Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa
File: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (raw, json)
Hash identifier: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=
Subject key identifier: B5:6F:58:71:76:79:DD:1A:F5:7B:5A:04:3A:6A:82:B7:90:11:F5:27
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01943ED5AF766E8CCE2142C8E6E293CE7DAC
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa
Signing time: Tue 07 Jan 2025 03:36:18 +0000
ROA not before: Tue 07 Jan 2025 03:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215523
IP address blocks: 2a10:3b00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3e:d5:af:76:6e:8c:ce:21:42:c8:e6:e2:93:ce:7d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 7 03:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56f58717679dd1af57b5a043a6a82b79011f527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:43:88:fd:43:98:ed:dd:7f:9d:19:17:20:
11:a1:36:dd:51:dc:7d:c7:c7:8e:dd:8d:17:54:8e:
f9:ab:28:1c:16:ca:86:48:17:95:bf:f8:96:5b:0c:
f5:42:24:ad:2e:f2:0d:41:9f:58:f2:42:e4:f8:6a:
c5:f3:91:df:33:50:4a:4d:99:9f:1f:fe:45:69:9c:
f8:7a:61:9c:da:98:e9:c5:2e:8b:47:77:d8:eb:92:
db:6c:d3:1c:6c:f3:f7:3d:0b:f5:c9:0c:df:f8:41:
51:25:97:70:b3:aa:10:2a:9f:ef:11:49:f7:34:28:
36:f6:65:7c:28:05:51:56:67:72:e8:0f:b5:c9:e6:
1e:d3:cc:7c:65:46:0f:d5:b3:7a:62:82:a2:65:be:
0d:f6:90:2d:8c:f9:55:3e:37:0e:9b:5f:32:7c:33:
a3:fc:d2:22:59:cc:18:ee:83:9a:fd:af:cb:e8:9e:
2d:df:64:c7:96:6e:42:4a:13:45:cb:72:c4:eb:b4:
0c:e6:1f:04:42:41:89:c2:a5:a8:30:8b:d1:f9:02:
7e:40:01:95:d2:2c:d0:dd:33:b2:d6:38:ba:61:5a:
d2:39:e4:9b:10:8c:45:0b:01:2e:76:c1:73:c4:f5:
ab:48:37:66:87:9d:ad:01:8a:27:45:86:ee:98:b6:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:58:71:76:79:DD:1A:F5:7B:5A:04:3A:6A:82:B7:90:11:F5:27
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
0e:69:bb:48:7f:a1:9f:8d:fa:6b:ce:56:92:35:5f:8c:ff:61:
9f:f9:14:5a:84:23:06:12:d4:b2:3b:8d:60:64:8d:be:9c:bf:
76:46:03:41:14:0c:e2:d8:84:91:23:ab:78:e7:51:a2:77:27:
b7:e3:99:8b:41:6c:7c:9e:46:74:45:0a:56:36:82:6a:65:34:
09:67:f5:bd:bf:30:a0:58:75:04:b4:c2:96:f0:2e:74:a9:c6:
5f:4b:e9:37:7a:f9:5e:cc:22:5f:62:1a:84:7f:e0:44:3d:ee:
36:61:e9:41:5f:cd:40:b8:5e:45:a9:b1:5a:07:e0:9f:80:72:
d8:6c:fe:46:5f:bb:78:27:40:79:98:d8:20:38:4d:b9:d5:5e:
17:5e:1d:d8:ba:7e:43:ee:b4:4e:c0:a3:8e:70:5e:38:e8:e9:
96:c5:e2:e2:48:3c:fa:ff:67:43:66:dd:2e:bf:90:cb:c3:6e:
82:de:5e:8f:5f:b5:7f:bc:0f:ba:19:d2:43:9a:f5:06:36:b6:
8a:eb:ea:55:7b:cf:05:0b:0d:f4:13:0b:e1:12:fb:61:ea:15:
bf:d9:1e:0f:a2:d1:ac:86:88:81:64:0a:4f:99:a2:22:53:8c:
dc:64:02:93:f2:88:87:ba:87:d5:1f:3d:c6:75:e2:2e:4a:42:
c1:e3:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:53 2025 by rpki-client