51:06:c0:80:6f:96:3d:a4:e8:1a:f1:f2:2a:
6c:97:83:10:15:d1:be:72:ad:2e:10:30:42:47:88:5e:15:72:
29:76:3c:92:07:b0:07:99:45:6b:f4:e4:8c:54:44:a1:db:c1:
a6:6d:e5:b2:38:79:92:7a:61:4b:aa:4b:29:be:09:a8:c4:9a:
ee:81:0c:06:81:c5:b2:99:20:2e:c7:8f:9f:0d:1a:7f:05:78:
40:cc:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:59 2025 by rpki-client