Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cGKxhbkFn9sdEc2dsnsf-zBxTAU.roa
File: cGKxhbkFn9sdEc2dsnsf-zBxTAU.roa (raw, json)
Hash identifier: ckJUKnwHuEojqfmMqssfWth0PJQT5xdIWVGAqymX2ss=
Subject key identifier: 70:62:B1:85:B9:05:9F:DB:1D:11:CD:9D:B2:7B:1F:FB:30:71:4C:05
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D8A3B7B92BB10B31A318C12A3C8A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cGKxhbkFn9sdEc2dsnsf-zBxTAU.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 2a0e:c7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d8:a3:b7:b9:2b:b1:0b:31:a3:18:c1:2a:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7062b185b9059fdb1d11cd9db27b1ffb30714c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:1e:da:57:2d:4b:e2:5c:ab:e9:fe:d2:c2:
b7:82:99:42:f2:d6:98:9b:14:21:ac:a3:fc:bc:f5:
ac:be:b5:bf:e9:2f:b0:3c:84:10:ce:b0:a7:54:c8:
54:8a:14:f8:0f:4c:64:19:64:1a:b3:85:61:08:8a:
18:4c:6f:7d:83:09:33:83:65:fd:06:60:57:f4:81:
0e:27:24:17:d7:76:e2:0f:85:0e:5c:07:4e:49:af:
71:df:da:ad:4f:e2:78:05:8f:87:08:ec:14:21:05:
50:f0:f2:ed:5f:6d:00:8e:b2:91:2b:34:80:52:f4:
36:f5:28:02:09:1b:78:5b:d7:e9:d0:e2:0c:b3:b3:
5a:06:bc:9f:fd:e3:2b:e4:9f:a8:b4:b6:a9:1d:ce:
3c:1f:ea:34:c7:8d:7c:86:b2:6b:60:f0:0a:b2:5e:
1f:28:36:b0:f6:ba:8d:23:1e:d4:54:7c:8b:ad:48:
bc:e6:b5:6d:ce:c5:cc:32:3b:ca:ec:07:21:d8:9e:
eb:72:a2:0e:92:8f:a0:53:2b:37:ee:1d:c9:2f:cb:
03:39:28:86:8b:03:94:61:c0:4e:dd:ac:39:e1:8f:
4b:8b:f1:e6:dd:da:18:2f:8d:d9:db:02:5a:fb:d7:
94:33:91:e0:3e:15:05:a0:ea:4f:a5:c2:43:b7:c6:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:B1:85:B9:05:9F:DB:1D:11:CD:9D:B2:7B:1F:FB:30:71:4C:05
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/cGKxhbkFn9sdEc2dsnsf-zBxTAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:36:37:58:e2:79:17:62:34:3e:c1:3b:a5:03:1f:68:8e:52:
86:ff:f7:ba:28:49:2c:c0:4f:6c:d7:a4:49:45:79:a1:ac:62:
1f:19:06:64:3c:9c:c0:c1:ca:1a:cf:f0:4a:32:30:be:99:fe:
7a:ba:e9:1f:7e:6c:a1:19:cf:b0:d9:42:0a:50:b6:5e:22:a0:
c0:76:4d:38:16:68:8d:ac:96:80:ae:5e:e3:f4:6d:e4:50:86:
7b:d7:72:e0:26:48:6a:e0:03:a6:15:c5:63:bc:85:56:90:df:
80:d9:41:73:3c:d9:e1:19:ab:b6:c4:64:c9:8a:64:d7:25:4e:
c9:e6:d4:69:ab:22:99:20:34:04:9d:49:ba:20:8c:32:0f:38:
97:3d:d5:9c:0f:1c:52:40:3d:c2:85:0c:d5:ee:f7:af:33:1a:
49:b0:38:23:42:4f:79:50:d5:0f:06:48:eb:8e:89:74:e2:ae:
57:2b:7d:c9:95:1d:95:88:e2:91:97:e0:bf:d5:31:d1:63:7d:
5c:ec:25:bd:49:44:c0:64:f0:7c:83:a3:83:05:e6:38:5c:b6:
27:fb:00:8c:82:bc:5a:ed:3d:9a:62:9b:57:22:0b:cc:fc:b7:
a6:4d:55:db:0b:d2:0a:35:2e:32:74:4f:ae:7e:c3:f0:59:eb:
e5:d5:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:35 2025 by rpki-client