Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WrXfizr8ntcm3J-xeYxWFVBPq_o.roa
File: WrXfizr8ntcm3J-xeYxWFVBPq_o.roa (raw, json)
Hash identifier: YNJH+MLyZACFV2FGL+TlrNmCm5NC/nDKwE4iLR2NTe4=
Subject key identifier: 5A:B5:DF:8B:3A:FC:9E:D7:26:DC:9F:B1:79:8C:56:15:50:4F:AB:FA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA8508B5C80D5A954B79B2F767EFC8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WrXfizr8ntcm3J-xeYxWFVBPq_o.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202297
IP address blocks: 2a0c:b642:1a08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:08:b5:c8:0d:5a:95:4b:79:b2:f7:67:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ab5df8b3afc9ed726dc9fb1798c5615504fabfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:2c:2f:84:a7:dd:80:4e:dc:70:aa:3a:cc:
52:eb:17:6a:29:d5:c6:3f:40:dd:4b:d2:ef:aa:3f:
ad:17:03:32:b9:44:cb:94:c0:54:48:ae:80:ca:7c:
af:8f:89:df:11:57:a6:19:99:58:78:d2:28:30:94:
28:bc:45:c4:5d:50:b3:fd:c2:45:e4:17:9c:77:61:
b2:76:d7:b3:1a:d5:91:29:e7:d9:e8:89:a7:eb:60:
01:f3:8c:8b:e8:39:04:58:2a:f2:44:3a:35:fa:f7:
30:5c:ad:44:9f:48:f7:40:e1:9c:a9:54:a9:0e:2a:
c6:1a:1d:a2:7e:3a:38:86:56:f8:ef:e2:3b:4e:c5:
c8:3c:19:ab:1c:05:62:a1:c8:f1:86:e3:1f:32:c3:
29:ab:71:01:46:af:26:e0:42:19:fe:29:3d:99:ee:
c8:b5:ba:f2:71:67:dd:0c:d6:22:26:3f:e3:d2:bf:
d2:eb:c6:05:5d:ef:a8:35:25:ac:0f:b4:bb:40:53:
fc:31:03:ad:27:56:63:0d:2b:3c:bf:4a:d1:11:cc:
8a:4b:2d:ba:66:23:f7:da:4f:58:47:6a:2d:59:61:
50:dc:91:6c:c4:18:8e:4a:77:a9:7a:22:21:2f:0d:
4c:af:07:0e:1f:61:b1:4c:eb:e7:79:0c:02:13:8f:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:DF:8B:3A:FC:9E:D7:26:DC:9F:B1:79:8C:56:15:50:4F:AB:FA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WrXfizr8ntcm3J-xeYxWFVBPq_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a08::/48
Signature Algorithm: sha256WithRSAEncryption
8a:1f:99:55:8d:b2:7c:34:69:70:47:a6:ef:33:59:c6:26:a9:
f6:c7:27:0e:6a:9c:29:35:e9:5a:24:31:b5:89:6c:36:2d:a7:
e2:71:cb:3c:93:e7:5b:99:9e:5e:19:14:03:44:85:24:87:6b:
4d:bb:94:8b:7d:88:de:ed:91:9b:19:39:c2:05:51:51:41:17:
03:b9:2c:3c:e6:47:0a:1e:40:09:3f:33:33:75:0d:a5:a5:78:
a5:41:8c:61:d9:34:ae:d6:9c:04:33:2c:87:ed:2b:9c:ea:66:
e1:fc:81:68:9c:82:aa:69:24:48:cb:0c:6d:22:86:50:5f:8a:
42:8d:af:8f:ec:a0:a1:42:99:df:c6:08:26:de:45:af:64:8d:
3b:72:0a:4a:b0:96:1e:76:5d:42:6a:59:6c:41:c6:5e:ad:43:
f5:b9:b5:af:e8:38:c1:e4:b0:b3:f4:9b:13:b9:bf:91:d8:b5:
ae:dd:ff:66:92:97:4c:fd:8b:3a:ac:ac:19:74:a5:3e:2c:ec:
1d:41:03:6d:32:ff:79:00:14:4b:54:54:2a:c7:7e:f7:47:3d:
26:9e:41:03:28:2d:27:47:64:2c:ff:67:26:22:4a:01:53:59:
65:1a:db:75:b5:92:e6:86:d5:81:a0:ff:a8:23:33:fc:be:5f:
99:8c:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:30 2025 by rpki-client