Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/L4WsEiOhVqyeQNd44rsjTeHbcf4.roa
File: L4WsEiOhVqyeQNd44rsjTeHbcf4.roa (raw, json)
Hash identifier: GIxqXQDWRYVeQT/91sYFLsPayO4W1mA7bVsPx45oCrM=
Subject key identifier: 2F:85:AC:12:23:A1:56:AC:9E:40:D7:78:E2:BB:23:4D:E1:DB:71:FE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0194835BEAD7638DB376D1E3BE2976F5EAC8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/L4WsEiOhVqyeQNd44rsjTeHbcf4.roa
Signing time: Mon 20 Jan 2025 10:57:06 +0000
ROA not before: Mon 20 Jan 2025 10:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0c:b641:1d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:5b:ea:d7:63:8d:b3:76:d1:e3:be:29:76:f5:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 20 10:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f85ac1223a156ac9e40d778e2bb234de1db71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:eb:5e:93:c4:99:9f:c0:ff:d2:8f:f4:55:
d8:54:02:d6:ba:8e:ae:7a:29:af:65:be:09:8d:0f:
f8:b0:21:92:7b:aa:c2:f4:eb:5d:0b:a7:56:a3:2b:
55:70:a6:3e:9e:e0:c2:9d:2c:62:10:e2:5a:cf:e3:
81:e2:9d:b7:fa:4e:74:4b:71:09:df:74:33:c9:6e:
d6:b5:e6:80:83:3e:65:93:ef:66:fa:8c:91:c3:c6:
6a:e8:9a:e9:97:72:e3:a0:e7:9b:29:6d:e4:d0:e6:
22:5f:70:94:c6:ea:57:cb:fc:61:31:9f:8e:e5:bd:
16:cf:e2:28:78:47:fe:a0:13:b0:5a:ec:e2:2a:67:
90:b7:e6:81:22:db:da:d8:21:8f:d8:d7:f1:59:5b:
ce:6d:d1:c3:83:a0:6b:bb:f4:3e:13:0e:ec:ec:f2:
21:09:03:9c:3f:59:d8:4f:12:e0:15:b3:aa:d5:35:
bd:b6:15:4e:09:d0:56:e5:30:72:fc:b3:9d:1a:66:
09:cf:80:db:0e:48:18:89:4d:37:2f:93:67:4d:a2:
e0:f4:85:e7:91:20:96:c3:d6:e9:97:de:55:f5:dd:
69:0f:17:66:95:d3:14:93:7b:b0:bb:84:28:b4:2e:
88:7e:51:59:64:a6:e5:8b:84:1b:76:d2:37:cd:12:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:AC:12:23:A1:56:AC:9E:40:D7:78:E2:BB:23:4D:E1:DB:71:FE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/L4WsEiOhVqyeQNd44rsjTeHbcf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
32:af:e2:66:be:46:e1:84:08:f7:07:a9:84:73:e1:45:89:ca:
0b:e7:79:7e:68:00:17:c4:5a:6d:84:a1:c7:ac:03:58:4a:bf:
cc:ad:d8:05:51:b2:6e:e0:7c:1b:51:30:ca:ec:ec:21:01:dd:
4e:0f:23:10:d2:4c:c0:14:b1:26:80:cc:fb:e7:24:6b:c4:67:
38:c0:d5:4b:49:2f:5d:0c:80:88:3f:bb:e1:32:15:8d:50:eb:
75:7a:9f:49:2a:c4:97:af:3d:a2:74:93:f7:e4:2d:ce:29:25:
22:bc:6d:34:f0:f5:2b:17:23:c5:14:95:74:7c:1f:3e:16:db:
67:8b:3d:c2:4e:50:af:b7:5e:f4:fe:9d:58:67:0c:28:88:f9:
2b:ec:48:58:26:d9:db:c1:63:03:47:b2:06:e6:32:ce:4a:4f:
eb:9d:31:1c:0a:1d:98:64:5d:cf:6d:f0:81:4d:29:16:04:bd:
08:61:5c:19:78:31:5f:b4:d7:bc:61:d0:9b:f6:ab:40:33:c5:
bc:da:99:8b:80:6f:3d:9c:dc:3d:67:3a:4d:0d:c3:c5:1c:67:
66:9c:10:0c:c9:1a:1b:65:ad:e2:e4:c1:45:48:89:29:29:13:
7c:03:cf:7b:5a:f3:7b:70:64:a5:18:52:9b:80:ce:ed:db:11:
53:e2:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:08 2025 by rpki-client