Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/I58Hs_8f85FK_FT8uW8jm1NBQEA.roa
File: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (raw, json)
Hash identifier: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=
Subject key identifier: 23:9F:07:B3:FF:1F:F3:91:4A:FC:54:FC:B9:6F:23:9B:53:41:40:40
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B64DA47D727EB7AE01993F54F1ED21
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/I58Hs_8f85FK_FT8uW8jm1NBQEA.roa
Signing time: Thu 02 Jan 2025 15:50:46 +0000
ROA not before: Thu 02 Jan 2025 15:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39779
IP address blocks: 2a01:488:bb06::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4d:a4:7d:72:7e:b7:ae:01:99:3f:54:f1:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239f07b3ff1ff3914afc54fcb96f239b53414040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:8f:84:5f:84:73:20:c5:10:cb:7a:b3:20:
84:d8:ef:e1:74:fa:b0:d1:be:2c:53:91:95:71:27:
16:48:0b:6f:57:f9:87:33:1d:ef:6e:0a:62:72:78:
1a:da:b5:01:df:04:43:7f:57:60:d9:22:85:45:5d:
0b:02:c3:4f:b9:7a:0a:d0:67:da:8e:3f:01:dc:a9:
b4:e1:fe:05:4a:c5:8e:8d:08:14:23:7b:9a:5a:b8:
79:81:ad:b2:c8:0f:4c:7e:f7:17:d9:4b:af:6a:32:
30:f1:26:c3:68:6d:f8:54:8b:4b:61:b5:1b:65:93:
a2:a1:00:51:99:f4:07:7d:9d:af:e0:a4:a8:db:a1:
96:b1:fb:24:ba:54:3a:33:0e:60:70:3b:9b:b2:93:
ff:5d:2c:8c:e2:fb:01:09:ca:7f:62:a9:0c:f8:e2:
17:6a:59:be:ea:b8:f6:05:4b:27:41:09:77:e6:66:
af:e7:6f:79:0a:db:42:f1:cf:78:ec:bd:a8:25:35:
00:01:e8:bf:4a:a8:3c:39:a6:18:89:88:bd:fc:8b:
9f:5c:89:66:fc:df:e2:3e:05:55:2f:b1:d8:32:42:
fd:e4:70:c9:41:b3:58:1e:c2:5e:1f:d4:0c:de:46:
11:02:d7:7e:19:6d:5a:0f:ec:54:70:b2:a3:81:d2:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:07:B3:FF:1F:F3:91:4A:FC:54:FC:B9:6F:23:9B:53:41:40:40
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/I58Hs_8f85FK_FT8uW8jm1NBQEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb06::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8b:5c:ec:60:17:e8:7e:91:03:29:da:1c:7b:f7:3e:f7:73:
91:af:a7:e0:10:70:ca:08:df:f6:da:e1:d3:d8:6b:02:6e:e3:
36:06:e6:4e:ef:fd:bd:27:96:20:c4:80:82:a8:cf:38:f6:39:
88:87:1f:9d:9b:60:50:af:e3:7a:29:1a:8d:80:60:6b:a1:52:
7a:6d:7e:84:1c:93:3c:07:dc:88:31:7e:97:cd:38:72:fa:8c:
84:d7:a4:87:11:09:9f:5d:46:97:3a:6d:87:55:74:ae:fb:2d:
6b:9e:7b:89:bf:68:de:ff:e8:75:b2:18:24:5c:23:6a:dd:3c:
32:36:f5:62:93:7e:98:ac:2c:fb:34:93:f4:69:c3:05:c2:11:
4e:cb:55:0b:39:bd:64:aa:65:92:b9:42:77:ad:77:f7:cf:46:
c2:0a:66:16:84:c8:21:ef:30:b1:24:17:aa:66:75:53:54:d4:
ea:4b:64:e3:0b:ae:7a:38:d3:38:53:c2:0d:fe:05:71:8a:b0:
aa:9e:72:17:2e:d4:ce:3c:06:48:18:fe:07:f5:05:6d:3f:9b:
e6:ea:9d:46:c6:0a:5c:04:00:a0:cf:73:6a:3b:11:88:9b:b9:
9e:0a:48:8e:2c:a7:9b:cc:7c:df:cb:d6:bc:87:6b:0f:c7:27:
79:ad:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:15 2025 by rpki-client