Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VIcGTnAB7jkK27KZrm-wPqlyS6Y.roa
File: VIcGTnAB7jkK27KZrm-wPqlyS6Y.roa (raw, json)
Hash identifier: cKsu1AAAo19TNEknjhFAqrj2JMK5sUd51zCoW6aTlTk=
Subject key identifier: 54:87:06:4E:70:01:EE:39:0A:DB:B2:99:AE:6F:B0:3E:A9:72:4B:A6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA95DADEA3872B826243E6A3CBE159
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VIcGTnAB7jkK27KZrm-wPqlyS6Y.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210020
IP address blocks: 2a0c:b642:1030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:95:da:de:a3:87:2b:82:62:43:e6:a3:cb:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5487064e7001ee390adbb299ae6fb03ea9724ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:30:b8:af:62:6e:5b:0c:1f:8a:d9:eb:40:
c9:9c:09:59:5a:fc:de:cf:b1:3e:f7:a3:77:17:8c:
a0:3d:c9:80:49:2c:5a:a9:56:26:5b:a2:0a:26:ea:
97:fe:3a:40:04:06:c4:4f:66:e4:ca:31:fc:ba:25:
10:9e:7d:25:1f:a1:d8:8f:99:c5:5a:e7:29:48:cc:
a8:8a:73:d1:97:b2:42:04:51:ec:4c:98:d9:b6:96:
bb:01:ee:2a:7d:23:03:f6:9a:a0:be:a7:c4:4e:7e:
96:c1:ca:2f:47:39:1b:83:6a:81:f0:b4:78:08:4e:
a7:e3:1f:43:4d:75:24:1c:9b:15:ba:52:1e:36:6b:
0a:8c:a2:b9:86:81:e6:b8:38:f6:ab:70:31:f7:67:
3f:fd:08:d8:1a:72:ed:39:f9:e6:b0:88:f4:c4:7d:
de:7a:00:ab:cf:de:df:91:e7:e5:81:1b:3f:6b:a8:
8c:8e:bc:34:19:7f:fd:e5:b6:b4:e5:bc:a3:4b:1b:
82:0b:67:df:0e:9c:7c:58:db:c6:00:d5:c0:68:83:
52:f2:e6:46:cf:7a:68:79:61:d6:88:3e:df:79:61:
67:76:0a:87:3b:07:23:60:72:21:e6:de:91:3e:6e:
eb:e9:59:95:5f:60:d1:10:98:6a:d9:b9:03:c2:45:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:06:4E:70:01:EE:39:0A:DB:B2:99:AE:6F:B0:3E:A9:72:4B:A6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VIcGTnAB7jkK27KZrm-wPqlyS6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1030::/44
Signature Algorithm: sha256WithRSAEncryption
69:91:df:41:d1:0e:db:33:d4:a2:bc:8a:64:65:e4:c4:40:f8:
24:7e:38:84:8d:db:20:7c:f0:f4:b8:54:99:3c:ba:c8:9e:14:
cd:ba:6b:cf:fa:ae:ed:a2:ac:e9:7d:e9:b2:29:be:af:3e:e6:
70:66:f5:66:d5:3b:d4:e0:14:86:f2:ef:3e:83:ad:fc:23:44:
87:de:5f:28:a5:dc:c1:82:85:c9:cb:ab:ce:c5:18:2c:cc:a3:
1f:c1:0c:ab:52:5a:f4:e9:5a:3b:ea:50:bc:c4:4b:04:a8:84:
d1:69:be:92:55:68:c8:e0:34:9e:8d:0f:25:bc:4e:0d:b0:32:
02:7a:51:e7:7e:22:e9:cd:2b:78:92:99:49:1f:d1:5c:7b:fe:
9e:19:3a:11:01:23:f5:02:8b:08:ae:de:a7:e6:25:fa:e9:d8:
db:14:2f:ea:61:19:16:9f:14:22:7a:9c:93:05:0e:3d:f6:f6:
0f:32:11:5d:0c:08:85:1d:4d:2f:06:f7:0d:e6:8b:c8:c9:72:
32:70:97:98:b8:c5:ae:08:10:96:27:14:96:c5:a8:9f:71:58:
11:ce:0b:22:80:c8:85:33:e0:ed:26:9c:0d:9c:22:b1:81:07:
ab:eb:72:9f:08:0b:2a:1c:29:80:4c:5b:75:e2:14:d3:6f:01:
27:f2:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:22:28 2025 by rpki-client