Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tz3GMkXUy60tmwyJdkKiXbTB1Lo.roa
File: tz3GMkXUy60tmwyJdkKiXbTB1Lo.roa (raw, json)
Hash identifier: scq9jo2s4d7eBH6wNoOR2KHYw4smg7DNZmDT8/NoL+g=
Subject key identifier: B7:3D:C6:32:45:D4:CB:AD:2D:9B:0C:89:76:42:A2:5D:B4:C1:D4:BA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA7C29B5C9F0C7993F52F43927058E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tz3GMkXUy60tmwyJdkKiXbTB1Lo.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 2a0c:b641:493::/48 maxlen: 48
2a0c:b642:1a0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7c:29:b5:c9:f0:c7:99:3f:52:f4:39:27:05:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b73dc63245d4cbad2d9b0c897642a25db4c1d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:77:3c:34:ce:87:7c:33:26:a6:6f:ba:cd:
fa:e9:cf:42:66:1f:15:47:18:b7:08:58:82:4d:b9:
99:a5:f2:9e:31:a7:cb:4c:12:a9:3c:d9:18:85:6b:
b9:ce:c4:2a:c8:0f:c2:cf:81:96:10:69:cc:95:89:
42:9e:ca:ba:cc:f8:8f:0f:c8:76:be:a3:14:10:33:
d0:18:37:fb:9a:1d:7c:1b:79:1f:75:6a:a1:76:8c:
f2:08:79:87:7e:be:ce:df:58:9c:41:7d:25:81:81:
d5:f3:93:b0:56:d6:4b:86:13:a2:7d:ce:77:02:2c:
4e:23:e6:3c:42:55:27:61:9f:b8:d6:db:06:e6:9a:
7e:d9:41:cf:c4:b8:b7:76:c2:e6:19:e6:60:bc:41:
0f:ec:71:df:36:b6:8b:6e:84:34:a7:69:05:f9:d2:
aa:8e:20:67:a7:11:3f:35:5e:ba:52:54:48:a0:bc:
3b:fd:52:df:b0:69:92:b1:45:85:df:99:7c:c1:21:
9d:b6:90:ec:d4:9f:be:8c:81:0c:15:61:08:fa:ad:
8d:e2:a5:79:08:72:68:75:91:36:3b:67:10:8c:21:
19:21:3f:b6:61:f0:35:f5:80:e5:06:52:52:fa:40:
61:f7:c2:2d:b8:63:29:21:cf:64:88:c4:57:1d:9a:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:C6:32:45:D4:CB:AD:2D:9B:0C:89:76:42:A2:5D:B4:C1:D4:BA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tz3GMkXUy60tmwyJdkKiXbTB1Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:493::/48
2a0c:b642:1a0c::/48
Signature Algorithm: sha256WithRSAEncryption
43:a3:4b:4d:9a:06:b5:a0:27:75:c7:88:94:7e:a0:b7:ff:5c:
2b:c6:d9:5b:ab:d0:77:40:55:7a:90:00:22:2c:fe:d5:2b:d3:
99:38:a6:c3:da:91:50:53:1d:69:d3:16:bc:9b:6d:0e:63:d7:
3f:b1:a3:70:3a:88:bb:42:fa:96:76:ea:f3:c2:7c:d8:ff:99:
54:6e:4c:ee:33:ce:99:29:79:33:dc:02:c8:bf:ac:cb:7f:ba:
66:33:95:8e:af:16:ea:9c:4d:31:c2:ed:bd:ee:fb:16:82:d0:
64:d7:d0:04:c4:97:c5:27:30:e7:30:26:f0:ec:e6:ea:ed:da:
89:a1:66:de:b1:0b:a5:fb:f4:c9:42:16:10:0e:9e:62:30:98:
c8:be:99:75:43:09:3c:4f:df:77:49:73:1f:7a:f2:f7:68:59:
2d:9b:60:00:a7:8e:c7:0e:8c:a8:70:9f:46:5e:4a:4f:e2:ee:
53:d7:4d:6d:58:c4:9e:7b:04:33:bc:d9:5a:65:c5:99:a2:9a:
05:56:d5:3b:0c:61:a4:2a:65:e6:2e:ed:8e:ce:d3:fd:56:bd:
ea:b3:30:47:1c:92:27:f5:09:49:8e:5e:15:fd:f6:f5:23:16:
ae:5a:94:6d:0d:22:04:cd:9a:4c:3f:45:54:33:4a:87:63:75:
6d:87:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:09 2025 by rpki-client