Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DxXgIyIT9Dwpi1iQy80yuEbndx4.roa
File: DxXgIyIT9Dwpi1iQy80yuEbndx4.roa (raw, json)
Hash identifier: c/w48tXmcIdN63oPfX8Qmn/k1ScTRI2u8k0gzAr6XlM=
Subject key identifier: 0F:15:E0:23:22:13:F4:3C:29:8B:58:90:CB:CD:32:B8:46:E7:77:1E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E7919899B3B44697D0421BD4DE60F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DxXgIyIT9Dwpi1iQy80yuEbndx4.roa
Signing time: Mon 02 Jan 2023 06:15:00 +0000
ROA not before: Mon 02 Jan 2023 06:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210481
IP address blocks: 2a0c:b641:560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:79:19:89:9b:3b:44:69:7d:04:21:bd:4d:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f15e0232213f43c298b5890cbcd32b846e7771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:d1:0b:13:4d:76:d5:27:3d:bb:30:41:33:
e1:b4:aa:f6:cf:11:80:e4:af:c6:8d:8f:72:9d:6a:
9f:3c:3d:33:8e:0f:ca:0d:ef:c2:f8:39:0b:a2:45:
8a:01:78:b2:4c:6a:df:59:fe:28:4f:a1:74:2f:f0:
b2:b5:c5:f8:3d:08:cd:e6:0b:2f:5d:56:1c:95:9f:
ab:a4:ef:23:49:1d:16:25:a3:82:7b:4c:6a:e8:6e:
c4:fb:3d:04:2a:0d:74:52:5d:3f:6a:22:e9:c8:93:
a4:fb:04:73:22:11:10:c7:b5:02:37:8b:2e:8f:9d:
a6:5b:13:a8:5a:b9:84:d0:6c:aa:2c:ee:cc:38:bc:
08:5b:c3:aa:f9:4b:6a:6b:3d:b4:42:77:99:c5:67:
49:2e:fa:56:45:0d:58:c9:f7:96:a8:2e:2b:ae:3e:
fc:66:0f:69:bc:79:3c:b7:97:2a:24:d5:84:29:b9:
c5:95:9b:2c:07:1a:0a:62:94:9e:39:7d:b2:de:ac:
d6:26:06:c2:69:c9:37:cc:b4:93:e0:89:83:c0:7c:
6b:ef:74:ec:c7:8c:c2:5d:34:5c:14:ad:b9:69:27:
01:ee:f2:09:6d:44:1c:6d:18:06:6e:3c:d3:1c:35:
cf:42:5b:e5:94:77:b5:45:60:dd:61:41:dc:86:7d:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:E0:23:22:13:F4:3C:29:8B:58:90:CB:CD:32:B8:46:E7:77:1E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DxXgIyIT9Dwpi1iQy80yuEbndx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:560::/44
Signature Algorithm: sha256WithRSAEncryption
4b:06:c5:bd:f7:2c:03:12:85:76:c9:27:db:c9:33:73:2d:cf:
c2:1b:06:5a:7d:2f:ca:a0:02:ca:32:ce:a3:5e:1a:bd:3f:dc:
e3:7a:08:57:9a:d1:20:f5:cb:b6:42:1c:c0:0b:28:72:32:4a:
7e:96:67:90:50:33:e4:22:af:f0:fb:6d:88:6b:6c:0f:09:6f:
21:c4:72:e4:ad:8f:7e:62:76:bd:ce:7a:4f:c3:57:8f:1e:df:
06:4d:df:fd:70:45:8f:bc:f4:ff:db:cb:c5:76:34:f4:23:a7:
61:e6:68:52:c7:e9:7d:29:10:39:bf:d0:a2:4a:f5:52:49:2e:
b7:e1:76:a2:fb:20:b9:f9:2b:9f:58:55:4b:71:4a:b8:fc:5d:
09:4a:14:27:c0:ce:e2:dc:57:62:db:54:cb:d4:d5:e2:e8:5c:
b9:b2:46:f9:5a:b9:ce:db:d5:f2:59:0d:43:09:9e:bf:fd:1e:
09:4f:da:f2:39:a9:43:7b:c6:9b:68:ee:1b:07:44:27:ed:5a:
23:bf:37:8e:04:09:b4:8e:b6:af:72:a4:13:fb:d7:a8:2d:67:
20:a7:82:96:10:f7:71:54:76:d8:ed:3e:a6:86:11:80:02:e2:
94:81:66:e0:52:33:9c:61:9a:52:3d:27:8f:16:03:c5:7a:98:
bc:fd:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:17:59 2025 by rpki-client