Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa
File: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (raw, json)
Hash identifier: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=
Subject key identifier: 57:91:CB:61:05:FB:38:4A:4B:14:AF:CC:1F:9F:EC:51:84:74:24:14
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7ED0A2ADC066E7CFD263D6D6C9955
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa
Signing time: Wed 01 Jan 2025 21:49:00 +0000
ROA not before: Wed 01 Jan 2025 21:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394414
IP address blocks: 2a06:c3c0:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ed:0a:2a:dc:06:6e:7c:fd:26:3d:6d:6c:99:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5791cb6105fb384a4b14afcc1f9fec5184742414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:ec:db:ab:d1:f8:23:62:ab:27:f4:43:9d:
05:1b:10:66:5c:6b:b8:a2:b5:0f:77:1d:eb:38:74:
a3:1e:09:7d:bc:89:b4:b7:9f:72:d2:59:73:6e:f0:
f5:65:c9:82:64:96:93:4b:f7:6a:e4:cb:ce:a8:4c:
a3:cd:22:82:18:71:c8:a6:cb:66:d6:b0:81:a8:43:
3e:ee:56:4e:ca:a8:94:b0:b6:83:6b:70:79:c4:0b:
fe:6b:a1:32:2f:70:d7:bb:31:fd:fa:91:46:fb:a3:
c1:fd:d5:95:fb:4d:91:7d:4e:58:0e:3c:13:4a:37:
aa:5a:b5:f7:44:dd:76:dc:8c:ba:ec:7c:a3:61:e1:
1d:58:97:dc:04:2d:5a:99:dc:09:80:6f:39:ce:d5:
1b:77:ae:48:32:45:90:09:ba:e4:98:c5:bc:54:7d:
9b:ae:95:76:6e:b9:03:93:84:9f:ef:6d:3c:bc:14:
64:cd:c8:89:6c:d6:2d:95:35:f2:84:c9:c6:40:97:
b2:9f:2e:3f:f9:92:43:ca:5e:4a:bd:83:c4:3e:60:
4e:e4:65:94:77:46:a4:0b:32:b1:1f:46:b8:e9:4b:
6c:80:86:b9:be:47:e1:1b:0f:58:38:21:ec:f1:60:
f7:ee:35:e3:02:56:6d:05:23:aa:0c:57:66:e4:52:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:CB:61:05:FB:38:4A:4B:14:AF:CC:1F:9F:EC:51:84:74:24:14
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
45:c4:f9:75:89:5a:db:e7:45:2a:8c:f3:b3:f7:08:88:34:34:
16:53:e3:d6:02:f0:c3:33:9c:42:7f:43:d7:8e:8d:ed:ea:41:
a7:0b:d8:f7:13:38:9c:e4:61:db:83:13:ff:05:fc:60:d4:b8:
1f:56:3f:c7:99:e8:f9:ef:4c:2c:09:8e:16:fb:54:6c:03:da:
43:53:a7:a6:b0:cc:2a:31:c6:20:d1:bc:60:48:52:b3:9a:13:
97:e4:6f:c3:8e:09:b4:28:6f:33:37:b0:a0:9c:6f:c3:90:28:
87:6f:59:17:74:18:40:0e:c4:31:ee:fc:c0:f7:79:84:c8:de:
ff:99:cd:7c:18:2a:bd:a0:70:f6:50:cf:e1:da:5c:a2:fa:33:
1f:0a:ec:3c:61:c0:99:c7:76:dd:a7:d1:5d:d4:b2:ce:0b:27:
8d:09:ce:23:4d:38:74:b2:10:e7:80:c9:96:f9:00:0b:2f:28:
69:a5:fc:3e:40:66:3a:09:87:93:cb:6a:fc:0c:44:ec:28:4d:
d7:df:ae:ae:2b:5d:7e:3f:57:16:fd:81:ef:4b:4d:2c:28:b5:
23:41:51:ef:c1:7d:3c:28:62:3f:b6:6f:fb:86:10:d4:87:56:
c6:2a:a3:f9:d6:70:66:d3:3a:7c:35:f5:ee:07:0f:52:5c:68:
62:1f:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:19 2025 by rpki-client