Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/N4WajAsT3FNiMrxkDfhYWdzkkwM.roa
File: N4WajAsT3FNiMrxkDfhYWdzkkwM.roa (raw, json)
Hash identifier: 7/JJArRxKFgpl6+Jmk4lTVZng/U9tCs4pKOzf4vM6vQ=
Subject key identifier: 37:85:9A:8C:0B:13:DC:53:62:32:BC:64:0D:F8:58:59:DC:E4:93:03
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA97B30FBA3E6997197393A6247F39
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/N4WajAsT3FNiMrxkDfhYWdzkkwM.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210356
IP address blocks: 2a0c:b641:600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:97:b3:0f:ba:3e:69:97:19:73:93:a6:24:7f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37859a8c0b13dc536232bc640df85859dce49303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:02:f2:4a:c7:66:fc:4b:0e:3b:fa:4e:62:
bc:6c:7a:56:a5:40:26:24:80:5a:98:bb:7d:ae:dc:
d1:9c:54:b8:2c:41:d6:63:39:4b:84:c6:38:15:3e:
9e:2d:7a:90:2b:0f:8e:f9:f5:b3:79:44:d9:23:1a:
a7:7a:fb:57:f7:54:83:49:f7:78:71:30:6b:3e:36:
8a:dd:fe:ab:eb:f8:b7:69:18:f5:84:24:f5:07:5e:
f5:ec:59:2e:b9:69:ed:bf:55:00:50:93:e0:12:3c:
51:73:a5:9c:3a:e0:45:34:c0:ba:f4:8c:ad:17:92:
cd:c6:8e:8f:19:64:1b:3f:48:21:5a:ae:c7:78:f1:
99:ba:b1:64:f1:7b:03:b4:e7:02:23:2a:88:dc:a3:
63:13:14:97:3f:ee:b9:e7:a7:e9:87:f9:5b:07:eb:
ef:48:fc:f7:cb:0d:10:5e:f4:56:55:27:e2:86:76:
26:9e:95:50:aa:b7:2a:95:2f:05:11:a3:7e:04:6a:
a2:dc:b6:bf:be:87:ff:cb:48:f1:92:16:18:9b:2b:
9a:e2:d3:0b:97:c7:ed:08:28:55:90:da:dc:0b:f7:
0c:c8:8a:44:7c:0e:da:c8:df:03:43:d2:6c:f3:e0:
b0:3d:63:f3:3d:50:fe:28:7d:1d:d4:e0:6c:13:b8:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:9A:8C:0B:13:DC:53:62:32:BC:64:0D:F8:58:59:DC:E4:93:03
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/N4WajAsT3FNiMrxkDfhYWdzkkwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:600::/44
Signature Algorithm: sha256WithRSAEncryption
74:8c:b4:9f:6d:3c:c7:f8:82:e4:86:a1:c2:cd:89:8e:06:bc:
9f:66:0e:09:ee:40:3b:77:6c:6c:76:cf:0a:03:06:a6:f7:e3:
3b:c3:5c:d3:db:d3:16:c5:6a:35:72:24:ee:08:d9:36:7b:e2:
89:9c:99:54:f1:59:2f:17:f2:8c:9e:1d:ff:87:46:da:c3:c4:
dd:69:6b:4b:0d:9f:c3:85:52:9f:8f:ba:3f:4e:74:5b:56:d5:
ec:d6:49:ba:1c:d0:22:d9:8e:6d:5c:6e:64:a1:a2:ac:2f:6b:
d3:d9:fd:cb:53:7a:5c:05:f7:54:af:57:4f:da:78:ed:c2:d1:
9f:19:6d:e3:70:5a:2f:f5:46:61:3c:6f:2e:4e:b4:77:f1:b8:
25:ce:62:32:9c:8c:76:09:d2:77:5d:99:85:57:df:8b:64:ba:
d7:ea:43:ac:54:de:a7:59:4e:f7:c4:28:8d:91:a5:5f:51:c0:
b4:3c:54:fe:d5:88:09:c3:ee:9e:f9:f3:b1:d4:81:2c:57:15:
a7:94:84:f9:26:a3:6e:c5:ca:79:33:72:e6:14:83:3b:e5:6a:
bb:da:d9:c2:12:5c:e4:e5:0a:b1:9e:1a:9d:5e:3b:9f:19:63:
7f:51:7c:ea:a6:19:f8:72:54:13:e5:b4:0b:7d:2a:28:f5:79:
77:d7:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:41 2025 by rpki-client