Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/asNKvWpmWtSiOFTT0v2aKIwDV1E.roa
File: asNKvWpmWtSiOFTT0v2aKIwDV1E.roa (raw, json)
Hash identifier: n4JwNvp14DTms3eEw5HtYB4H2+SDW4GrmczMWd3y0rc=
Subject key identifier: 6A:C3:4A:BD:6A:66:5A:D4:A2:38:54:D3:D2:FD:9A:28:8C:03:57:51
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9D165E4E850E6AAD10882794C978
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/asNKvWpmWtSiOFTT0v2aKIwDV1E.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211448
IP address blocks: 2a0c:b641:140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:16:5e:4e:85:0e:6a:ad:10:88:27:94:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac34abd6a665ad4a23854d3d2fd9a288c035751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:0a:66:33:81:32:e9:31:e1:3f:7d:66:a6:
3f:73:b7:3e:27:7a:6e:bc:f9:34:34:76:9e:34:08:
18:bc:4a:2e:b6:1a:8c:9f:37:9a:7f:ea:a5:22:f6:
43:7f:0b:1d:71:28:1a:b0:de:d3:b9:9b:d7:c4:f7:
79:01:81:47:90:93:5b:88:c3:6f:9f:d5:b1:69:c8:
86:e1:4a:c1:37:8f:0a:58:ac:cc:87:cf:48:ab:41:
c9:3d:98:60:d5:a9:37:3c:2f:d1:53:94:b3:58:c1:
5c:e8:a1:a6:dc:ee:6a:c9:0d:9c:9b:b2:f0:ae:f0:
a6:13:7c:75:4e:3c:f9:e4:d8:83:54:b1:1c:f9:1e:
d2:aa:06:53:ef:7d:61:cf:df:eb:74:4f:96:f1:84:
a9:6e:36:d4:d9:84:81:97:73:c3:d1:e5:c9:e4:b7:
4e:c0:95:25:e1:37:2e:0f:24:fa:42:ec:7b:69:fa:
ad:a1:24:d5:9d:e4:74:73:79:85:6c:08:eb:b4:33:
35:97:12:d3:6e:b0:7a:11:40:b6:fd:d7:04:bf:dc:
21:26:09:d5:29:0d:e4:f7:17:63:f1:17:72:da:20:
4e:50:1b:94:12:dc:5d:65:12:f4:b5:5b:d5:8b:c7:
60:4b:1a:ba:6f:51:8e:b0:0f:c9:c8:d0:a6:60:4b:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:4A:BD:6A:66:5A:D4:A2:38:54:D3:D2:FD:9A:28:8C:03:57:51
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/asNKvWpmWtSiOFTT0v2aKIwDV1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:140::/44
Signature Algorithm: sha256WithRSAEncryption
8d:e3:da:09:a8:77:86:5d:f6:8a:71:8f:32:d2:e1:26:f5:eb:
cc:20:5b:fa:ee:c2:45:45:bf:56:8c:97:b9:bf:f1:c1:3f:53:
5c:d0:57:4d:1e:81:36:99:9d:cf:95:57:f0:d4:4e:4b:9f:fe:
84:2e:38:84:10:50:fb:42:d5:34:fe:20:fb:44:3d:7a:da:b9:
c4:60:6b:64:33:16:ba:ba:48:7d:b3:5d:b7:1d:e5:60:2e:a4:
48:0d:ab:b5:33:db:1a:23:57:c4:a4:31:69:2f:d2:ac:bc:fa:
b7:93:1e:b8:91:a8:b4:c1:85:5a:82:7b:3b:0c:9a:b1:9b:8d:
86:f4:90:e1:93:6d:98:57:8d:13:7a:c4:d9:6c:ad:93:2f:7a:
f7:bd:14:51:9f:36:14:f8:b9:e8:6f:41:ac:82:58:c5:3e:50:
35:89:80:b3:18:a6:45:a0:29:66:d8:8b:50:74:c5:04:40:67:
6e:25:c9:93:69:7b:1c:43:56:a4:43:40:d9:14:29:14:48:98:
df:50:14:b7:27:36:19:63:6f:31:f0:2d:8b:6c:1e:5a:54:1d:
4e:65:ee:70:d3:d0:cd:b5:15:bb:08:4e:f1:d7:01:90:f0:a4:
7a:ef:60:3d:b4:06:39:bc:13:6a:c9:56:18:d6:5b:c4:54:1d:
82:97:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:28 2025 by rpki-client