Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4mmM7XFTxJJvC_BN6hkEIC1E0Ro.roa
File: 4mmM7XFTxJJvC_BN6hkEIC1E0Ro.roa (raw, json)
Hash identifier: Dm+XUsYg5VcW7FGwhxAQNIUpN5ISMoZMNTgmLGjGpfk=
Subject key identifier: E2:69:8C:ED:71:53:C4:92:6F:0B:F0:4D:EA:19:04:20:2D:44:D1:1A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0182F6301724F0D8D6E4CFC795A564E70DB0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4mmM7XFTxJJvC_BN6hkEIC1E0Ro.roa
Signing time: Wed 31 Aug 2022 23:15:22 +0000
ROA not before: Wed 31 Aug 2022 23:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203511
IP address blocks: 2a0c:b641:6d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f6:30:17:24:f0:d8:d6:e4:cf:c7:95:a5:64:e7:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 31 23:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2698ced7153c4926f0bf04dea1904202d44d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:30:a6:f4:8e:99:c2:01:ea:6f:9b:ad:f6:
9e:22:ac:47:f3:9e:48:b5:ba:ef:0f:e5:79:1b:92:
c2:ba:18:fb:db:86:d2:4b:0a:b9:f0:4d:11:5e:0e:
27:8a:c1:46:ea:db:5d:70:9a:4e:6c:66:40:f0:be:
71:92:4b:3b:31:ce:19:3f:3e:f1:31:f4:62:66:02:
e1:21:4d:64:de:b1:1c:ea:36:6a:73:67:f3:ce:d7:
72:60:b2:a0:44:58:53:50:bb:98:ea:59:d7:2c:57:
10:b3:5a:ac:fe:92:6f:76:6f:40:1c:f5:72:6d:c7:
45:83:42:6f:dc:7e:06:74:0d:0b:dd:41:46:c4:12:
7d:d1:20:d0:ff:ad:df:a6:f9:5e:05:bd:f5:30:64:
4d:11:1a:e1:22:5a:73:3e:88:51:f0:42:5c:2b:c9:
00:5c:8e:8a:d4:b4:7b:25:86:e8:9b:5c:c2:63:4b:
40:67:64:c6:92:24:76:3c:10:60:b4:16:52:f0:8c:
77:38:32:59:ab:1a:a7:50:61:91:d2:53:bf:be:ad:
b2:03:15:02:2d:62:47:57:a7:81:e1:e1:d4:6d:66:
92:3b:31:f5:ce:5d:17:59:9e:f1:a6:f6:e7:89:62:
43:b2:e4:5b:da:a1:f2:72:a2:12:be:2e:8b:18:05:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:69:8C:ED:71:53:C4:92:6F:0B:F0:4D:EA:19:04:20:2D:44:D1:1A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4mmM7XFTxJJvC_BN6hkEIC1E0Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
99:2e:b7:d9:5a:31:f7:e1:eb:b0:16:c8:70:4e:70:b1:44:74:
f2:f0:01:57:7e:ec:40:72:33:88:3b:1b:3b:04:33:0d:10:8a:
ed:f9:a4:f3:1a:02:0e:13:f9:9e:6d:a7:e2:0c:61:dd:b4:9c:
f6:51:a4:0a:13:23:79:e3:cc:f2:9b:43:33:1b:54:5b:a9:c0:
33:16:cc:8b:25:99:78:d8:1a:16:f9:89:ab:8d:6c:96:6a:8e:
40:31:e9:b5:26:e8:47:5a:1b:96:b0:d5:5e:78:7d:b8:02:8d:
68:c6:2a:00:d8:b0:28:f9:ad:72:44:05:15:e7:1a:97:74:2d:
d3:54:28:58:f3:3c:3b:7b:f5:90:46:4c:fe:cd:31:6a:7b:c1:
3d:0d:dc:7f:e7:bc:c4:fe:e6:a8:3d:62:f7:42:2b:c4:4d:13:
9f:d5:19:c5:9d:2b:03:41:c5:37:f5:ed:7b:ce:52:bd:60:0e:
d2:c8:d5:41:e4:27:28:81:47:7b:b6:fa:d4:71:75:c2:bb:7f:
c6:ea:a6:12:1e:f6:b6:1f:55:46:2b:b3:85:89:bd:c3:27:bd:
5e:03:82:04:7e:93:08:68:1b:32:aa:5f:ce:74:dd:63:b2:a2:
2b:da:ab:b9:dc:92:da:b9:6b:e9:9f:a2:3c:d1:41:53:8c:9d:
f3:3a:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:42 2025 by rpki-client