Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/5NAz_TxL7piwncxMNZRclSpUZmc.roa
File: 5NAz_TxL7piwncxMNZRclSpUZmc.roa (raw, json)
Hash identifier: IUBB3PE9s8uMxKIfuZF6OPjPB9dIcT7pIYkqY7z7YMs=
Subject key identifier: E4:D0:33:FD:3C:4B:EE:98:B0:9D:CC:4C:35:94:5C:95:2A:54:66:67
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019356AF011CF46628FB56D73A24A8AB2437
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/5NAz_TxL7piwncxMNZRclSpUZmc.roa
Signing time: Sat 23 Nov 2024 01:42:09 +0000
ROA not before: Sat 23 Nov 2024 01:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46407
IP address blocks: 2a05:f480:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:af:01:1c:f4:66:28:fb:56:d7:3a:24:a8:ab:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Nov 23 01:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4d033fd3c4bee98b09dcc4c35945c952a546667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:3c:35:f6:97:a1:6f:f7:d4:b0:6d:d6:65:
a0:6b:60:92:77:1c:cb:88:80:8d:b4:1d:c4:33:26:
49:6a:67:88:f3:19:41:e4:e3:6d:ee:e0:49:ae:f2:
22:07:b1:a8:dc:b2:27:2a:dd:c8:3f:e0:a8:21:41:
53:de:52:39:fc:69:9e:5b:5e:09:b2:d1:0c:31:f6:
3f:11:52:4c:88:31:f2:a6:06:97:7a:5e:7b:b3:e9:
e5:94:c5:19:24:c4:37:8b:b9:83:42:ad:4f:a9:0f:
fd:18:5e:58:3c:4f:93:1f:19:f3:48:c6:82:55:65:
8e:f4:e5:9f:1a:95:ea:e2:74:04:0a:51:c0:f3:45:
b8:94:f5:d7:f1:ec:f2:e2:07:d6:19:a0:9a:42:27:
7e:97:8d:ef:0e:07:13:0b:85:5b:91:7e:c1:99:84:
67:ea:cb:c0:bc:bc:6e:0f:03:02:39:7e:85:51:33:
e4:d0:ea:8a:10:3a:8b:a7:7d:a5:d6:29:43:d6:65:
12:37:c7:da:02:95:58:a1:72:18:91:b9:6b:d3:0e:
a3:f8:38:72:8c:8e:34:24:a9:91:8a:ec:7d:fa:3b:
dc:c0:d1:da:e4:dd:3e:83:af:aa:1e:3e:98:00:99:
a8:58:25:c8:0d:26:01:eb:1a:c9:c5:2c:75:94:ae:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:33:FD:3C:4B:EE:98:B0:9D:CC:4C:35:94:5C:95:2A:54:66:67
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/5NAz_TxL7piwncxMNZRclSpUZmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f480:10::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d8:ba:a2:c1:e6:86:c2:d6:3b:91:74:57:92:81:d8:aa:b2:
a9:13:b3:73:d7:d4:4e:c9:85:d1:08:01:34:73:5f:3e:a1:88:
7b:f0:3f:7f:77:23:3a:23:67:3e:57:63:1c:00:ff:c2:28:2d:
e1:19:b4:82:88:ec:d3:86:dd:0d:b8:c9:cc:90:20:25:01:f6:
d1:eb:cd:f2:3b:e7:2b:b4:7b:d6:88:4e:d0:b0:b2:64:3f:2e:
3d:6f:dc:da:fd:e0:8a:b1:99:84:75:72:6c:7b:6c:26:c7:bc:
0d:8b:1d:d0:9c:50:17:6c:27:20:6a:9d:94:38:89:81:9f:98:
fe:c0:19:04:5c:2e:ea:1d:12:19:4b:c7:cf:6a:9e:e0:b8:fd:
71:75:5e:5d:df:b8:2c:74:3e:77:c7:3e:5a:22:c6:85:0c:5d:
7d:96:55:ad:5e:63:fa:de:e5:fe:35:a3:ca:76:de:7f:b4:7e:
cd:4d:8f:8e:68:3a:84:45:d0:05:5f:1d:f3:ab:e1:a8:87:9d:
d7:bb:b2:02:29:d8:c0:9f:e1:79:ff:9b:06:28:21:ee:a3:80:
8f:e4:ef:a6:3d:bd:f4:e7:71:e3:c5:84:05:9c:3b:d6:6f:64:
09:5e:6a:03:87:04:33:df:75:01:3d:de:81:a1:3c:fe:61:1c:
82:3f:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:31:14 2025 by rpki-client