Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iRM3yhwArCNGdHxOj9ATMR0HSDY.roa
File: iRM3yhwArCNGdHxOj9ATMR0HSDY.roa (raw, json)
Hash identifier: EUUcXUwbcO9iYrll3WCncmZTjysxorO7Ctu5GqgiZb8=
Subject key identifier: 89:13:37:CA:1C:00:AC:23:46:74:7C:4E:8F:D0:13:31:1D:07:48:36
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 019408BF419D502A7F21F8F427ECB5FBC159
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iRM3yhwArCNGdHxOj9ATMR0HSDY.roa
Signing time: Fri 27 Dec 2024 15:32:19 +0000
ROA not before: Fri 27 Dec 2024 15:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0d:3045::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:bf:41:9d:50:2a:7f:21:f8:f4:27:ec:b5:fb:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Dec 27 15:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=891337ca1c00ac2346747c4e8fd013311d074836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:63:d7:f9:d4:20:4d:52:9f:d9:0b:24:c5:
d2:99:09:9f:5e:27:80:01:30:bb:98:76:9f:48:97:
39:5a:3f:76:43:33:ec:ce:c4:3f:71:8e:26:91:37:
c9:07:61:1b:03:da:c0:04:cd:a8:af:91:d3:75:62:
41:d1:f0:49:9e:8b:60:48:83:7c:6b:1c:73:1e:7f:
0b:8c:04:90:08:e5:13:20:37:5c:ee:df:38:c7:f9:
bd:4e:f1:f0:3b:9c:fb:fd:2c:c5:fb:fd:2e:84:99:
cc:a0:f8:a7:8b:f8:50:09:e4:bd:37:60:7a:7e:39:
6d:90:08:94:51:e7:a5:40:1d:76:68:42:d7:a1:e6:
98:0a:c8:53:bb:bb:9c:ab:ae:04:a2:23:f7:f6:14:
b5:bf:38:ed:45:48:a3:62:5c:1c:84:22:93:f1:ab:
02:3f:0b:1c:6f:80:5f:41:51:75:02:f8:46:97:70:
80:4d:f2:3d:23:0e:69:78:b1:cb:54:b5:2a:64:30:
d3:d2:4e:c3:ef:43:d6:31:f7:d4:fc:87:62:1a:75:
7a:a8:5d:80:48:38:d6:a9:fb:17:cd:3a:99:e8:df:
31:46:af:94:04:bd:73:f7:f5:41:ab:75:32:71:a9:
2e:0a:3c:23:2a:72:cf:65:82:69:26:89:f0:f7:67:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:37:CA:1C:00:AC:23:46:74:7C:4E:8F:D0:13:31:1D:07:48:36
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iRM3yhwArCNGdHxOj9ATMR0HSDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3045::/32
Signature Algorithm: sha256WithRSAEncryption
07:b3:5d:ab:c9:25:f0:f2:51:f2:6f:51:42:7e:e6:99:ec:d5:
85:65:0c:aa:4a:6a:31:50:d6:bb:40:03:6e:5d:e4:4d:b8:7b:
ab:eb:1e:48:3f:64:b0:c4:d0:87:2c:aa:18:62:88:05:2d:ef:
1d:84:30:20:df:4e:fe:5e:40:c9:37:97:ed:e7:43:db:8c:3e:
e2:73:5b:d9:95:ca:bf:79:12:94:39:ad:33:5d:58:a4:05:7a:
21:79:14:cc:d3:91:f1:26:7a:ec:6f:f0:33:a7:b6:15:96:32:
9b:2a:33:d8:9d:d4:e0:45:cb:c5:e2:fa:21:c4:94:0d:8d:60:
76:66:cd:68:7b:f0:88:ae:f6:17:0a:3a:d9:bd:64:e8:5c:ec:
de:05:f9:a2:e9:70:38:6a:4a:eb:10:90:17:d1:44:2d:67:47:
d1:19:b3:c4:f7:e2:e9:19:58:72:16:87:99:ef:65:9d:f2:bb:
a2:67:20:4e:15:28:ca:d2:8a:91:cc:82:22:4d:2d:50:3e:7d:
1c:4f:b0:4c:eb:bf:98:9a:13:a8:69:df:5d:04:fb:1c:3a:89:
8b:45:85:93:1d:12:7f:f9:26:54:07:6f:3c:79:ee:a7:4b:32:
1e:eb:2a:34:58:1c:82:5d:17:29:55:02:1f:cd:29:b2:bd:8f:
91:40:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:16 2025 by rpki-client