Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/B38rRSPWErqXfPx0DzWgKIR_ZF4.roa
File: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (raw, json)
Hash identifier: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=
Subject key identifier: 07:7F:2B:45:23:D6:12:BA:97:7C:FC:74:0F:35:A0:28:84:7F:64:5E
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 01941FFA1332996CE85154E675A90906697E
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/B38rRSPWErqXfPx0DzWgKIR_ZF4.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a05:53c0::/29 maxlen: 29
2a05:53c0::/32 maxlen: 32
2a05:53c1::/32 maxlen: 32
2a05:53c2::/32 maxlen: 32
2a05:53c3::/32 maxlen: 32
2a05:53c4::/32 maxlen: 32
2a05:53c5::/32 maxlen: 32
2a05:53c6::/32 maxlen: 32
2a05:53c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:13:32:99:6c:e8:51:54:e6:75:a9:09:06:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077f2b4523d612ba977cfc740f35a028847f645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:74:c5:29:12:7a:df:5e:83:d7:03:a6:94:
00:7c:1b:3a:cf:e5:ff:a9:20:0b:24:84:46:45:91:
01:97:a5:e7:bd:70:6c:0a:42:1e:23:f0:b0:9f:c9:
fc:6d:9e:de:f8:ce:58:0f:9b:84:5f:9a:ae:2c:65:
dd:37:14:d8:b5:4e:18:78:fd:d8:b4:4d:00:17:85:
67:96:5e:1b:e0:a5:15:e4:de:92:2a:82:88:bc:46:
5f:94:1f:09:a5:73:e8:eb:84:99:78:09:fc:96:de:
07:c3:da:89:99:aa:2b:f0:1c:13:1a:98:a4:fa:91:
0b:77:40:14:da:1d:9a:32:24:bd:bb:35:95:24:eb:
c2:84:d4:d3:d7:4e:f3:01:0c:17:35:c3:cf:03:9b:
aa:f7:ff:e9:8d:2c:ef:04:a5:37:18:42:f9:f2:7c:
6d:31:89:3e:17:26:c1:c4:8b:9c:92:4a:74:8e:a4:
24:f8:e7:df:a8:e1:dd:c2:f6:2f:c4:c0:ac:52:fd:
e5:58:8f:a0:3b:bf:18:15:4e:b5:ad:29:a2:b6:d2:
83:4a:0e:a7:55:fd:fc:a3:b6:51:fb:3a:b1:6f:5a:
ce:2c:90:2b:3d:b9:55:d9:08:24:04:cd:b7:61:d4:
72:1b:0b:9e:9d:cc:0a:25:12:21:9e:69:4c:ef:09:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:2B:45:23:D6:12:BA:97:7C:FC:74:0F:35:A0:28:84:7F:64:5E
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/B38rRSPWErqXfPx0DzWgKIR_ZF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:38:6e:12:0b:3c:2d:ff:1d:05:b4:92:e0:b2:89:9b:4c:50:
9c:f4:02:1c:ee:ce:d3:99:2d:2f:b5:52:1c:1b:de:d1:02:91:
0d:44:32:56:00:49:59:75:2b:24:bf:ff:26:da:20:fc:e9:50:
ac:c6:14:9a:c7:b1:f4:b8:7e:2d:a6:2e:9a:3b:37:1c:75:e0:
03:bb:30:3d:9b:eb:3c:a3:60:d0:bb:17:cc:fe:53:8b:85:27:
e9:4f:74:1f:a8:73:c0:78:b5:17:d9:b5:d6:9f:91:81:e1:f2:
67:f1:0c:91:ee:9d:c1:5e:83:b1:39:26:ff:ac:00:9b:11:6a:
68:43:e3:2d:78:d5:28:3c:62:f1:80:fb:c2:1e:a3:90:74:72:
66:18:12:a9:e0:4d:ff:2a:53:1e:05:59:d4:41:8d:19:4d:fd:
2a:83:d7:91:1a:73:2d:57:a7:11:ea:81:24:f4:a0:52:52:1a:
b1:e2:23:fc:0d:9c:02:f7:10:89:64:8d:0e:18:61:06:c3:03:
6e:be:d2:18:58:17:63:76:df:a2:00:1b:f8:e6:c7:3c:6a:a6:
22:aa:28:7d:c6:10:4b:a3:39:bd:e9:9c:9b:2f:d4:62:e7:fd:
d7:51:83:9f:8b:b2:77:d2:59:dd:7f:96:fb:60:f5:e7:e8:d9:
e6:b9:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:53:51 2025 by rpki-client