Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kpuudyPIV7drd__Z_mtcgBBnDHQ.roa
File: kpuudyPIV7drd__Z_mtcgBBnDHQ.roa (raw, json)
Hash identifier: rJvSZ0Oc3ePQe8VCRjDA9JTZvENF03ihmqtp+WjA+mo=
Subject key identifier: 92:9B:AE:77:23:C8:57:B7:6B:77:FF:D9:FE:6B:5C:80:10:67:0C:74
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAA8234E4FBE9B3A123EDC24D839C5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kpuudyPIV7drd__Z_mtcgBBnDHQ.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213236
IP address blocks: 2a0c:b641:6c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a8:23:4e:4f:be:9b:3a:12:3e:dc:24:d8:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929bae7723c857b76b77ffd9fe6b5c8010670c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:42:3b:53:49:b8:53:ce:34:85:1b:4e:35:
47:90:2b:58:da:ed:3e:ee:8f:67:13:d4:e7:d1:13:
b7:a0:a7:17:fd:88:cb:26:67:d6:24:a8:f1:9c:ab:
43:91:55:7f:38:89:8e:0f:e5:db:ec:b4:4e:27:60:
8c:26:da:4c:45:36:97:38:73:8c:3b:e2:79:85:cd:
38:9f:28:d5:30:5d:3a:29:f7:49:b4:e7:8f:6b:a8:
03:09:b4:80:b4:87:12:62:ce:7d:d3:af:0e:cd:93:
6b:c5:3a:3b:3a:8d:ce:27:0d:33:f5:fd:19:2a:44:
8e:5c:82:ea:b3:f4:90:90:4e:0d:ab:2c:07:fa:ea:
3e:3e:ef:ec:51:f6:8a:0c:8c:36:02:10:ae:a0:4a:
d0:05:6f:1b:db:f0:e2:e9:c1:36:fd:a4:cb:cf:e1:
14:8c:a3:22:c4:2b:6e:29:24:2d:20:d5:25:53:65:
69:05:69:7d:9f:56:ee:7e:e4:8a:c2:85:b4:99:5a:
e7:c3:e0:80:7c:2c:32:ed:29:e8:bf:33:f7:9d:64:
47:03:cd:39:9f:e1:ea:d8:a2:bb:7f:d4:63:d4:6b:
aa:6f:55:bf:07:dd:f8:5c:78:6a:51:51:be:28:54:
80:9b:2e:79:f3:9b:2a:37:61:0f:20:83:cd:7c:be:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:AE:77:23:C8:57:B7:6B:77:FF:D9:FE:6B:5C:80:10:67:0C:74
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kpuudyPIV7drd__Z_mtcgBBnDHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:6c0::/44
Signature Algorithm: sha256WithRSAEncryption
69:e7:42:d6:00:37:4e:89:31:71:4a:28:4e:40:5d:22:85:b2:
9e:57:33:ba:03:ed:35:f9:d9:90:42:c9:53:d6:58:75:57:fa:
46:4e:98:ce:6f:e5:c1:a2:5e:34:c5:7f:62:00:43:98:a8:a3:
32:f8:ea:c7:4e:cc:6b:ce:16:34:a9:7d:d8:ce:55:33:e6:40:
47:5c:13:13:a7:aa:9c:6d:09:84:78:fb:6f:10:ec:aa:58:18:
f6:e3:94:4c:a4:7c:1f:2f:7d:3a:44:f5:29:83:74:23:cd:8e:
68:8d:7b:2a:46:a2:d1:30:24:97:4a:62:00:1e:09:6c:0e:b6:
0f:fb:12:1c:23:1b:69:5b:85:b1:a5:0d:48:4a:a2:24:19:15:
5c:57:9a:9a:22:4d:3a:57:cb:92:83:b6:c6:6b:b3:b3:b6:10:
78:bb:b6:0b:9d:f1:cb:ab:2d:a9:0e:be:fd:54:7f:6a:8e:a9:
c6:53:d6:6e:ea:5c:00:77:6b:7a:b2:eb:4e:52:20:6b:f2:4e:
12:62:b9:d2:7b:86:e7:9e:01:64:c0:5f:b9:3c:7b:84:58:33:
98:61:94:3c:db:e6:05:96:a2:ec:f3:01:05:ef:74:18:15:0f:
72:1e:6b:5b:9c:b6:db:00:6b:5d:63:a2:0b:6f:0d:a8:a6:c1:
81:34:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:46 2025 by rpki-client