Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/vR7HJcWWi4ii5tOLsCcpWf4kjKo.roa
File: vR7HJcWWi4ii5tOLsCcpWf4kjKo.roa (raw, json)
Hash identifier: sY7kVQaef2SN2jCaKOJAzPepz1c/Zjg8Oq2Z/KDK4Gc=
Subject key identifier: BD:1E:C7:25:C5:96:8B:88:A2:E6:D3:8B:B0:27:29:59:FE:24:8C:AA
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018E8A6E40F73B3067C6550D43BCF88E7E83
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/vR7HJcWWi4ii5tOLsCcpWf4kjKo.roa
Signing time: Fri 29 Mar 2024 13:37:45 +0000
ROA not before: Fri 29 Mar 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206766
IP address blocks: 2a0e:7040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:6e:40:f7:3b:30:67:c6:55:0d:43:bc:f8:8e:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Mar 29 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1ec725c5968b88a2e6d38bb0272959fe248caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:58:a5:a0:ae:d1:9a:ac:0b:0e:15:c9:14:
8f:05:95:47:c9:bd:8b:5b:f7:2e:d7:e1:15:c0:ab:
8c:15:f0:a4:e5:49:ea:1a:8a:1d:83:f3:c2:86:75:
b8:73:40:81:2b:fd:e7:14:9c:9e:42:3d:63:0e:7f:
80:dc:77:6e:39:ec:8c:f5:25:d6:2e:ca:85:37:dd:
42:9a:ce:41:cc:9a:0d:fa:91:ba:eb:a3:e2:ef:e9:
79:d7:ff:7d:83:54:a7:dc:bd:67:81:dc:1d:04:7a:
70:12:b8:2b:2d:22:3c:69:1f:1f:4e:bc:b5:ca:91:
06:96:e0:46:8c:5d:b4:0c:9c:7d:39:00:36:f5:b2:
fd:48:03:d2:e7:86:ff:9f:09:0e:d4:44:d5:f3:ad:
38:2f:05:98:73:11:f2:05:e8:40:a5:d7:ef:d3:3a:
7f:0f:b4:d4:d6:bb:0b:82:05:d9:a5:b8:5f:3a:d6:
7c:15:a2:b2:70:a4:1e:a2:ee:b5:f5:85:72:b5:40:
7f:42:fe:4d:00:ee:ca:59:c2:91:6a:11:bf:a6:45:
c1:c8:81:62:e7:29:f6:b2:66:b7:10:0e:a7:b2:f0:
d3:b9:2f:c8:2c:f8:76:96:42:ec:c9:8e:c3:2b:90:
ae:b7:04:64:54:d8:47:17:94:4b:85:b5:42:a7:58:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:C7:25:C5:96:8B:88:A2:E6:D3:8B:B0:27:29:59:FE:24:8C:AA
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/vR7HJcWWi4ii5tOLsCcpWf4kjKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7040::/29
Signature Algorithm: sha256WithRSAEncryption
7d:bf:2d:5d:d8:39:e8:13:c9:20:ea:ac:d6:5f:20:87:1e:e4:
13:4c:79:ea:24:ce:d6:88:f4:c1:24:2e:bf:79:9f:ae:a4:db:
f9:bd:87:d0:72:15:98:f0:c8:41:5d:9c:24:29:2a:f0:fc:f3:
83:76:9d:e3:e9:b7:15:05:31:d2:13:ba:6d:f6:04:12:11:c1:
08:5c:a2:2f:13:f4:bf:0f:75:f4:6f:e3:4f:f2:9d:aa:40:c3:
34:71:a2:8d:55:8a:7a:33:8b:bc:c1:d1:25:f6:20:1f:8e:62:
1f:96:c3:f1:a9:a1:1e:6c:28:ea:99:42:dd:66:0a:a9:11:25:
79:16:a3:24:06:5b:e8:63:16:b0:19:e1:a7:52:ba:05:cf:19:
92:7b:9e:3d:7f:b2:ac:61:11:0e:d2:7a:fe:86:cd:cd:cb:ed:
dd:0d:83:40:47:02:9d:98:ec:f1:a5:2e:fd:4e:3e:1c:86:ef:
d7:63:29:6b:52:91:64:dd:22:74:24:6a:e0:30:c8:bf:e7:a4:
c3:1e:e4:cf:cc:e4:67:24:12:7d:a5:55:05:b6:2e:ec:45:f2:
16:00:2a:45:4e:16:0d:4f:e7:02:49:e3:7a:7e:52:34:75:f5:
c9:60:55:49:d4:14:7c:fa:85:9e:a5:67:e7:74:f5:f6:6d:2c:
b9:38:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:37 2025 by rpki-client