Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/06NSghyd-RfQfllOJ5ERAf7RZag.roa
File: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (raw, json)
Hash identifier: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=
Subject key identifier: D3:A3:52:82:1C:9D:F9:17:D0:7E:59:4E:27:91:11:01:FE:D1:65:A8
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B658E7B0945539F2EC5A4A930020E0
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/06NSghyd-RfQfllOJ5ERAf7RZag.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398106
IP address blocks: 2a01:488:bb1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:58:e7:b0:94:55:39:f2:ec:5a:4a:93:00:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3a352821c9df917d07e594e27911101fed165a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:f3:38:fc:2e:d0:66:24:38:08:a8:c5:c2:
32:80:ab:c4:f1:ee:25:a8:bd:3f:fe:7a:44:88:37:
62:01:dc:00:60:f8:8c:1f:ad:aa:8b:52:23:48:d6:
24:81:8b:37:20:da:a2:68:62:8d:ce:4e:37:f2:83:
1a:de:17:bd:bc:7b:3d:88:7b:0c:52:91:1b:8f:39:
9e:a1:e2:30:5e:6a:73:6e:e4:55:54:32:f3:36:da:
f0:58:af:7e:cd:7c:8b:bd:69:a7:3a:b9:84:a4:75:
49:b3:9c:c6:02:c8:ee:a4:75:46:7c:ab:5f:ed:46:
0f:a3:c1:8c:9a:fb:66:62:ff:9a:37:62:2d:22:a0:
ff:81:99:f9:42:a2:39:57:21:ab:be:35:f5:ec:44:
bf:fd:b0:c1:a2:b5:89:98:08:5c:32:80:63:17:2f:
87:ab:58:d9:32:87:fe:2e:de:2e:26:4a:b0:00:e1:
bd:5d:d3:9d:a6:72:64:3c:c1:48:02:2e:85:7c:a1:
e2:55:1a:62:4c:ba:dc:75:0b:59:a3:e8:59:99:ee:
8f:c8:f3:c7:30:e5:4d:a0:47:40:1f:78:fa:94:1b:
14:63:b9:2b:33:52:7f:4e:25:9d:39:38:93:d1:dc:
d6:7f:75:45:65:5c:cc:6a:dc:0f:11:b4:e5:63:f5:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:52:82:1C:9D:F9:17:D0:7E:59:4E:27:91:11:01:FE:D1:65:A8
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/06NSghyd-RfQfllOJ5ERAf7RZag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb1a::/48
Signature Algorithm: sha256WithRSAEncryption
48:56:ef:17:91:d4:db:33:5b:fe:64:af:62:30:c6:b8:b1:c2:
76:93:1b:94:a8:00:96:96:57:64:67:86:02:99:20:82:ba:97:
cb:ca:29:5c:f7:26:9a:fc:6e:2b:27:e5:a5:26:c9:89:be:17:
dc:c1:9b:1b:59:a1:9c:dd:7a:0e:ab:b6:63:97:cc:cc:33:a1:
68:a9:74:45:a4:ef:54:d2:cb:92:33:33:75:f7:b1:af:8c:cc:
96:22:a5:da:c9:4a:12:d1:dc:95:f0:34:31:3e:b3:36:71:4f:
f3:35:a8:88:da:20:d9:64:32:e2:38:5e:e2:a9:4c:a7:56:66:
44:58:9a:22:16:85:41:11:bf:9f:31:3c:62:12:8f:ca:76:22:
a4:63:75:49:db:e0:90:ec:5f:97:e0:78:22:9b:08:3e:e2:c5:
60:df:77:08:71:2e:cb:ee:55:69:34:b2:84:97:8b:6d:77:8c:
f4:55:33:27:ab:d4:b0:fc:1e:af:e3:d4:e6:fd:f5:f2:8a:8f:
08:35:1e:c9:02:9e:fc:f7:c2:90:c2:42:30:5f:52:d7:81:89:
ac:ad:ba:23:bc:86:27:42:7b:92:69:00:fc:3c:99:dc:8d:54:
b0:30:1f:56:84:f5:ab:b3:b8:36:f8:6a:bd:c0:fd:5f:22:dc:
3e:a7:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:29 2025 by rpki-client