Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/R90GYDwaNPunzPXxgAgdG6Da6pQ.roa
File: R90GYDwaNPunzPXxgAgdG6Da6pQ.roa (raw, json)
Hash identifier: DmV2e30IECLb+q7GmTEqph6zjIWOdTFFqh9VqN/UoJs=
Subject key identifier: 47:DD:06:60:3C:1A:34:FB:A7:CC:F5:F1:80:08:1D:1B:A0:DA:EA:94
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274837D094855FEF10477B0C28C6CE3B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/R90GYDwaNPunzPXxgAgdG6Da6pQ.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39639
IP address blocks: 2a01:7680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:37:d0:94:85:5f:ef:10:47:7b:0c:28:c6:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47dd06603c1a34fba7ccf5f180081d1ba0daea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:e2:9e:50:47:1a:44:3e:ca:b9:d4:78:20:
2d:00:0e:25:64:9b:66:3c:4a:91:3d:1c:ce:05:43:
77:e0:10:bf:e4:32:6f:5f:2d:dc:ad:b0:d1:ac:9b:
b1:bd:f7:23:16:be:7d:d9:86:ea:1b:af:0d:a0:ae:
2f:8b:63:3f:56:cb:8c:67:f3:4c:1b:e9:07:78:97:
6c:e8:e2:ec:ec:a6:cf:c1:c9:b5:e7:11:9e:d0:c9:
db:0f:3d:09:ca:e8:f6:34:e8:b2:72:d9:4a:ec:54:
65:e7:30:35:99:cf:d4:f9:00:02:70:eb:ce:6d:b3:
63:2a:72:9e:10:51:90:5a:2a:09:98:ab:ed:01:91:
51:c8:22:97:6f:ef:fc:94:d4:69:5e:7d:47:e7:69:
c5:42:b4:bc:51:0e:ca:36:27:a7:5d:57:f1:01:2a:
d8:d3:a0:8d:a0:30:35:ed:32:4c:17:65:b4:c9:0f:
04:70:28:f6:74:b7:1d:bb:dc:c5:ea:7b:39:bf:77:
12:75:b8:fd:30:84:10:d5:11:19:34:53:c5:c3:b8:
bc:a3:f3:b4:ad:c6:2e:e0:f8:b3:db:fc:43:38:d7:
39:9e:7d:f1:0a:d6:e5:1b:0a:8b:da:2c:4d:ad:bf:
af:18:e7:b3:a0:37:a6:02:7c:fe:e8:47:f6:0a:cc:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:06:60:3C:1A:34:FB:A7:CC:F5:F1:80:08:1D:1B:A0:DA:EA:94
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/R90GYDwaNPunzPXxgAgdG6Da6pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:7680::/32
Signature Algorithm: sha256WithRSAEncryption
3f:38:e5:e6:a5:c5:5d:eb:2a:7a:80:77:82:58:31:25:29:fe:
a4:ba:25:de:b4:e8:11:f9:51:e5:a3:97:f3:ff:73:7e:c0:c8:
d8:ed:19:e3:9b:f1:ec:d4:32:d5:67:b0:ff:76:b2:48:df:e2:
ac:47:23:24:ee:98:af:d3:ab:ff:6f:8c:2d:21:1f:be:ba:f4:
e8:7d:17:e7:e3:62:40:61:a9:95:7d:cd:a9:c3:cc:4b:a9:7f:
97:bc:8b:d7:ad:27:52:52:85:1b:aa:00:6c:e5:b7:10:95:83:
05:20:20:56:e7:85:ce:64:74:a4:a9:90:c0:9e:5e:e1:4d:53:
23:8d:e1:d1:80:33:1c:fc:bc:9f:76:52:e5:3b:56:76:e9:6b:
f0:7b:b4:39:4e:92:1e:48:fd:96:56:d4:d8:02:17:15:9d:39:
9d:bf:7a:20:0f:1d:f1:6e:6e:a9:cb:f8:1d:66:ac:42:0e:ea:
a9:07:dc:7e:89:52:51:dc:a1:e2:05:57:be:8d:d7:33:7a:d0:
4b:b6:5c:d3:2d:50:c1:33:51:69:03:85:70:0e:bc:40:41:ec:
1c:37:73:86:d9:f6:29:05:1b:c9:95:fd:9c:00:fb:a4:da:e3:
d5:7a:6b:9c:8b:ea:d8:da:2f:bd:5f:f0:3e:64:b2:7c:86:44:
22:4f:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:30 2025 by rpki-client