Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-PNEW0plulqT6Swe6BA_78zqXV0.roa
File: 1-PNEW0plulqT6Swe6BA_78zqXV0.roa (raw, json)
Hash identifier: gOrQxSRc1VWFQhKJ4lhKBy5r7xFyhwQBDeAzblkAeZE=
Subject key identifier: F8:F3:44:5B:4A:65:BA:5A:93:E9:2C:1E:E8:10:3F:EF:CC:EA:5D:5D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019528BD8199D45A5A54FB030A6DDC350919
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-PNEW0plulqT6Swe6BA_78zqXV0.roa
Signing time: Fri 21 Feb 2025 13:41:02 +0000
ROA not before: Fri 21 Feb 2025 13:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212871
IP address blocks: 2a0c:b641:290::/44 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:bd:81:99:d4:5a:5a:54:fb:03:0a:6d:dc:35:09:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Feb 21 13:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f3445b4a65ba5a93e92c1ee8103fefccea5d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:e9:63:63:25:2d:7f:98:0d:79:83:50:74:
4a:21:30:a6:86:53:f6:94:d7:48:ca:14:16:c2:ee:
ba:b0:34:26:0d:76:12:b3:84:99:34:3a:74:df:e5:
a6:a8:ae:53:8f:7d:41:26:59:5e:bd:88:04:2a:f9:
3e:dc:a9:01:54:77:fd:45:d9:c7:47:18:40:09:cd:
a4:21:9f:35:ff:30:02:e3:b7:bb:4d:fc:ff:0e:41:
79:d8:24:20:e5:42:69:34:fa:c0:c7:93:43:67:8b:
d1:55:ad:ea:24:92:c2:e0:bd:2e:f1:eb:7d:75:72:
60:37:d2:37:e8:15:a3:cd:2f:cf:f7:0a:33:92:9c:
c3:7a:d0:1f:2c:14:dc:9f:d5:77:35:cf:55:52:7b:
f2:53:9e:c0:d7:cb:01:a4:81:95:a3:2c:2f:06:e4:
50:a6:21:73:7e:b1:b1:5f:c0:86:1c:12:36:cf:b7:
69:3b:e5:14:26:03:32:0e:86:a3:c6:2a:c1:6b:c0:
c0:05:2a:3b:f1:77:1f:49:69:5a:9f:e2:1f:74:c0:
0c:ec:9a:c7:aa:54:af:0d:1d:f5:63:56:3b:06:86:
1f:02:41:8b:27:00:b5:f5:49:3c:e3:92:bb:ff:c0:
68:0c:a6:7b:3d:90:e1:54:4b:cf:6d:1c:0f:f7:71:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:44:5B:4A:65:BA:5A:93:E9:2C:1E:E8:10:3F:EF:CC:EA:5D:5D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-PNEW0plulqT6Swe6BA_78zqXV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:290::/44
Signature Algorithm: sha256WithRSAEncryption
83:ad:e3:ce:38:31:ca:a4:24:ae:9a:88:62:f0:42:9d:8e:1d:
f6:9f:61:4f:58:a8:70:0a:99:fd:83:15:43:3f:b6:9a:15:95:
89:bc:fa:3e:47:62:ee:48:11:f9:d8:79:de:6f:80:25:7a:18:
c7:3d:b2:e3:5c:5e:dd:43:6a:c8:fc:57:bd:19:d5:ab:8c:a8:
3b:ce:96:46:b1:f7:a3:5c:68:2f:95:0f:ef:34:d6:ca:86:33:
28:9f:0c:dd:1f:d6:11:ee:fe:31:67:83:2d:fd:5d:88:7d:33:
e0:49:49:97:67:95:96:7b:92:8b:2e:1b:5a:e8:3b:25:9d:6f:
92:aa:6a:0a:d3:5f:d5:ab:50:06:d5:84:ca:1c:e8:e6:95:4f:
cf:6a:e2:9f:e3:e8:e3:0f:47:25:fe:c1:fa:07:cc:4f:5e:54:
80:fe:71:f5:b2:88:16:8d:76:0a:4a:b9:b3:b4:45:09:a3:2d:
45:7a:21:b9:03:e2:ed:5c:4c:da:95:92:d6:7d:70:48:74:1f:
34:26:d2:e2:84:88:94:de:14:78:6d:0a:eb:65:53:ef:1c:86:
bc:79:fd:0f:e2:ef:b2:a0:72:56:8f:8c:c8:b7:b3:e2:75:ac:
6c:a8:db:ce:e2:3b:57:ae:f9:bd:ee:23:cf:94:fe:97:64:58:
a3:51:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:04 2025 by rpki-client