Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73rnLBMvGlFYyR5jLqkOxEq49oo.roa
File: 73rnLBMvGlFYyR5jLqkOxEq49oo.roa (raw, json)
Hash identifier: JUdiVgZYvqCZ4TrYOd3Rlq38Pla1nLxGy7OQkAiv2gQ=
Subject key identifier: EF:7A:E7:2C:13:2F:1A:51:58:C9:1E:63:2E:A9:0E:C4:4A:B8:F6:8A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8E87893FE68BF06CC83F8405FCA8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73rnLBMvGlFYyR5jLqkOxEq49oo.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208460
IP address blocks: 2a0c:b641:a80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8e:87:89:3f:e6:8b:f0:6c:c8:3f:84:05:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef7ae72c132f1a5158c91e632ea90ec44ab8f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:b4:56:7c:14:3a:0a:bf:56:a7:31:7c:cc:
09:22:5a:a8:cd:64:00:b4:4d:ac:90:86:9f:30:89:
60:b3:a5:97:ba:7e:a9:a4:81:f9:31:c2:f4:4d:dc:
42:b8:5e:c8:68:dd:26:06:0a:7f:49:39:d3:ca:50:
08:c7:be:0a:c1:62:48:cc:ea:6e:e7:96:2c:08:5d:
1d:f3:92:16:76:b9:5a:55:42:0e:e0:9f:2c:0b:b2:
bd:29:e3:0c:b9:db:ca:0c:19:65:9f:9c:29:e4:a7:
57:75:73:14:dd:d6:9f:a3:05:9c:4d:41:82:19:4a:
a5:1d:f9:65:b7:b2:9c:fb:2a:29:2e:06:75:75:ea:
82:79:95:d1:ad:15:f4:73:ad:e8:d9:1c:56:54:13:
f5:2c:42:35:a2:04:83:e4:36:71:1e:58:63:a5:8c:
5b:0a:8a:80:72:0f:de:51:81:b4:e3:5e:49:1a:0d:
97:07:c1:93:73:50:ea:8f:c7:9b:0f:43:bf:e9:57:
29:0e:70:8f:b1:ca:8f:a0:85:7f:05:8d:97:8f:d6:
db:e3:79:4a:b9:97:eb:f5:cf:5f:6c:dd:01:6a:88:
58:03:f1:16:b9:36:25:e0:86:06:e1:82:bd:04:de:
51:55:3f:70:a9:b3:45:1e:56:2a:9e:c6:1e:e7:10:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:E7:2C:13:2F:1A:51:58:C9:1E:63:2E:A9:0E:C4:4A:B8:F6:8A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/73rnLBMvGlFYyR5jLqkOxEq49oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a80::/44
Signature Algorithm: sha256WithRSAEncryption
0e:42:d1:da:57:08:29:48:9f:f0:a3:6f:58:84:3f:c1:05:68:
8c:56:f5:bc:79:a4:18:f0:c6:dc:42:f1:ab:03:b1:1e:60:e1:
fa:4f:6c:b1:1d:36:5c:ce:0a:2f:55:ff:11:5e:35:b4:3a:94:
78:d1:08:67:e1:1b:29:b1:d9:48:34:4f:11:c3:e8:a8:bb:f9:
31:15:16:4f:c3:68:ad:2b:94:91:44:7a:d2:01:b4:53:af:fb:
75:79:00:1f:2f:2c:b0:3d:12:01:1f:74:f0:13:cb:08:b5:94:
be:f0:53:c0:54:21:37:50:0e:4c:18:cf:08:a5:60:e4:50:b6:
67:3d:27:f5:1b:12:c1:18:e3:a5:b0:ab:58:85:06:63:bc:c2:
43:ac:c9:5e:a8:3c:8e:70:27:f2:36:9e:c5:5d:87:e1:d3:cb:
9d:e5:8b:7f:42:04:93:d0:ce:39:f0:9e:42:42:20:cd:3e:ea:
58:9f:3f:83:36:5b:33:e7:30:0d:75:fa:dc:4a:ba:79:01:d4:
a1:18:63:c0:b1:dd:25:0c:14:4d:1a:81:f8:3a:e1:7e:45:dc:
b1:25:23:d5:3a:07:1b:58:d7:a8:f7:21:a2:72:9b:95:1d:04:
17:d6:db:de:f2:6d:03:28:51:f7:34:44:ec:d8:a8:36:14:20:
31:eb:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:09 2025 by rpki-client