Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/2symQxt9tiTp5JPRu9SVrhpHnoI.roa
File: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (raw, json)
Hash identifier: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=
Subject key identifier: DA:CC:A6:43:1B:7D:B6:24:E9:E4:93:D1:BB:D4:95:AE:1A:47:9E:82
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0194221FE25896F67CBDDCD7B87D776B8D18
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/2symQxt9tiTp5JPRu9SVrhpHnoI.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206564
IP address blocks: 2001:678:5d0::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:58:96:f6:7c:bd:dc:d7:b8:7d:77:6b:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dacca6431b7db624e9e493d1bbd495ae1a479e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:a1:67:64:37:fa:3b:0d:32:d7:23:15:1f:
d4:e5:3c:b8:dd:b1:3c:7a:ab:00:57:d6:6b:9f:95:
01:c4:b5:a6:cc:8e:c9:b7:36:aa:b6:36:3c:25:7f:
40:d8:07:95:c2:e7:f6:06:3e:3b:e6:5b:18:76:b7:
b1:fe:2d:c1:1d:5b:18:19:a6:5b:6c:97:5b:0a:ff:
1b:dc:18:f0:e9:87:77:3d:10:a9:67:30:1e:8b:58:
9b:4b:5c:29:d8:5f:35:ad:4b:a2:d3:3c:bb:0e:dc:
f8:f5:5b:d0:90:a1:9f:a4:26:ab:dc:69:b1:bc:84:
60:62:aa:1a:84:61:98:5d:ba:2c:1d:7a:f8:e5:0f:
6c:c2:70:4b:60:42:e5:7f:53:c4:c4:2f:d9:52:32:
1c:26:ec:75:7e:73:e2:57:24:03:c7:19:c7:fa:1e:
6b:94:0b:b7:1e:dc:a1:64:87:33:1d:28:6c:b8:4b:
f2:cb:65:45:6c:4a:da:30:5c:98:5f:2b:ce:aa:f3:
5f:e9:c1:00:b7:64:86:79:e8:2e:91:92:39:fb:50:
25:15:65:5a:e7:ad:c6:8b:ba:05:d6:67:11:1c:f5:
e5:60:81:3f:2d:05:ec:0e:07:57:04:72:29:6b:de:
09:f3:94:6b:04:fc:5e:24:b2:8f:59:d5:65:7d:e4:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:A6:43:1B:7D:B6:24:E9:E4:93:D1:BB:D4:95:AE:1A:47:9E:82
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/2symQxt9tiTp5JPRu9SVrhpHnoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5d0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a7:b9:8a:7f:06:3f:6e:8e:2e:eb:fe:be:99:78:66:3e:5e:
ce:12:26:64:0d:f1:26:39:92:7d:e4:e5:75:fc:78:3a:9c:22:
17:95:44:6f:b7:8d:0b:cd:be:1b:8a:77:81:65:a2:41:51:f8:
e6:cb:60:d6:b7:70:63:a5:9a:ad:14:34:af:d3:d3:95:bc:00:
4f:0b:c2:58:de:ea:19:11:cf:3f:06:47:ab:e9:13:fa:a4:4e:
22:32:fa:29:99:ed:9f:82:5a:be:a0:44:4d:45:60:26:46:82:
36:df:c2:6c:31:2c:d4:ae:93:3f:28:27:24:74:10:b6:9e:43:
97:6a:69:ef:1c:7d:77:49:bc:7f:21:ec:84:94:06:d1:cf:a0:
99:d8:92:83:3f:73:be:04:35:7a:29:a1:10:c2:87:c0:df:bd:
16:7a:23:38:9c:f3:83:32:6a:6a:b6:21:96:21:50:a1:6a:b9:
72:e3:c1:38:07:51:42:e3:1c:92:1a:7c:08:86:ce:b6:0f:2a:
95:e5:8c:bb:c6:14:7e:96:06:7e:a9:dc:79:69:d4:87:18:fb:
a6:e7:d2:d5:12:e3:92:52:6b:62:5e:46:e9:57:bf:c3:32:b6:
ce:3e:e8:1d:9a:d6:3b:b2:0b:28:e8:d3:85:88:29:97:10:68:
de:0a:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:31 2025 by rpki-client