Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l4WOdu_HqXQ_t37NHDepLxSk5dM.roa
File: l4WOdu_HqXQ_t37NHDepLxSk5dM.roa (raw, json)
Hash identifier: /AenBgULoCH+K1H1DqHmuIBOkx1r+pZxnpyU8ZDMV5Q=
Subject key identifier: 97:85:8E:76:EF:C7:A9:74:3F:B7:7E:CD:1C:37:A9:2F:14:A4:E5:D3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E8C3C0C6E91CFD89598D0A7B6FDBE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l4WOdu_HqXQ_t37NHDepLxSk5dM.roa
Signing time: Mon 02 Jan 2023 06:15:05 +0000
ROA not before: Mon 02 Jan 2023 06:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212653
IP address blocks: 2a0c:b641:4f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:8c:3c:0c:6e:91:cf:d8:95:98:d0:a7:b6:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97858e76efc7a9743fb77ecd1c37a92f14a4e5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:f0:4f:86:9e:51:00:9b:d7:4f:f1:6b:d8:
01:1e:01:e3:98:c2:c8:d1:0b:e1:6e:1f:fc:19:c9:
34:3f:54:4b:d6:72:b6:9e:c7:e4:0b:a8:66:c2:03:
0f:26:0e:b8:d2:4a:28:2c:a4:8e:72:69:6b:fe:72:
ac:58:5b:74:96:66:06:41:61:62:75:d4:4e:99:1d:
62:53:5e:8e:d9:8c:30:53:6d:d3:b1:4f:3c:a0:e1:
41:46:9b:9b:d1:85:64:44:c0:19:5d:96:e6:05:90:
2a:89:80:74:aa:94:92:60:f6:13:75:40:bb:12:54:
0c:31:4f:89:41:2c:fd:29:9a:5f:34:00:f8:c6:c9:
e5:5f:44:91:9c:da:7f:57:7b:73:0c:a2:c8:0c:af:
41:f6:00:07:e5:74:59:57:72:22:2d:74:c4:1d:85:
42:f9:d9:cf:68:06:80:fb:f6:26:84:10:2d:b2:0f:
3f:46:73:1d:88:65:9e:0f:db:23:42:9a:de:5d:a6:
bc:94:95:0f:a4:94:1f:cc:30:e1:f1:d6:df:4f:4d:
48:2a:ef:77:29:a0:29:aa:40:78:fd:23:dc:2c:f5:
8f:69:2b:7e:9c:99:20:1b:95:d8:f5:c2:7d:d5:68:
6c:ef:f3:fb:f8:00:eb:c5:32:0f:bc:c1:07:23:cc:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:8E:76:EF:C7:A9:74:3F:B7:7E:CD:1C:37:A9:2F:14:A4:E5:D3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/l4WOdu_HqXQ_t37NHDepLxSk5dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4f0::/44
Signature Algorithm: sha256WithRSAEncryption
05:04:0d:11:ab:aa:a2:8e:c2:75:83:51:50:28:1e:65:11:86:
e1:9c:98:9f:a5:f6:03:43:70:fa:c9:8f:3a:b0:b9:82:ea:bb:
2f:7e:a5:63:20:11:f1:85:39:4c:d2:e5:bf:71:ea:73:75:8f:
88:91:39:56:e8:ad:c1:a7:9f:ef:f1:3c:a7:54:af:8c:85:db:
cc:50:ee:ea:ac:88:d9:4b:06:82:b6:d7:67:98:30:95:21:d3:
63:89:37:3f:de:bb:cb:2e:a3:9a:fb:05:2d:7e:5b:b6:69:12:
ab:d8:3c:e5:3e:0c:5f:cb:bc:de:5c:99:62:5a:43:74:53:56:
f7:79:66:7f:d7:35:95:dc:04:5a:92:d3:59:b3:1d:01:21:29:
6b:2b:da:b1:9d:ba:bf:1e:1a:1d:69:bf:9d:a0:83:bc:83:7b:
c3:8a:b7:ff:f8:40:7f:60:e9:bb:d1:ab:89:cb:a9:bb:b2:4b:
4a:ec:04:02:39:da:de:c0:44:80:97:55:46:c8:a3:1d:fb:0f:
aa:c8:51:f0:c7:24:96:da:68:53:87:a9:39:21:01:81:90:aa:
5d:cf:12:a6:ba:c8:d7:d4:7a:3c:d6:7e:42:99:d8:f6:d4:b1:
19:ac:ca:32:55:bd:03:09:92:64:74:4a:d4:2d:72:6a:b9:b3:
b8:83:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:36 2025 by rpki-client