Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa
File: PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa (raw, json)
Hash identifier: I/FNz1fCzuds8tR/gTE3VhldOpz6XGiv0J7vXLKi7Hw=
Subject key identifier: 3C:DD:68:09:49:E1:48:94:B6:80:13:30:A4:72:BE:2A:EC:2C:50:4F
Certificate issuer: /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial: 019425FDBC2A5D92CD2DB739E61C19C717F8
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 2a07:5d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bc:2a:5d:92:cd:2d:b7:39:e6:1c:19:c7:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cdd680949e14894b6801330a472be2aec2c504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:21:d7:97:52:80:43:60:3b:03:11:62:85:
40:23:08:24:ee:27:1c:fc:9b:83:94:24:cd:48:b7:
0a:15:2f:85:66:f0:d3:3d:fb:03:be:47:1e:e7:95:
39:3d:0c:8e:57:8f:2b:84:c3:fe:f4:29:50:60:43:
4d:47:73:72:30:e9:39:87:a7:d3:5a:33:74:70:0e:
04:11:b7:9a:93:5d:2d:bf:b5:ff:8d:69:e1:e5:24:
3f:d3:72:36:b1:08:3f:93:9b:28:7f:a6:28:ee:9e:
a0:ff:80:8a:fd:42:0e:d9:92:2e:3a:d1:4a:a7:d0:
50:d9:37:81:82:28:4b:cc:32:94:ce:af:4e:0e:66:
be:58:9a:75:11:c2:a7:09:51:07:22:ec:54:35:84:
e9:42:cc:06:ad:cb:68:30:74:e7:5c:82:50:a4:aa:
06:ae:0e:5e:bf:f1:1c:5d:ca:80:68:65:59:82:02:
48:7c:74:f4:be:fb:c1:99:f0:17:64:9a:f2:94:61:
1a:4d:70:83:42:5e:9a:b2:36:35:96:6f:45:9e:5e:
36:53:b0:80:24:3c:19:ea:f1:0c:55:76:1a:67:88:
22:e5:3d:87:57:9d:f4:75:cc:6d:48:7f:05:20:a6:
c0:3f:60:47:6f:07:de:14:60:77:e4:d8:51:49:67:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:68:09:49:E1:48:94:B6:80:13:30:A4:72:BE:2A:EC:2C:50:4F
X509v3 Authority Key Identifier:
keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
7b:2a:e6:8c:59:37:60:9f:22:03:22:f3:c1:2c:49:60:d5:ea:
12:e0:b0:f1:0a:3a:1a:02:ee:8f:14:80:4e:e4:ea:ed:27:3c:
0c:c6:cd:d4:94:e4:b6:58:21:34:89:dc:26:27:a5:c1:35:2e:
b0:7b:4b:4b:ec:9c:94:60:b1:1b:98:dc:03:cb:e8:b0:2c:55:
fe:dc:cd:8b:bd:eb:f1:61:3e:07:49:98:67:fb:83:2f:ff:87:
6f:6e:56:f2:4f:2a:92:cd:54:4a:6b:bc:d6:37:74:4d:b3:4c:
01:2c:15:ca:bd:df:9d:1b:21:c9:98:d0:df:0f:26:b6:84:de:
32:a7:be:8b:b6:8c:66:01:67:a6:9a:34:cb:55:13:2f:44:6e:
47:4e:4b:62:df:eb:66:94:cf:fa:7f:8b:ff:9b:8c:09:48:ea:
e5:f0:c5:81:4e:fc:51:2a:2b:85:30:1e:c9:7c:b9:1a:3c:bd:
11:a2:6f:67:fe:27:e0:3a:06:d7:ff:d2:27:53:09:ae:d3:cf:
cb:ef:7f:8d:e6:3a:65:77:81:58:e7:ad:21:71:4c:b1:9b:6e:
dd:6b:9e:4b:f8:a4:c5:b9:67:b6:62:b8:d4:30:3e:db:5f:3a:
33:c4:39:ef:c0:39:fa:1e:fb:1a:87:9a:e1:2a:93:80:0c:7f:
1e:bb:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:38 2025 by rpki-client