Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-6gSqvR148yqAcaX6M2zcN5ACnw.roa
File: 1-6gSqvR148yqAcaX6M2zcN5ACnw.roa (raw, json)
Hash identifier: rlbZJHijw6ks8iuBta5j4UnFlDsMaRnUrdBqmwK9tfc=
Subject key identifier: FB:A8:12:AA:F4:75:E3:CC:AA:01:C6:97:E8:CD:B3:70:DE:40:0A:7C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAF5D40C437B0C2DAB357C49E4E68
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-6gSqvR148yqAcaX6M2zcN5ACnw.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214234
IP address blocks: 2a0c:b641:cf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:5d:40:c4:37:b0:c2:da:b3:57:c4:9e:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba812aaf475e3ccaa01c697e8cdb370de400a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ed:64:d1:eb:ee:0d:7b:9b:64:d3:ff:b0:
0c:45:b2:79:71:45:55:e8:67:de:d8:e2:17:c9:3b:
ed:dc:f8:6a:8c:43:50:16:d0:7a:8e:6a:38:52:56:
83:e0:66:d6:6e:8a:fd:ec:0a:b1:4f:ce:10:fd:e7:
a2:97:67:f2:62:26:38:d5:92:39:8c:9b:2a:60:ee:
7f:c3:df:a1:45:d8:2c:24:ce:c8:cf:8d:1b:10:de:
b4:1e:31:c9:4c:e5:34:3c:91:4d:66:6a:85:18:39:
9d:44:26:f8:61:04:cd:f3:f4:5c:4d:5a:34:1e:94:
3a:cc:ce:f8:06:2c:3c:ef:d0:29:26:d6:d0:6c:e8:
45:07:80:0d:32:e4:3d:a4:b5:f4:69:4b:e2:5d:23:
0d:56:a7:6e:44:9a:df:54:9a:9a:90:10:bf:5b:b1:
42:d7:0c:aa:90:b9:4b:01:07:3c:5f:3d:63:eb:33:
0e:d6:df:49:33:3f:5f:23:5b:a9:cd:a8:a0:ff:a5:
90:4c:dc:7a:6d:a3:75:31:07:36:66:ad:f2:e4:ea:
1d:e0:a4:66:a0:e5:4c:b5:cf:75:b6:20:c2:22:74:
94:c4:6d:f9:be:4f:d7:d3:a7:6e:77:ac:55:02:57:
7d:df:a6:2a:2e:21:4a:b6:27:73:f9:e6:a4:bf:fb:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:12:AA:F4:75:E3:CC:AA:01:C6:97:E8:CD:B3:70:DE:40:0A:7C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-6gSqvR148yqAcaX6M2zcN5ACnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:cf0::/44
Signature Algorithm: sha256WithRSAEncryption
84:f6:4f:3f:d1:5e:9d:9a:35:b9:c8:72:cb:54:3c:20:c9:50:
91:a1:f1:7b:87:6c:9a:a8:d4:db:07:0e:f8:d5:48:1c:c7:ce:
3e:bb:fb:3f:5a:b9:6e:5a:d8:06:d1:22:96:d0:a6:cf:a5:be:
fe:08:49:cb:a5:0b:b3:f0:d9:c6:ef:c4:24:4b:cc:80:e7:b7:
06:4f:c2:fe:80:70:fe:83:30:c4:1b:43:2f:f8:74:e4:3d:b1:
7c:c7:e0:4b:71:e6:7d:ad:88:d6:e0:a9:e0:e0:79:8c:06:89:
29:c4:a7:ff:58:22:3f:d8:98:74:56:79:f2:46:37:1d:76:1a:
25:21:1f:8e:cd:98:af:c1:70:71:5c:a2:98:a0:8c:d9:66:32:
02:ab:8d:b0:14:60:b6:05:7e:80:6a:62:be:2a:48:e1:d0:0c:
5b:84:fa:8f:86:9b:eb:f5:c8:5e:37:a0:94:f8:6a:70:0f:9a:
3f:ad:b1:5e:7a:28:39:07:c7:49:83:a8:8a:57:b9:a5:2b:27:
9c:35:5e:19:d5:76:84:c5:4b:83:69:ba:1b:7b:49:3c:f5:4b:
d5:98:53:08:fa:18:0c:b0:8c:67:5e:45:80:5c:3d:c7:66:d7:
cb:fe:af:1a:64:39:f5:0c:69:7e:15:a2:1a:cf:d5:d7:3a:94:
1c:fb:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:31 2025 by rpki-client