Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uVBh4x6pZZKAyv2TZLGHY7MizF4.roa
File: uVBh4x6pZZKAyv2TZLGHY7MizF4.roa (raw, json)
Hash identifier: hcUiMdSBtNMDK5dZUmb3Jv41z10PVXWn5IbTYQJlgFU=
Subject key identifier: B9:50:61:E3:1E:A9:65:92:80:CA:FD:93:64:B1:87:63:B3:22:CC:5E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAB6B9EF501AD1D4A1B5FC6859295
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uVBh4x6pZZKAyv2TZLGHY7MizF4.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213791
IP address blocks: 2a0c:b641:d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:6b:9e:f5:01:ad:1d:4a:1b:5f:c6:85:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b95061e31ea9659280cafd9364b18763b322cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:96:a8:3c:0b:a5:3a:d3:64:35:1b:50:a0:
fc:ff:88:f5:2d:61:ec:c5:04:b7:ab:35:ee:a8:73:
78:1e:11:5d:81:e3:89:4e:f8:1a:19:6b:9e:c1:93:
cf:00:75:d1:fd:9e:33:5c:51:eb:71:ee:d3:fa:64:
48:7a:11:b5:7f:c3:3a:d1:82:af:76:84:d4:81:3c:
61:b7:e4:9d:5d:48:5f:18:f7:cf:9c:4a:e0:19:8c:
9e:d8:e0:0d:c7:7d:f7:77:54:6f:cd:05:d7:d0:f4:
39:4c:59:e0:b4:95:b8:ce:e6:e3:77:3d:e8:0e:f0:
24:94:91:b8:8d:2d:8b:38:49:96:de:87:53:9f:16:
1e:e4:f5:68:6d:63:e0:92:4d:f9:48:08:c2:8d:59:
b8:e9:a9:69:d8:1b:4b:29:0f:b0:29:7b:0e:4e:c0:
73:7f:e6:bf:ac:e0:42:49:ee:b4:c5:13:f9:1c:8c:
1f:86:d3:80:8a:a9:27:f1:ad:51:34:13:ad:d7:c0:
b5:ed:b0:a1:b1:51:d6:8a:eb:4c:5c:45:23:f3:2e:
87:5c:ac:fc:f4:2b:0d:06:a8:0a:19:c6:9a:09:3a:
35:a3:8f:a6:9a:72:e0:0f:21:db:0a:0d:a6:54:a3:
46:64:6c:93:4c:bf:ec:a3:34:b9:e5:32:d0:70:1c:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:61:E3:1E:A9:65:92:80:CA:FD:93:64:B1:87:63:B3:22:CC:5E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uVBh4x6pZZKAyv2TZLGHY7MizF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d60::/44
Signature Algorithm: sha256WithRSAEncryption
75:9f:84:ae:af:36:37:2d:c1:79:e3:ea:8a:c3:33:91:53:15:
8b:ff:e7:94:af:0c:b7:dc:0d:4c:b7:21:3c:52:48:ac:95:96:
92:99:c5:88:0e:bd:29:59:69:5d:68:e8:c0:a5:7d:fb:21:75:
e4:0b:c0:24:49:12:32:82:73:04:92:ce:12:9a:94:2f:96:e7:
17:75:67:a0:4b:04:a8:ed:8f:ac:cd:21:9f:0d:4f:82:46:6c:
e2:9f:4b:e6:92:14:9b:06:e9:fa:f3:84:6a:23:ab:a7:46:53:
d0:67:5e:b3:95:fc:55:00:f6:f7:e5:c5:fb:ea:e8:4b:e1:22:
d1:d9:15:80:40:3e:77:65:00:de:37:fa:dc:78:70:37:f5:95:
38:fd:da:dd:79:e9:11:4f:90:87:8a:fb:a1:c1:b4:aa:7d:52:
19:53:a2:a7:0e:d4:7b:61:0a:03:e2:9e:66:df:a5:bc:24:55:
27:2f:1f:f1:42:2c:3e:5b:f1:e6:04:5f:87:30:a9:36:82:6b:
e3:ed:28:a6:e3:84:80:75:fc:d4:cb:09:4e:13:ee:6d:cf:f4:
47:4b:8a:2e:cd:35:c4:a7:db:6f:63:a4:9a:ac:d7:09:b1:61:
6e:84:58:47:4b:17:fa:c8:91:2a:3a:51:48:1c:22:ec:30:a5:
ed:32:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:17 2025 by rpki-client