Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/miygOLx0IoF7BjfmIUzR0BzM4Bw.roa
File: miygOLx0IoF7BjfmIUzR0BzM4Bw.roa (raw, json)
Hash identifier: wBE2DgeQ6X4lQEPZ7AHF7WtLe8+AHI1BeZZan4mLioU=
Subject key identifier: 9A:2C:A0:38:BC:74:22:81:7B:06:37:E6:21:4C:D1:D0:1C:CC:E0:1C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFABCA9D6EEE973AB458901BA95D293
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/miygOLx0IoF7BjfmIUzR0BzM4Bw.roa
Signing time: Wed 01 Jan 2025 03:48:33 +0000
ROA not before: Wed 01 Jan 2025 03:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398646
IP address blocks: 2a0c:b642:1a0d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:bc:a9:d6:ee:e9:73:ab:45:89:01:ba:95:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a2ca038bc7422817b0637e6214cd1d01ccce01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:7c:c8:ab:c8:b5:e2:2d:21:fe:f6:5a:1d:
72:07:0c:e9:97:8a:df:f2:68:12:88:6f:64:1a:94:
c5:9a:17:66:77:81:b2:f9:bd:00:17:a3:05:44:40:
9a:c1:4d:3d:52:fc:f7:61:3a:e7:19:07:ba:ef:92:
09:9c:9a:89:cb:64:51:7f:34:09:fd:b9:00:d7:f5:
0c:f6:4e:46:1a:94:da:c2:1d:36:de:00:4e:86:34:
52:67:65:42:7d:0d:b6:3d:2c:dc:ca:50:bc:c4:e8:
dd:97:29:a5:86:ca:0d:8c:77:73:38:2e:a8:2c:35:
05:67:9c:7d:d8:4e:0d:1d:8c:ef:0f:f7:2e:dc:5b:
e0:1f:aa:41:0b:0f:b5:0d:43:fb:e0:71:bd:5d:10:
5d:3f:3f:ca:94:ce:b5:91:21:6e:9a:62:90:40:74:
1c:a5:3b:e3:86:2b:35:f5:89:7b:50:2f:6b:62:b9:
8b:21:95:af:06:20:7d:bb:34:66:77:cb:25:56:68:
1f:e5:7a:26:5e:3f:92:6e:63:84:c1:cc:e2:52:70:
cd:cf:7f:28:00:68:a6:ba:98:29:fa:9b:63:07:7d:
25:85:ac:80:af:ff:05:d7:7e:f3:7a:70:af:8c:d1:
52:bd:f5:b0:36:7f:65:db:1f:5b:cf:55:2a:51:4e:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:A0:38:BC:74:22:81:7B:06:37:E6:21:4C:D1:D0:1C:CC:E0:1C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/miygOLx0IoF7BjfmIUzR0BzM4Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a0d::/48
Signature Algorithm: sha256WithRSAEncryption
7d:1e:19:e6:20:c3:f9:09:90:03:7a:09:e6:f7:83:93:4b:fe:
87:2b:47:7c:f4:f2:ae:27:7b:af:ef:bd:4a:f0:cd:03:d9:9b:
f7:7d:30:5b:13:56:9b:fe:3f:35:74:38:39:43:5a:fe:d0:18:
a6:bc:75:ca:c2:69:d7:fa:3c:47:60:17:52:ca:6f:6f:59:49:
49:f4:15:fd:8e:8f:2b:3e:18:af:b1:04:da:6f:af:8e:da:3d:
1b:32:c5:50:a0:45:68:92:42:e0:37:c9:3c:31:62:76:7a:6a:
d7:f6:3b:6b:de:d9:08:20:20:a4:9e:d5:7e:98:1f:f3:09:ae:
39:6e:72:39:35:92:2c:3d:e6:c8:63:be:ba:d4:b8:bd:8e:d3:
5e:aa:4a:34:a3:32:c5:3d:39:ce:85:12:84:67:19:73:fa:e6:
96:88:a3:e0:51:35:a0:8d:63:bb:57:0f:76:e8:79:29:7b:de:
2b:e0:9c:91:c9:5e:0b:03:cc:9c:89:52:38:82:84:c8:f4:22:
46:99:65:d6:29:98:6c:f4:89:e6:a1:90:7c:6e:47:cd:58:45:
8d:13:ad:cd:f3:70:b2:3b:14:81:2d:62:33:0a:a0:f9:2d:1f:
00:59:20:a0:73:c5:7c:32:fc:bf:12:4c:99:7b:a4:25:34:5f:
d3:f8:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:30 2025 by rpki-client