Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eqTsTiy0CfA4a8AFwzMau7xiiU4.roa
File: eqTsTiy0CfA4a8AFwzMau7xiiU4.roa (raw, json)
Hash identifier: GMX9jbVreBJK7e5L66DyaSt6Fd44P+Pwp+SBD7ECpXU=
Subject key identifier: 7A:A4:EC:4E:2C:B4:09:F0:38:6B:C0:05:C3:33:1A:BB:BC:62:89:4E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA76018B91D916B2C384DDD52ADFA4
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eqTsTiy0CfA4a8AFwzMau7xiiU4.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31396
IP address blocks: 2a0c:b641:410::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:01:8b:91:d9:16:b2:c3:84:dd:d5:2a:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa4ec4e2cb409f0386bc005c3331abbbc62894e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:eb:c6:2a:56:bb:f0:fd:af:9d:01:89:00:
1e:c4:0e:52:c8:dc:4f:11:11:4d:15:9e:64:0b:be:
f5:3f:5a:0c:bb:c5:cb:6b:b3:ef:31:73:b4:c5:36:
f1:fa:b8:9b:2b:a7:8e:7c:84:db:f5:70:b0:87:17:
de:5a:10:42:4b:6f:7e:6c:58:ca:cb:5b:57:e3:ac:
59:8d:bc:f9:a9:a8:8f:90:d3:36:86:e4:a5:97:61:
b3:b7:a3:9b:83:fe:a1:a4:3e:ef:78:b7:13:b5:04:
cc:3b:4f:db:5e:1c:45:5d:52:a0:f9:5a:4c:cd:94:
51:37:75:bb:b4:43:99:bf:4f:1b:bb:40:2e:03:8b:
e6:d9:d0:00:35:ea:2c:03:89:63:bf:16:58:03:19:
2e:f8:d1:1d:9c:67:53:64:ba:52:12:22:fa:c1:a1:
86:2b:4b:72:19:6d:c1:90:ac:65:2d:76:2b:de:b5:
97:a2:bb:49:02:69:dd:1c:a1:33:e2:a0:2c:c5:d9:
7a:a3:18:10:f3:86:79:6f:95:6c:ab:c5:63:65:f0:
e1:46:bd:3f:7a:ae:c5:a3:bb:c8:9a:a7:9e:ea:1e:
c2:03:98:a3:43:57:98:04:22:eb:32:10:bf:56:4c:
a4:29:dc:d0:ed:bd:69:7e:27:ae:be:3c:da:bf:cb:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:EC:4E:2C:B4:09:F0:38:6B:C0:05:C3:33:1A:BB:BC:62:89:4E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eqTsTiy0CfA4a8AFwzMau7xiiU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:410::/44
Signature Algorithm: sha256WithRSAEncryption
0a:12:b6:91:bf:49:90:60:4d:4a:b6:a5:8b:f4:30:16:da:43:
c3:7a:12:ef:33:27:54:a3:7e:a8:03:1e:48:31:fb:d5:a9:95:
d6:d8:d2:4f:f6:6f:2f:b5:1c:d4:3b:7d:8c:63:d8:3c:a3:5f:
71:5e:a7:a9:54:ea:6a:8d:74:77:e1:c8:e8:88:99:f6:0f:69:
19:8f:dc:92:6a:d4:da:b9:6b:18:fa:a0:42:ac:cb:48:e6:5a:
95:97:ea:77:c5:9b:93:cf:9a:32:d7:05:f1:77:ce:6c:f8:d2:
04:30:02:1a:18:4f:2d:d6:3f:10:9e:69:14:88:a7:ba:31:98:
b1:02:8a:10:ad:d5:5e:d1:e3:fc:88:72:71:72:18:d2:e6:cb:
fe:b6:2f:95:ec:86:fb:b8:19:ba:03:e3:b3:af:2a:98:06:ee:
cd:4e:73:2a:ef:a5:9b:01:2a:6c:ef:2c:f1:b7:9c:58:29:12:
08:c2:b5:cd:bc:f0:ce:ce:65:07:f0:08:15:19:39:6f:d6:6e:
17:1a:04:c8:29:d4:01:8c:da:4f:3d:7c:57:3b:0f:b4:60:10:
0d:80:87:7d:9c:f2:dd:81:2f:ee:14:e9:30:31:75:b7:8f:1b:
27:77:94:77:50:9a:19:de:e1:11:9c:92:f0:ea:06:49:39:e4:
cd:55:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:03 2025 by rpki-client