Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/BAxp0AcykwOfUw-ggmLJqUG1asA.roa
File: BAxp0AcykwOfUw-ggmLJqUG1asA.roa (raw, json)
Hash identifier: jzV156vqpDu6hHFWC7Lhqg/bc4evzNKzd5ezNLM203w=
Subject key identifier: 04:0C:69:D0:07:32:93:03:9F:53:0F:A0:82:62:C9:A9:41:B5:6A:C0
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019421B200289165BAC158694049CFD75937
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/BAxp0AcykwOfUw-ggmLJqUG1asA.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:00:28:91:65:ba:c1:58:69:40:49:cf:d7:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=040c69d0073293039f530fa08262c9a941b56ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:f2:9f:cd:f6:a9:54:d0:b5:77:90:50:f8:
96:9b:25:84:b1:bc:cc:de:ce:a2:55:32:5f:f5:f4:
24:f3:fb:d6:a0:d6:6c:a3:78:34:b8:11:94:c4:c3:
0d:24:a4:ed:12:b3:f0:27:db:75:c4:76:40:ac:4d:
2a:bd:9b:4d:3c:a3:29:0f:af:ee:12:54:68:27:7a:
f0:59:e0:50:94:7c:14:93:51:6b:20:ae:a5:7c:10:
dd:a5:10:1b:c8:5f:f4:5c:a8:88:9d:2d:6d:7a:51:
4b:9d:a6:b5:fa:98:2f:29:c5:d1:02:3d:b0:a4:07:
3a:aa:b0:94:4f:52:b4:93:80:0c:f3:75:92:99:4b:
56:ce:75:a0:7b:6b:87:6e:96:ea:a5:05:a2:1f:9a:
45:2c:63:5f:25:51:6a:09:28:af:ab:64:d0:e5:45:
81:c9:18:fc:f2:84:35:91:47:0c:1b:30:18:f8:4c:
04:9f:20:3a:02:7a:65:e2:e6:67:a0:db:67:6d:21:
8d:ed:96:4e:d7:ac:0e:3e:6f:a4:b8:a8:54:a3:a4:
90:e2:e3:84:ef:f2:12:c5:ce:f3:dd:4b:10:38:29:
f0:5f:f5:5d:a5:78:7c:51:1c:d9:fc:e0:5a:af:c0:
7b:2e:22:22:20:88:89:6f:d1:0b:a5:c7:fa:a4:ee:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:69:D0:07:32:93:03:9F:53:0F:A0:82:62:C9:A9:41:B5:6A:C0
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/BAxp0AcykwOfUw-ggmLJqUG1asA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff69:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff70::/48
Signature Algorithm: sha256WithRSAEncryption
3c:47:65:91:8b:ca:72:de:66:2b:34:e3:e2:df:aa:f6:b2:b9:
64:0e:99:c8:94:76:38:6b:ea:53:3f:61:14:07:a7:d8:2c:cd:
e8:cc:c0:fd:3f:b1:c2:41:e2:13:c8:05:f2:0d:9a:ab:f6:8f:
61:f5:cc:d6:27:87:fe:82:1d:79:78:b2:4a:19:84:2c:30:39:
b0:84:82:5f:73:2f:3e:15:55:0f:03:e3:ed:47:f0:a0:de:e1:
aa:ac:b9:e6:39:e9:11:d6:1e:5a:b5:47:06:41:0c:c2:cf:1d:
3a:b3:e8:31:c3:43:a4:79:53:f5:00:83:f9:ab:3f:eb:53:f7:
34:17:ed:3c:81:7f:86:52:d1:8e:0c:a5:a7:05:93:e1:05:16:
d1:01:09:52:4d:5d:f7:59:86:92:fe:1f:fc:9b:2b:c7:9a:37:
04:e2:f7:2e:c2:23:0f:c3:43:b2:ba:a6:ab:ee:eb:1a:d0:50:
3f:96:a7:b4:30:7b:30:48:ba:e3:b9:5a:ec:93:86:11:de:e2:
a3:44:ba:3f:05:34:ae:4d:49:b6:18:3e:6a:73:11:bb:0c:65:
9a:b2:dd:39:eb:f7:6b:38:dc:0a:c2:2a:6e:f2:f0:33:68:45:
73:19:ea:ed:7f:4d:5a:a7:f2:fc:9a:e9:3f:b5:ad:ea:fe:a7:
e7:53:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:34:36 2025 by rpki-client