Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/boagvGGXwtyavqY9YINUftTpDCQ.roa
File: boagvGGXwtyavqY9YINUftTpDCQ.roa (raw, json)
Hash identifier: HDkwM7MWgvQB84M4s2SSZgu/WlqP6i+O4MHLkfp4H3U=
Subject key identifier: 6E:86:A0:BC:61:97:C2:DC:9A:BE:A6:3D:60:83:54:7E:D4:E9:0C:24
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 019408734377B1B9FAFE87595AB14701EBB3
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/boagvGGXwtyavqY9YINUftTpDCQ.roa
Signing time: Fri 27 Dec 2024 14:09:19 +0000
ROA not before: Fri 27 Dec 2024 14:09:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:6800::/29 maxlen: 29
2a09:9300::/29 maxlen: 29
2a09:ba40::/29 maxlen: 29
2a0b:9480::/29 maxlen: 29
2a0c:1240::/29 maxlen: 29
2a0d:48c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:73:43:77:b1:b9:fa:fe:87:59:5a:b1:47:01:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Dec 27 14:09:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e86a0bc6197c2dc9abea63d6083547ed4e90c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:ae:d1:0d:45:3a:f9:56:e9:14:18:60:cd:
a4:65:97:0f:69:92:ab:b5:ee:f2:3b:e5:11:e9:64:
e0:c7:1d:89:ea:5b:a8:4e:7a:92:60:de:80:ed:30:
59:e7:1e:27:a4:47:c8:be:6f:8a:e3:3d:10:d8:fd:
1b:b4:79:44:6a:75:ab:62:d2:18:78:2e:d8:5c:4e:
48:a5:54:1c:28:ea:de:0c:a9:44:33:34:97:e9:9f:
cc:a9:f9:c3:84:c0:67:56:94:15:18:b0:7b:a9:9e:
28:b3:e7:a3:89:cc:e8:18:3c:87:ba:31:19:2a:66:
ac:fd:5b:44:85:34:61:67:49:41:54:d5:b6:89:38:
bb:ce:6b:46:ae:20:f0:61:df:ab:71:d8:26:f5:f6:
ef:11:5b:cf:72:2e:70:76:8a:51:a6:77:9d:e3:39:
70:5c:14:f5:1c:8e:50:f8:20:44:44:cc:f1:57:ad:
a9:8c:09:26:13:a3:8e:39:44:c9:95:a7:f9:7d:62:
24:39:00:86:d4:e1:6d:a9:b2:ed:8f:92:53:cd:90:
9e:32:9f:da:9b:41:82:b9:9a:c7:21:1c:35:d7:4f:
2b:26:0a:fa:65:ef:aa:4e:ba:aa:f7:c2:b1:3d:fe:
a8:a8:89:99:d6:2d:fb:f1:c8:f4:c1:51:01:ab:a8:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:A0:BC:61:97:C2:DC:9A:BE:A6:3D:60:83:54:7E:D4:E9:0C:24
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/boagvGGXwtyavqY9YINUftTpDCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6800::/29
2a09:9300::/29
2a09:ba40::/29
2a0b:9480::/29
2a0c:1240::/29
2a0d:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
d3:8f:1c:0f:4e:21:ea:c1:57:54:0b:d3:4c:f6:87:a4:8b:97:
02:76:2d:72:15:9c:60:2e:f0:c6:e4:f0:38:e2:f8:10:8b:19:
09:f6:49:43:c8:2f:14:9d:fa:0f:ed:58:a5:47:bf:e6:0d:d0:
42:c1:0c:6e:95:25:cc:49:8c:4a:b7:cf:53:8d:9f:e5:0c:89:
d7:09:a8:43:95:98:74:91:20:16:cd:f2:c6:53:7b:4e:2f:0b:
6f:57:00:9e:58:79:5e:90:1b:ed:d7:21:f2:95:f9:6a:a6:c9:
63:7f:e0:30:2c:4f:80:5e:91:96:71:d9:35:b2:61:99:89:6c:
38:c1:dc:90:b6:5e:68:3f:c5:ce:3f:bc:ca:ac:98:dd:7e:e7:
87:e8:8b:23:b7:66:a3:87:0a:17:8a:39:33:9b:0f:32:fa:f0:
bb:b6:85:9c:03:ca:28:ab:0a:d3:cf:91:10:ee:63:64:2a:c5:
d6:78:93:78:89:97:f1:a6:b7:47:b0:be:bb:0f:90:b3:ea:5b:
cb:91:e3:45:f7:f9:24:a0:1d:b5:35:45:8a:02:e6:f2:c4:f1:
8f:00:5e:a6:16:94:56:8a:02:b7:40:4b:72:8c:31:ff:5f:90:
17:ac:3b:97:16:eb:27:9c:03:6d:9e:dd:df:c4:a0:c5:d7:06:
51:1e:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:15:25 2025 by rpki-client