Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa
File: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (raw, json)
Hash identifier: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=
Subject key identifier: D0:34:40:71:8C:15:53:5C:13:3E:62:8F:51:56:44:F9:C2:2F:55:69
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019425FC60B3E1F795050329F39DADCEC859
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25182
IP address blocks: 2a02:458::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:60:b3:e1:f7:95:05:03:29:f3:9d:ad:ce:c8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03440718c15535c133e628f515644f9c22f5569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:3c:cc:d2:a1:ee:9d:84:d8:b5:29:4d:0b:
de:2b:7f:b8:61:0d:db:b1:38:96:b9:c8:85:65:06:
76:87:e9:f4:3e:31:9d:52:1a:dd:4a:4e:6b:cf:6b:
f2:5e:93:de:af:ee:e7:80:ca:c6:95:d5:39:8a:2f:
5e:7f:8c:25:6c:b2:bb:78:dc:ed:58:af:f2:82:51:
36:e4:9b:1a:8c:2c:ee:73:7d:d5:58:e7:f1:59:e9:
58:8e:1a:e1:4f:d2:b8:86:39:be:db:eb:91:5b:56:
56:5f:c8:a3:18:d1:41:08:f2:7c:25:1b:26:0a:c8:
b5:ed:0f:b9:2b:80:0a:d9:8c:12:2c:9d:71:5b:a1:
ac:0c:1c:02:a5:4a:ab:92:9f:17:5e:e4:73:95:8f:
aa:0d:58:fb:a2:db:61:c0:53:bf:fe:c1:39:08:56:
4f:c4:f5:08:4c:10:4a:bf:63:5d:2a:52:19:bb:40:
a8:2f:e0:06:06:e1:ee:1b:46:e0:85:34:95:4b:cd:
7b:e7:3a:26:89:02:df:ee:96:b8:c1:dd:8a:21:b2:
2e:2b:c7:9c:ce:2e:8d:93:08:98:89:8f:e6:c1:49:
75:8c:cb:24:05:1a:93:83:d0:42:bf:75:e5:1a:d8:
9c:25:b0:08:f9:a4:6e:a9:02:54:8f:ed:a7:ea:33:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:40:71:8C:15:53:5C:13:3E:62:8F:51:56:44:F9:C2:2F:55:69
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:458::/32
Signature Algorithm: sha256WithRSAEncryption
5f:61:56:c9:79:6b:05:0a:93:ec:14:a8:4e:91:9a:c4:b4:27:
76:c7:3d:1c:54:11:7e:3b:2a:d9:18:70:8d:02:18:ec:24:9d:
60:5d:2e:f7:dc:65:04:3e:e4:23:08:70:1e:9e:b2:da:12:1c:
8c:2b:8f:b6:72:da:0a:e0:9e:3a:3b:b3:da:83:7f:17:28:40:
45:07:e2:10:a4:c2:0d:9c:59:a5:68:89:91:6c:1e:0d:9c:0b:
42:44:99:2e:fd:cb:93:2c:76:a7:8a:af:22:57:6d:39:75:6c:
11:77:21:de:41:8f:fa:56:93:ac:ba:d1:b2:73:18:13:7f:0d:
6b:73:eb:72:c7:4a:ca:1a:86:7e:2b:28:0d:4c:e7:98:ee:95:
f2:a1:eb:95:84:5f:20:00:da:69:d0:f4:67:d4:4c:8b:88:f0:
76:45:eb:e6:ed:d1:dc:42:de:e6:1c:65:60:c5:da:f3:fa:1a:
e3:de:a7:d5:d0:ad:e7:48:9b:b9:18:ce:91:9b:ea:44:9a:74:
9e:0f:14:33:fa:55:fb:1d:42:30:11:6e:8b:12:f0:00:75:53:
0f:3c:ef:7f:6c:ce:b7:a6:3d:9a:2e:2a:34:4f:ae:7e:f6:e9:
ff:df:71:99:a8:e0:ff:38:6c:a5:be:41:17:aa:a8:8b:c3:a2:
f1:16:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:16 2025 by rpki-client