Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Fu84HVVKzcU5UYczzk-EA-rzUCY.roa
File: Fu84HVVKzcU5UYczzk-EA-rzUCY.roa (raw, json)
Hash identifier: PzrG+cZ4yfLP0W0jaFzrQDRB18Mi1M6yFz6nKKV04zA=
Subject key identifier: 16:EF:38:1D:55:4A:CD:C5:39:51:87:33:CE:4F:84:03:EA:F3:50:26
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAC0E9285A6035B758E6150F048D6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Fu84HVVKzcU5UYczzk-EA-rzUCY.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213920
IP address blocks: 2a0c:b641:30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ac:0e:92:85:a6:03:5b:75:8e:61:50:f0:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ef381d554acdc539518733ce4f8403eaf35026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:9b:12:6d:e3:07:7f:71:97:5f:ed:3d:2f:
dd:a9:9a:c0:21:d3:5e:50:f9:e6:8f:b2:3c:13:f6:
36:b5:8e:e8:57:90:f5:ea:83:c6:e5:c3:d5:b2:0a:
a0:60:ce:a8:aa:da:ba:79:72:ca:75:3b:f3:c2:34:
50:5f:c1:28:72:82:4d:6c:59:6a:b8:85:34:97:82:
e6:af:6f:46:53:f0:89:a9:e7:fc:58:1e:13:08:22:
b6:d7:09:1b:94:92:5c:b7:de:38:26:2c:c1:6d:a5:
28:4f:03:c8:1a:f5:03:a7:dc:3d:87:ff:d1:64:f3:
87:bb:8b:77:89:1f:78:5a:82:15:07:32:36:8b:0c:
c2:2d:62:77:78:6c:9e:54:5e:9a:2b:1e:61:cb:f1:
ae:a8:58:1f:d3:8b:c7:4c:55:5b:f3:28:88:58:6a:
76:e5:bb:34:e6:34:63:aa:c9:6b:b4:c7:f8:88:1e:
4b:b3:52:8c:2f:c7:81:30:6c:75:21:83:63:4c:82:
61:b5:6a:bc:4c:db:04:f9:1b:ec:78:ee:7d:61:60:
bd:e5:fe:ce:e5:19:f9:22:67:9e:df:22:de:c3:a4:
ec:df:05:78:9b:65:48:b0:a6:ef:c2:78:da:18:ef:
a2:a8:ce:7d:85:68:df:e5:ee:9d:01:c1:41:76:5b:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:38:1D:55:4A:CD:C5:39:51:87:33:CE:4F:84:03:EA:F3:50:26
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Fu84HVVKzcU5UYczzk-EA-rzUCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:30::/44
Signature Algorithm: sha256WithRSAEncryption
77:19:16:ed:6f:8d:60:9f:60:be:9c:ba:01:ce:eb:df:91:15:
eb:90:79:8a:95:1b:fd:c8:29:67:71:18:32:f7:02:71:2a:94:
f3:53:08:c1:a1:d1:7b:d5:2d:2e:fa:b1:a2:bd:99:69:e2:78:
b8:e5:63:e7:51:9d:5c:04:bf:1c:ed:46:d5:c3:f1:66:d3:23:
f0:3c:2e:92:a3:26:2b:b8:54:8c:fc:84:c4:91:d1:f7:8c:6b:
b3:63:12:b0:7a:56:38:68:71:52:f3:0d:df:f7:98:c8:ee:1c:
bc:7d:f5:d4:15:db:c6:fb:f4:69:6c:ad:51:a4:b4:e2:60:8a:
2b:c1:00:95:fc:81:9b:34:9f:9e:3c:05:06:83:d3:0d:02:14:
9c:b0:df:70:f8:a5:5d:0d:48:db:e1:af:d8:84:1d:58:76:31:
d0:ce:b4:63:52:a8:36:0c:3e:03:f6:d6:1c:05:6d:f3:12:68:
10:0b:05:b0:30:24:29:c0:a3:61:01:23:fb:34:0a:f0:75:94:
12:b3:51:18:29:a9:17:7b:92:f6:98:bd:27:27:ae:19:4a:69:
19:cb:64:4c:ef:46:17:17:d7:2b:7a:34:b4:7f:38:21:5b:50:
ac:0f:1d:80:48:dc:6f:ca:fa:67:98:41:aa:66:88:ba:b5:0b:
ca:16:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:13:33 2025 by rpki-client