Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B6hfKLUi498ByGLudaGPxciKLIU.roa
File: B6hfKLUi498ByGLudaGPxciKLIU.roa (raw, json)
Hash identifier: CvROv9xKjEtEMJZLzv4pioQbMVFdCpKmc1iwgEt/bY0=
Subject key identifier: 07:A8:5F:28:B5:22:E3:DF:01:C8:62:EE:75:A1:8F:C5:C8:8A:2C:85
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01292CCE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B6hfKLUi498ByGLudaGPxciKLIU.roa
Signing time: Sat 01 Jan 2022 00:59:46 +0000
ROA not before: Sat 01 Jan 2022 00:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208506
IP address blocks: 2a0c:b641:290::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19475662 (0x1292cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a85f28b522e3df01c862ee75a18fc5c88a2c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:56:b7:88:8e:84:2c:23:67:b3:92:e1:90:
a6:df:31:ed:7b:f9:fe:d9:d9:6e:21:ee:dd:42:76:
38:c3:00:37:54:8d:a9:20:c3:29:7a:7f:cb:97:ff:
19:4b:3f:65:01:b3:fb:e2:a0:e5:e6:29:f6:ea:e3:
e6:3f:06:77:a1:8a:fe:c8:9f:e3:06:d3:e3:71:7e:
4f:06:48:03:26:05:26:7b:05:d1:42:29:8c:67:66:
43:32:fa:6a:6a:bd:dd:38:56:d3:f7:30:ba:ad:3e:
93:76:db:53:45:5c:5e:2e:3b:d7:2d:eb:d5:a6:78:
79:98:16:5b:61:75:9d:f4:59:0d:e2:3e:a7:59:49:
c3:ff:23:2d:94:11:1b:85:bf:92:1a:94:34:c1:dd:
08:eb:48:52:b1:60:af:54:1a:27:51:4d:fd:da:35:
25:ee:36:d9:86:58:78:92:1d:93:33:e2:d9:b9:db:
e2:36:45:2d:e8:7e:84:19:7e:52:11:1d:df:9b:dd:
1b:a8:75:e9:3d:f1:1d:d3:43:12:5c:0f:65:1f:3d:
c1:9c:1e:35:b3:8c:d8:83:8a:ea:5b:10:d9:5f:57:
fc:dc:c4:6a:39:13:56:3c:65:03:a1:8b:7a:98:eb:
6d:00:89:99:4d:1b:da:05:ec:d9:b0:81:87:9d:6c:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:5F:28:B5:22:E3:DF:01:C8:62:EE:75:A1:8F:C5:C8:8A:2C:85
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/B6hfKLUi498ByGLudaGPxciKLIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:290::/44
Signature Algorithm: sha256WithRSAEncryption
7c:b5:b0:34:23:41:b8:c9:fd:75:cc:59:1e:c6:ca:81:bf:be:
6c:8b:3c:de:2a:91:44:f0:10:2b:35:42:cf:42:cf:1f:89:62:
75:88:7a:75:d0:c2:b9:63:1e:cc:de:5f:c1:e1:ff:88:58:56:
67:25:25:17:67:04:6e:50:e0:16:2b:ea:c4:5d:05:95:94:f8:
12:32:e2:93:d2:dd:e9:2b:94:d8:5f:f3:9d:3a:82:7d:56:a0:
34:5b:c5:89:f4:f3:19:1b:0d:e7:ee:fe:91:72:b4:cc:0f:d0:
b7:66:5e:3e:75:17:30:12:d0:63:a5:4d:c7:31:8b:c5:f2:bc:
40:d9:ad:56:d2:b7:ce:09:fb:a9:23:a0:d6:76:30:2b:57:9d:
40:78:e9:b3:a8:9b:f4:bc:51:68:c4:26:8a:88:a3:ca:e1:5a:
58:83:78:5e:da:22:b0:93:55:2f:e1:52:06:4b:b6:b0:7a:00:
34:85:b5:13:e8:27:de:cd:5c:ba:13:82:9b:41:54:f8:8f:0f:
91:d0:26:7b:66:98:af:e9:49:fc:91:db:d7:f6:77:52:ac:ee:
01:60:66:be:b0:5b:a8:4b:96:fd:f3:2f:61:40:c9:f4:1a:f9:
2c:e3:bd:4e:8d:71:37:b0:e3:0d:27:a2:f4:63:07:f9:77:22:
21:fe:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:32 2025 by rpki-client