Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_qAv7I06MpEDuQsmha_3PVuV4Ic.roa
File: _qAv7I06MpEDuQsmha_3PVuV4Ic.roa (raw, json)
Hash identifier: u7eN63OBKwEcbYIf6NtzD1fNeoCXeA4m0NAlVOIwG30=
Subject key identifier: FE:A0:2F:EC:8D:3A:32:91:03:B9:0B:26:85:AF:F7:3D:5B:95:E0:87
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAD8CB6C04025DB3FC8D5C92A9EB5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_qAv7I06MpEDuQsmha_3PVuV4Ic.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214043
IP address blocks: 2a0c:b641:d30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ad:8c:b6:c0:40:25:db:3f:c8:d5:c9:2a:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fea02fec8d3a329103b90b2685aff73d5b95e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:06:88:13:cb:10:ed:ea:54:64:2a:46:07:
23:ad:63:2c:ff:82:f0:0b:37:48:9c:cc:c8:91:b6:
03:21:4d:2b:29:e6:28:ea:f3:a2:ee:a3:6f:e9:07:
5b:11:c1:fe:83:4a:b7:ee:a7:6b:98:93:78:fc:f1:
c8:35:7d:0e:bf:ff:6f:b2:c3:a1:a7:c0:0b:59:93:
0d:34:76:e2:a8:bd:32:c5:27:77:b4:05:fb:89:77:
ab:5e:62:08:c9:d7:5c:7e:c0:68:ed:91:f7:77:99:
bb:7b:5c:8f:ad:6c:72:2f:87:40:de:f6:ba:96:3b:
f4:24:c5:7f:18:3c:64:f1:d2:be:0c:d0:a1:8a:bb:
22:43:7d:de:9f:73:fe:f8:e6:30:ef:8c:a6:ba:d1:
cd:fa:2e:d8:b7:86:ee:f1:ab:7a:d7:49:d2:ab:4d:
ae:2a:7d:b2:be:14:6b:7f:81:5f:20:cb:9b:0d:22:
4e:88:1c:14:4a:00:9b:63:d7:d3:22:41:40:90:93:
be:4c:b0:1f:90:58:ce:f7:aa:7f:64:4f:bf:60:b5:
56:e6:49:f8:88:31:92:d0:49:79:af:2b:1a:ff:f7:
44:32:c8:a6:31:ff:e7:e7:93:a4:bf:05:15:ee:0b:
d1:02:47:ed:4f:98:8e:44:9e:13:8d:5d:12:11:d4:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:2F:EC:8D:3A:32:91:03:B9:0B:26:85:AF:F7:3D:5B:95:E0:87
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_qAv7I06MpEDuQsmha_3PVuV4Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d30::/44
Signature Algorithm: sha256WithRSAEncryption
1a:5f:b6:e0:cc:0b:76:7f:15:45:86:20:91:7e:d9:8c:97:ca:
5b:1d:3b:d6:0c:c8:9a:ee:c8:69:f7:a3:71:61:0c:eb:d7:12:
4f:cb:6d:d6:86:70:01:3a:ab:68:bf:0f:d4:b6:cd:ec:eb:05:
f8:24:57:ae:c7:13:fe:aa:70:7b:6f:cf:2f:39:f5:5f:7f:68:
30:83:e8:7d:84:3a:6f:13:a3:4f:71:05:12:77:67:a1:d8:56:
16:f0:38:d6:6b:cc:4e:9c:75:85:4b:50:67:94:e0:96:28:73:
b1:fe:9d:f9:82:eb:e9:6f:06:78:21:3a:8b:8d:10:6d:98:3d:
4b:56:a4:8c:0b:da:6e:45:68:dc:d0:f4:55:de:5f:cd:3b:91:
70:65:e5:c4:17:fb:cc:09:0e:48:85:e0:a0:5c:ad:ce:bd:71:
45:7e:3c:0a:92:87:08:4f:e5:8c:60:d5:67:f7:36:17:6c:ea:
0f:33:09:e3:f3:db:4a:cf:1f:7a:03:4f:f5:6a:5a:bc:34:f5:
fe:29:f9:db:db:7e:81:b0:dd:f6:2f:ca:05:bc:10:70:29:57:
56:f5:d4:fb:d0:7b:5e:d6:8d:62:40:ef:90:d6:c9:b5:81:d6:
f8:fa:ae:5c:f0:13:76:9b:76:d0:61:f3:c5:f8:c9:d0:b9:b5:
62:59:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:48 2025 by rpki-client