Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/baMjsDY94eZSoK-AIzqEOHNRACk.roa
File: baMjsDY94eZSoK-AIzqEOHNRACk.roa (raw, json)
Hash identifier: SLAiqx14sHLSHfAF2Lauw4go5jjzGTP4a1xj8l/WroY=
Subject key identifier: 6D:A3:23:B0:36:3D:E1:E6:52:A0:AF:80:23:3A:84:38:73:51:00:29
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 01941FFAAC2FE6D0D7B073B817995BAA076E
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/baMjsDY94eZSoK-AIzqEOHNRACk.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397651
IP address blocks: 2a01:e300::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ac:2f:e6:d0:d7:b0:73:b8:17:99:5b:aa:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6da323b0363de1e652a0af80233a843873510029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:79:d5:b6:d6:53:0b:8c:62:a9:72:40:3d:
af:a7:98:b9:0c:20:13:b9:e1:3c:8a:21:df:c0:64:
82:07:69:1f:ba:fb:b1:1e:60:28:5b:a8:bc:38:43:
06:d4:da:83:bf:34:04:85:05:b2:c1:e1:fc:2f:e0:
1c:ad:69:25:06:a8:36:6d:b5:47:fb:9e:98:b8:3a:
cc:3c:41:9a:73:29:34:78:ae:98:31:f3:b7:d6:0d:
86:49:bf:55:0d:0a:03:a4:e4:53:7d:82:0c:c8:d6:
08:1c:06:e6:01:7e:df:05:d2:4d:c3:3a:94:a4:61:
a2:7b:01:f4:c5:cd:1d:d7:9a:a7:11:f4:9c:7a:19:
31:97:fd:0a:e6:b2:11:c7:3d:ba:86:90:f5:26:9a:
6f:ec:93:99:68:55:a2:7d:9e:fc:74:da:ce:c6:33:
24:1b:34:8d:dc:64:eb:86:e4:ad:77:0e:f6:d5:96:
9d:70:a5:0e:48:a1:54:55:c4:48:b5:f3:a7:69:fe:
bb:71:11:25:b1:e2:93:0b:d8:ab:21:ef:4d:b4:25:
e1:2e:c5:e4:9e:be:6c:8e:ac:bc:1c:03:e8:30:fb:
de:49:65:06:21:f8:56:e4:9d:3a:62:12:d4:c6:2e:
91:50:fa:bf:9f:f5:e2:d3:31:10:51:e6:9a:6d:98:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A3:23:B0:36:3D:E1:E6:52:A0:AF:80:23:3A:84:38:73:51:00:29
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/baMjsDY94eZSoK-AIzqEOHNRACk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e300::/29
Signature Algorithm: sha256WithRSAEncryption
93:0e:6d:38:7a:82:e3:59:82:4a:f6:93:23:84:1c:d3:c1:38:
93:be:b7:22:34:d2:7c:76:50:72:ab:0f:fd:99:09:35:b3:59:
f8:72:5c:39:20:84:c4:c5:a5:a8:a8:e2:ca:06:e4:ec:68:2c:
74:e7:a8:2b:22:f7:8d:76:6b:1a:a6:fa:91:39:e1:02:dd:35:
60:9a:2b:2a:98:55:b7:c9:35:6c:af:4c:a9:e8:77:16:26:4f:
9f:25:a7:1e:80:d4:ce:1d:ee:85:b3:cb:81:13:8e:2f:b3:7f:
0a:ae:60:7a:6b:6a:a5:df:02:89:70:73:e4:e1:f5:b8:51:db:
e2:29:60:6e:59:78:86:01:c1:33:77:99:ba:2c:3a:5b:dd:48:
6f:7b:41:64:ab:87:e9:a5:7c:bd:d7:db:2f:d6:a5:e6:ef:72:
e8:77:cc:fd:4b:f9:3c:83:b9:09:d4:2d:97:8b:75:c0:0d:bc:
3e:61:f8:d6:10:45:d5:97:43:86:aa:4c:45:8f:60:d1:e7:47:
1d:11:da:13:47:59:a6:08:d6:5e:ef:4d:89:59:d7:7d:99:fb:
3a:af:7b:d2:43:d6:81:59:ce:af:d4:4b:bf:90:8a:16:12:7a:
ce:54:92:5e:61:54:4b:fd:7c:0a:b1:6d:82:ad:89:f1:7f:b6:
07:96:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:11 2025 by rpki-client