Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/49YIeDFlfyhlkSknM46Aw-znlRo.roa
File: 49YIeDFlfyhlkSknM46Aw-znlRo.roa (raw, json)
Hash identifier: OVAXLGsJWzxfrF0mGz9UjIHppZP+49pd8WuH9G44DKc=
Subject key identifier: E3:D6:08:78:31:65:7F:28:65:91:29:27:33:8E:80:C3:EC:E7:95:1A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019440B74128FD879CA2016728A1FE5F0C3A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/49YIeDFlfyhlkSknM46Aw-znlRo.roa
Signing time: Tue 07 Jan 2025 12:22:19 +0000
ROA not before: Tue 07 Jan 2025 12:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198831
IP address blocks: 2a0c:b641:d70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:b7:41:28:fd:87:9c:a2:01:67:28:a1:fe:5f:0c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 7 12:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d6087831657f2865912927338e80c3ece7951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:11:6f:dd:04:bf:db:d4:b1:35:fb:4f:23:
df:cd:be:64:23:0c:67:b1:a2:5a:30:67:f7:f2:7c:
b0:bb:b5:ac:0c:76:b8:20:9b:68:e1:6a:5a:1d:45:
45:6a:26:cc:53:19:90:8b:82:1b:ac:4c:7d:73:90:
a2:5b:bb:f8:9c:80:c2:d2:77:18:8d:ae:04:26:27:
31:70:58:23:6a:34:e2:34:c6:a0:84:72:5b:5d:85:
18:38:9c:58:f3:30:a2:1a:b0:bc:ed:89:d8:c4:09:
62:08:49:8c:2f:76:61:52:ff:ca:d0:cc:87:83:2d:
fa:a5:b9:b3:c3:35:ca:da:19:a2:59:f9:5c:a8:84:
e8:2d:ed:f1:97:df:f4:2d:6e:11:19:63:61:43:79:
d0:08:01:ec:ec:a6:45:8a:ff:68:a4:93:a6:ae:41:
73:83:a1:bf:6e:9f:70:96:85:55:75:07:01:be:70:
66:04:f0:38:6c:b2:6d:57:2b:50:dc:98:01:db:ce:
43:52:96:a6:0d:83:92:95:7b:59:57:44:29:3b:f6:
9f:43:44:9d:bd:f4:a2:6d:29:a2:1e:59:47:2f:c6:
e8:76:60:19:03:11:dc:70:84:3d:53:5c:d6:ad:59:
18:74:cd:5f:8c:2e:37:ba:bb:c6:6d:d5:ca:6f:cd:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:08:78:31:65:7F:28:65:91:29:27:33:8E:80:C3:EC:E7:95:1A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/49YIeDFlfyhlkSknM46Aw-znlRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d70::/44
Signature Algorithm: sha256WithRSAEncryption
57:9e:39:39:b1:8e:59:fa:14:4e:f8:ae:15:b7:ef:6b:05:d9:
24:8e:e3:71:d1:6a:c1:53:e8:24:bc:bd:e8:27:bb:2a:88:c4:
70:85:77:4e:11:d0:57:40:3a:ee:22:7d:7b:71:a2:e4:cf:28:
e7:7f:78:18:e1:bd:e4:d1:b0:4b:0d:cb:88:90:e9:a9:9c:0a:
86:cf:68:cc:f3:e2:fb:f3:d7:92:e2:c3:a5:9e:94:e5:27:04:
5e:b6:ab:b4:1d:70:19:e3:2d:a1:e3:6b:a3:fa:4c:66:2b:e0:
9f:7c:50:72:1e:04:d1:5d:8b:39:64:35:a6:d1:b8:2f:df:f1:
69:06:b4:aa:a4:1e:f5:f1:0f:71:4d:87:be:e3:8a:6a:de:cd:
d9:7f:4c:a0:50:f1:f0:86:b5:f4:a2:f7:a8:b4:8a:ac:83:2f:
04:e5:0f:ce:ee:4c:ac:dd:87:b5:7c:7a:ba:7f:f9:2c:ce:c4:
5d:d6:03:d6:74:d8:3f:5b:e2:0f:a3:52:8d:a6:da:06:9b:9d:
e2:8d:02:a9:ff:08:31:88:e4:b9:50:04:a1:f4:4c:11:dc:2e:
be:5d:88:27:c7:6a:19:ce:31:6e:a6:74:a9:86:af:f6:12:6e:
9f:ec:62:51:f1:54:56:6d:7c:a2:2b:5c:89:84:a8:1e:33:95:
70:55:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:01 2025 by rpki-client