Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Jetu27IagSkUau5O5mXR3DgCYFA.roa
File: Jetu27IagSkUau5O5mXR3DgCYFA.roa (raw, json)
Hash identifier: w4JfSLP8Me/GFh1OD2LX4KeaIoHjd8xy7PEY6oQngQc=
Subject key identifier: 25:EB:6E:DB:B2:1A:81:29:14:6A:EE:4E:E6:65:D1:DC:38:02:60:50
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0185720C8385CFE1D1B6F5D6BAF2AA5A1690
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Jetu27IagSkUau5O5mXR3DgCYFA.roa
Signing time: Mon 02 Jan 2023 10:35:00 +0000
ROA not before: Mon 02 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57621
IP address blocks: 2a05:100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:83:85:cf:e1:d1:b6:f5:d6:ba:f2:aa:5a:16:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Jan 2 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25eb6edbb21a8129146aee4ee665d1dc38026050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:42:8d:84:56:96:ce:37:69:25:cb:96:fa:
64:f3:bf:ed:63:14:ce:a8:ac:f4:33:60:97:7c:b4:
06:49:34:e1:f2:e3:be:f3:19:38:0a:45:10:82:b1:
42:07:d6:93:6b:08:15:b6:61:5f:3a:0d:b1:0a:dd:
74:3d:b9:5f:23:11:b1:21:d4:43:82:6e:ee:b2:b0:
9b:70:89:5d:f2:da:49:8d:ad:c5:c8:d7:27:da:08:
82:c4:b6:61:8f:9b:21:e3:b2:67:54:33:17:a8:a0:
26:74:1a:43:bb:07:62:b4:e3:0a:1b:7f:d2:cc:10:
2d:f2:c8:96:97:09:69:34:cb:76:00:3b:5b:94:37:
d9:37:75:a3:43:52:2c:26:33:d7:e7:4b:90:5d:13:
73:d0:d3:ce:4e:b2:41:65:b2:10:dc:57:c6:db:bc:
c9:89:82:71:2d:f4:e3:4c:01:65:45:40:1b:9a:2c:
b0:d8:a9:c1:fd:4f:3e:8b:b1:d7:7a:aa:f1:ea:1d:
28:a6:ee:39:90:3f:11:51:88:73:b3:1b:93:42:02:
98:ea:d7:3d:8d:a6:44:22:12:72:ed:79:02:a0:71:
91:5f:a5:f1:13:ed:42:eb:0e:d4:65:36:df:d0:ce:
10:3d:cf:85:14:72:78:9e:2e:d3:15:dc:a4:b2:77:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:6E:DB:B2:1A:81:29:14:6A:EE:4E:E6:65:D1:DC:38:02:60:50
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/Jetu27IagSkUau5O5mXR3DgCYFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:100::/29
Signature Algorithm: sha256WithRSAEncryption
b5:a3:66:cc:a9:0a:78:2d:87:66:40:fb:8e:9a:45:58:4c:90:
e5:ad:80:50:e1:70:11:ad:9b:e9:ea:5a:7c:26:84:06:f1:8c:
c6:e7:bc:e2:c7:8b:53:d5:d2:f7:d0:49:af:e2:88:62:6f:a7:
e3:51:a1:42:4a:d5:61:73:f1:eb:71:e1:9f:38:f5:dc:24:55:
e0:c2:0c:1e:e5:67:86:b1:3b:e5:9c:fb:d3:68:da:16:0c:19:
3a:31:4b:f4:5e:f7:31:75:59:66:e7:4a:c5:a5:33:1a:8f:dd:
e6:08:38:f1:f6:77:b2:fc:ca:3f:45:2e:e6:40:6c:eb:d2:8e:
dd:50:72:8c:41:ea:62:89:f2:6b:ed:70:bc:f9:84:87:74:28:
32:89:9f:04:20:0d:76:5c:aa:af:05:a8:c4:1e:77:f2:dc:91:
c2:bb:b5:90:88:23:29:aa:a3:98:99:86:be:16:fd:fa:57:97:
3f:5a:1b:d2:f7:2b:d3:70:7f:9d:8d:81:79:39:9b:8c:55:98:
7d:99:5c:b2:1b:46:88:91:73:08:0c:2e:69:f7:b1:4f:9f:0c:
19:34:32:1b:71:f2:63:1f:cb:84:d6:48:7b:0c:d5:6f:de:1a:
16:4b:5f:64:c3:c4:97:ba:b6:34:59:59:06:f0:33:46:d1:5f:
59:bb:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:34 2025 by rpki-client