Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6XheCWdluBcuzJmdiJilCzDTAPI.roa
File: 6XheCWdluBcuzJmdiJilCzDTAPI.roa (raw, json)
Hash identifier: ubuwq5bSedXeQUrxToGTpcSyv9fUJJmi0RUCpkE36Bk=
Subject key identifier: E9:78:5E:09:67:65:B8:17:2E:CC:99:9D:88:98:A5:0B:30:D3:00:F2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB7ECD593821190FA5558C6FF79FE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6XheCWdluBcuzJmdiJilCzDTAPI.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215931
IP address blocks: 2a0c:b641:b40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:ec:d5:93:82:11:90:fa:55:58:c6:ff:79:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9785e096765b8172ecc999d8898a50b30d300f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:34:ce:4a:01:f6:cf:8b:57:0b:ec:59:af:
bd:d7:2c:3c:e6:4d:36:11:e5:ae:d4:f1:3e:57:b8:
c6:91:9a:45:17:5a:e9:d3:d7:f8:15:f4:1b:71:71:
19:f9:20:8d:de:8c:57:79:09:b9:2d:67:d5:dc:19:
17:61:5d:71:94:e5:9d:bd:2b:f3:df:66:00:c7:98:
0d:8c:f4:7d:f7:8d:90:13:5f:14:ca:3f:60:78:74:
f0:bc:c9:ee:9e:be:76:df:6e:70:91:8e:b4:e7:ab:
bd:62:94:bb:0c:a7:69:bd:50:8d:67:1f:04:ab:05:
a7:3f:75:f8:21:b1:83:04:03:e5:3c:20:76:25:3a:
2d:84:06:0b:47:86:d1:c6:45:c1:5d:66:c0:9e:60:
21:f2:41:f5:06:b2:ae:0b:5d:dd:8d:2d:af:31:88:
0c:6d:10:7a:b7:56:4d:4f:f0:fa:ae:c4:09:a8:28:
d1:59:9e:cf:ad:7d:ef:77:40:07:ee:30:79:4a:14:
76:d6:cf:d8:d6:80:3c:49:18:ff:ef:77:37:6e:29:
74:e1:a4:78:44:58:ca:71:19:f0:49:4e:99:b5:3d:
da:dd:b4:4b:df:91:97:18:6d:d3:c8:12:88:c1:91:
3c:aa:40:e1:dd:f3:70:e3:57:72:a7:a8:9b:19:2f:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:5E:09:67:65:B8:17:2E:CC:99:9D:88:98:A5:0B:30:D3:00:F2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6XheCWdluBcuzJmdiJilCzDTAPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b40::/44
Signature Algorithm: sha256WithRSAEncryption
8c:92:cf:8c:4b:13:99:0a:f7:fa:16:f8:5f:78:35:18:ee:d7:
ae:88:9a:7f:f6:ec:e2:44:f1:cc:77:cf:6c:b5:50:4d:a0:18:
17:ff:f1:4d:28:0a:9a:3f:84:95:66:29:6d:5f:77:47:dc:bf:
9c:8c:44:66:a9:be:fc:d7:91:d4:2a:70:40:b4:25:dd:26:54:
9b:29:00:b4:ed:2d:b6:fb:de:57:19:59:f6:d5:a9:76:51:6f:
d2:70:2e:a2:4f:91:c6:58:8e:d3:03:9d:a4:cf:0d:58:c2:19:
a1:bb:2f:67:e8:4d:1b:69:55:a8:b0:c1:8f:31:f7:18:28:80:
d0:6f:23:98:48:9d:5a:82:52:47:e5:b4:26:55:ae:45:61:3c:
c8:ca:2b:c8:ee:85:89:86:4e:87:b3:7c:c4:39:84:b7:b8:d5:
87:9f:cd:95:c7:84:50:f0:f1:aa:0e:4d:5b:d5:cd:49:01:e5:
49:d3:46:2b:03:bf:97:c0:d9:e0:32:25:cc:e7:61:80:ea:e6:
c4:b9:66:c7:bb:a7:95:0f:fb:15:67:7e:14:bb:bf:89:5d:a8:
7a:8e:6a:49:7e:6d:a4:a5:1b:af:67:3e:a4:70:f4:5a:8d:72:
63:4b:da:bb:19:1c:57:8d:42:d9:a3:8d:8b:49:70:d8:af:02:
e7:db:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:55 2025 by rpki-client