Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/N29uWAkoAdXAAOH1kno65c9HmAo.roa
File: N29uWAkoAdXAAOH1kno65c9HmAo.roa (raw, json)
Hash identifier: q/H3rbamAcXKfem46YceBm5mpGrNAZRd58WTjvrxItM=
Subject key identifier: 37:6F:6E:58:09:28:01:D5:C0:00:E1:F5:92:7A:3A:E5:CF:47:98:0A
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B246A85FABFF78B509591FEA49EBA1
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/N29uWAkoAdXAAOH1kno65c9HmAo.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215649
IP address blocks: 2a07:2483::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:a8:5f:ab:ff:78:b5:09:59:1f:ea:49:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376f6e58092801d5c000e1f5927a3ae5cf47980a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:ee:d8:64:13:f7:14:e3:45:d6:01:c2:fd:
0a:7f:4d:d4:9d:b7:a1:df:d2:a2:87:e6:ad:4a:4a:
6d:6f:0a:ca:ac:df:56:ea:6a:7f:ac:15:e2:0e:b7:
1d:a0:93:2a:c9:c7:c1:a8:14:77:eb:82:62:fe:bc:
07:d9:8e:8f:eb:44:df:fa:3f:79:a8:34:2d:58:7c:
ea:91:bc:1c:4f:2f:dd:04:57:be:61:26:c6:41:06:
de:b7:42:60:44:c1:4c:04:c3:c7:06:1d:24:11:67:
d7:ac:85:1d:26:d2:0c:0f:2b:29:2b:b4:ff:8e:3b:
50:eb:6d:96:a0:78:fd:3b:0a:b6:f9:bd:f5:88:59:
d3:e6:64:77:f7:3c:f8:1b:f6:0d:eb:dd:62:0d:25:
41:23:cb:d8:93:68:06:f9:92:54:6a:44:f3:99:df:
e9:c1:34:37:7f:c0:be:74:89:aa:ce:dd:49:2f:aa:
0b:5d:81:7c:86:10:ba:79:fb:23:75:a2:d9:86:94:
95:0c:c7:3e:68:99:5e:45:a2:05:1a:f5:7f:2f:d4:
6a:e9:38:f9:c1:8f:60:e2:8a:fb:a2:9d:0b:14:5d:
fb:15:46:d7:ba:d5:50:6a:6a:67:b1:48:9c:7a:55:
37:c0:f2:e0:62:28:ef:00:eb:d8:21:28:19:23:a7:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:6E:58:09:28:01:D5:C0:00:E1:F5:92:7A:3A:E5:CF:47:98:0A
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/N29uWAkoAdXAAOH1kno65c9HmAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2483::/32
Signature Algorithm: sha256WithRSAEncryption
93:49:7d:61:62:65:9e:ce:26:4e:a6:0c:8d:9d:2f:d3:47:f2:
08:d6:aa:84:00:e8:7f:1d:58:90:52:e2:1d:d6:07:20:e2:d4:
b5:b2:8d:5f:4b:ef:ae:0e:0f:55:23:bc:06:0d:a9:1f:e4:b4:
69:0b:24:2f:ef:3d:f1:a2:d5:d4:4f:6b:54:3a:4a:77:26:80:
bf:ef:13:04:a4:21:7a:62:05:5e:1f:ed:76:a8:00:85:67:a2:
d8:4a:21:40:0e:04:7a:5b:f4:ec:f9:29:a6:81:7c:5d:7f:84:
31:c9:e3:92:13:39:1a:76:d1:07:1b:e4:5a:5b:b4:c8:b8:9f:
6d:45:11:5d:2e:f5:ba:06:33:52:18:ea:b5:d4:2c:fa:ad:58:
7e:47:06:ff:f1:35:29:f7:e6:80:20:f2:1d:5c:52:57:3e:55:
f6:23:9d:91:ea:5b:c5:f3:5e:95:ef:ee:82:f3:09:45:e7:81:
02:3f:96:2f:8c:47:40:d2:bf:bc:0a:c0:e3:d9:2b:16:af:56:
83:0b:f4:9e:95:3a:43:c7:f5:a6:6d:fd:97:83:bb:dc:43:c7:
56:a7:7b:72:a2:f9:21:61:ff:61:2a:d0:03:99:bb:40:2e:bd:
36:98:7a:d1:68:f5:a9:c3:90:54:22:cb:ea:4e:23:df:85:0b:
b0:e1:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:18 2025 by rpki-client