Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/i5Cva7AkVQeMjYySCI1cSGulBFU.roa
File: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (raw, json)
Hash identifier: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=
Subject key identifier: 8B:90:AF:6B:B0:24:55:07:8C:8D:8C:92:08:8D:5C:48:6B:A5:04:55
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 019594F9BD9DDAE12912CD8039E292ACA774
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/i5Cva7AkVQeMjYySCI1cSGulBFU.roa
Signing time: Fri 14 Mar 2025 14:05:49 +0000
ROA not before: Fri 14 Mar 2025 14:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213599
IP address blocks: 2a0f:9240:2001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:f9:bd:9d:da:e1:29:12:cd:80:39:e2:92:ac:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Mar 14 14:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b90af6bb02455078c8d8c92088d5c486ba50455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:21:80:05:cf:d5:1c:e2:24:15:a1:b9:f7:
e8:81:d9:96:cd:c1:e0:5c:07:df:45:66:23:40:50:
46:2d:59:bb:65:50:43:9b:92:f1:f9:1f:98:84:2a:
ba:34:21:80:2f:55:bd:03:49:e5:bd:67:c8:2a:5b:
72:22:67:99:d7:79:ed:4a:28:b1:86:1e:7c:66:97:
2f:3d:ea:d7:4f:3c:86:1b:fa:3c:b2:78:ab:ba:5b:
1c:57:e2:7a:76:e6:33:dc:7f:77:96:ed:56:9a:8e:
41:7a:fb:54:88:c6:38:39:f7:79:ba:47:a9:bf:bd:
d1:f3:41:a4:29:e6:4e:17:a9:49:7d:2b:ba:30:0e:
77:f6:db:e5:36:de:84:77:df:3e:b9:e9:fc:5c:ec:
5d:9c:03:af:74:a9:e3:58:72:2a:e6:f6:38:d1:5b:
30:cb:6c:a2:d0:34:06:bd:a1:6e:59:b7:07:e8:ff:
ac:8b:77:49:04:f9:fb:4a:c3:59:f8:14:77:fd:74:
a8:76:80:48:67:70:ea:d6:3e:fb:4d:d7:d9:c7:04:
ec:de:74:d0:7b:ef:ad:49:1f:aa:25:fc:40:da:ad:
50:c8:ff:cd:1b:2f:9d:b7:8e:f2:81:e4:50:f1:1b:
be:d0:b7:cc:b9:d9:26:62:b7:a3:90:bb:e3:66:94:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:AF:6B:B0:24:55:07:8C:8D:8C:92:08:8D:5C:48:6B:A5:04:55
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/i5Cva7AkVQeMjYySCI1cSGulBFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9240:2001::/48
Signature Algorithm: sha256WithRSAEncryption
23:87:c5:5f:b7:0d:9b:48:73:13:5b:9c:31:1f:11:31:ef:a0:
e1:67:40:42:6e:77:23:71:e6:de:1e:6d:1b:3e:61:68:ce:a7:
8e:0c:c9:a8:45:90:ec:11:bf:d2:c5:b4:e0:45:75:10:c2:37:
1e:57:c7:bf:63:2a:c2:0f:3c:ec:11:b0:3a:8b:3d:c6:1c:bf:
5f:b5:41:9c:90:38:31:b5:74:72:06:fd:4b:2a:cb:39:81:a4:
7e:74:fa:14:ad:74:b4:2c:db:1f:fb:72:f1:c8:83:03:e4:40:
49:d9:11:7f:34:8d:39:25:c6:85:3b:59:0f:16:53:6b:c6:ec:
bd:6c:74:60:5e:00:4c:b2:ae:95:27:19:a3:ef:72:33:d9:dc:
4e:d0:ff:d9:c6:60:28:31:4b:1d:07:3b:0b:74:b1:15:91:fb:
77:fb:2b:bb:74:85:7a:2e:41:1f:0c:ec:a6:fa:41:48:58:2e:
b0:41:9d:33:db:a0:5e:59:95:80:83:40:85:eb:f2:a0:7b:44:
37:ff:33:08:72:7b:4b:2b:ac:14:8a:86:2b:60:50:a6:34:26:
83:50:10:64:f8:25:ae:8b:63:ce:46:8e:27:84:56:16:b9:87:
d4:b3:49:1b:c6:b4:e5:9f:b8:4c:66:8b:dd:41:a9:4f:6a:1e:
aa:bd:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:35 2025 by rpki-client