Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sv_DZ6dw6lVuwbc7ls5Le96-eIM.roa
File: Sv_DZ6dw6lVuwbc7ls5Le96-eIM.roa (raw, json)
Hash identifier: WrYWHp/YmWtwe8cUSfmxTpX2HiL60QqXbDOvlAY2f4o=
Subject key identifier: 4A:FF:C3:67:A7:70:EA:55:6E:C1:B7:3B:96:CE:4B:7B:DE:BE:78:83
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA92401796FABF2EE6D98FA063386A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sv_DZ6dw6lVuwbc7ls5Le96-eIM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209297
IP address blocks: 2a0c:b641:690::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:40:17:96:fa:bf:2e:e6:d9:8f:a0:63:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4affc367a770ea556ec1b73b96ce4b7bdebe7883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:3e:ee:7d:70:09:a0:d5:85:a6:f3:ea:2d:
f0:17:d8:7c:17:4a:21:1b:12:3f:49:6d:5b:ae:13:
76:1a:f4:34:ca:ea:f2:d4:7c:eb:d7:16:09:c1:91:
a3:0a:88:7f:f9:cc:f2:49:d7:88:ad:80:b7:50:87:
60:b7:c5:c6:29:79:26:d8:e8:f2:6e:ea:ee:ac:75:
c8:f7:6d:a2:31:a1:03:75:85:06:9f:2e:ba:da:dd:
75:22:5d:2e:b3:58:b5:05:06:3b:c0:03:3c:44:dc:
dd:bf:3f:16:e2:c1:d4:8a:f9:d4:61:c2:95:ae:2e:
5a:b5:77:e5:d7:42:06:85:0b:c1:3b:f7:73:8f:68:
a1:9b:8a:c2:b8:27:ff:af:f5:50:ac:27:7b:57:d8:
5b:a9:55:af:29:8f:fd:ba:65:69:9b:6c:48:61:5c:
19:68:41:46:d3:7f:40:76:73:da:d4:4d:80:48:ca:
a1:13:f1:eb:7c:58:27:01:98:4b:0d:23:c8:6b:db:
6c:a2:21:38:12:3f:8b:cf:20:34:14:56:29:08:12:
7a:67:9d:5e:f3:a1:ab:02:20:e0:08:43:52:a9:e2:
6a:4b:b1:af:77:99:b7:4c:f2:f5:81:7a:db:96:82:
33:08:de:93:ee:3d:95:05:39:72:10:c5:81:f4:ec:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:C3:67:A7:70:EA:55:6E:C1:B7:3B:96:CE:4B:7B:DE:BE:78:83
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sv_DZ6dw6lVuwbc7ls5Le96-eIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:690::/44
Signature Algorithm: sha256WithRSAEncryption
31:c2:20:7d:d1:b6:4c:7e:3c:3b:9e:ee:20:17:50:7c:5b:35:
fa:fa:3a:e5:e8:b6:6a:3d:8b:12:32:33:9a:d9:07:59:66:fa:
e3:16:93:8c:d7:36:66:28:0d:25:1e:34:d1:11:b1:f9:3a:05:
eb:bc:2f:b5:74:43:96:98:9f:02:f7:eb:d9:a0:cf:8b:10:59:
e8:e9:ce:fb:af:10:e3:be:c3:f7:92:18:97:71:a2:fb:78:70:
22:a9:23:e5:33:f0:fd:f8:10:83:24:f5:5e:06:d5:f2:8f:e4:
32:c3:eb:ab:c2:8f:d7:26:f9:7e:e6:fc:a5:07:e6:ee:99:19:
35:0a:10:a5:5b:15:74:5f:45:4e:c6:c5:53:39:7f:e7:a1:79:
e6:cf:21:32:0b:93:89:14:f4:16:47:33:b9:81:7b:63:98:3b:
c2:18:52:32:71:c4:7b:54:da:cf:f8:c0:c4:ac:e7:e7:9e:ff:
f0:e9:13:4f:b5:f0:86:7d:b7:0f:3c:cb:88:2f:1f:ec:09:c8:
70:ec:6c:80:b6:a1:3f:d1:95:b5:76:a5:a1:1c:00:c4:df:fd:
5e:76:10:9d:4a:6c:05:f9:e7:43:bc:a7:d8:37:d8:ef:6b:80:
99:46:a6:a3:56:6d:6e:1a:45:cc:a7:2b:d3:54:e1:a4:70:d2:
2a:dc:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:09 2025 by rpki-client