Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/t2c35tmleGdhqgD8qTpaULWpgWE.roa
File: t2c35tmleGdhqgD8qTpaULWpgWE.roa (raw, json)
Hash identifier: 7ZHJRQNSKx7UJXKcS05fSX5RQ3fmt7+stYkFABn0Tvg=
Subject key identifier: B7:67:37:E6:D9:A5:78:67:61:AA:00:FC:A9:3A:5A:50:B5:A9:81:61
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746299D2013D53F62EDABC6ECA6C616
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/t2c35tmleGdhqgD8qTpaULWpgWE.roa
Signing time: Thu 02 Jan 2025 13:48:17 +0000
ROA not before: Thu 02 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a05:1084::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:29:9d:20:13:d5:3f:62:ed:ab:c6:ec:a6:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b76737e6d9a5786761aa00fca93a5a50b5a98161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:d1:96:4e:62:2f:44:30:09:11:08:a3:f6:
d4:0f:3e:7e:64:a1:a1:cb:ea:ef:ee:03:46:ca:00:
29:79:40:49:1f:c4:5d:8b:c4:fa:eb:b5:dc:f1:9f:
51:c3:e6:07:1c:06:07:4d:07:14:c1:0e:d9:5f:b5:
ac:af:cf:a8:75:11:fd:7f:35:b5:71:57:b3:50:d7:
d2:98:c9:38:d6:a9:eb:9d:21:85:7e:b0:79:18:9b:
b7:86:12:5a:31:ee:44:a3:e5:e0:e1:3d:b4:1e:82:
70:44:91:10:a8:a5:66:74:97:44:0b:5a:3b:95:90:
76:2a:47:cc:bd:ec:24:08:e0:bb:11:52:9e:62:3a:
1c:53:75:b7:2b:d1:bd:2e:4f:ca:d4:92:35:aa:89:
31:f9:5f:57:56:5e:75:c9:78:2b:4b:79:04:17:3f:
37:16:5d:fb:75:63:12:3d:22:11:36:4e:0e:46:99:
64:6b:82:4e:c5:73:e3:bb:8d:69:7e:71:d9:c5:cb:
42:a7:88:fe:b4:99:1b:5e:4e:aa:6f:3c:ad:2b:2a:
a4:77:0d:41:aa:12:ec:97:b0:c4:2f:67:07:87:bc:
54:e3:77:41:dc:59:6c:7e:8d:66:d1:62:b3:c2:a7:
ee:a8:2f:d6:16:7f:0c:a1:a2:e7:71:a2:29:57:99:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:37:E6:D9:A5:78:67:61:AA:00:FC:A9:3A:5A:50:B5:A9:81:61
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/t2c35tmleGdhqgD8qTpaULWpgWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1084::/32
Signature Algorithm: sha256WithRSAEncryption
b0:b1:c1:81:e2:04:f3:e3:f1:9a:34:e9:7a:ca:dc:7d:a4:f0:
d5:fb:64:25:6e:7a:5d:0c:f1:f3:c4:4e:60:32:8b:95:5e:d0:
5e:c5:3b:cd:96:54:db:dc:b4:f7:c4:a9:ea:e7:66:07:ce:ff:
64:89:25:2b:2d:a2:04:df:28:56:aa:25:df:0c:43:5c:f4:bf:
b1:82:d7:50:ff:39:04:df:d2:2f:e7:db:c6:9c:20:18:e0:6c:
96:ab:9b:3b:5b:d0:cb:22:a3:9a:31:76:3e:c4:68:13:7a:9f:
6b:9b:9e:23:cd:3a:7e:44:5f:6a:59:70:3c:5b:27:1d:d7:5e:
b8:40:37:0a:82:0c:83:f8:42:d5:56:fe:66:32:ec:c4:cb:09:
96:65:6b:9c:34:14:c8:ce:6a:7e:d9:9f:a8:c7:59:7f:3d:34:
8a:67:aa:1e:58:2a:20:25:8f:e8:3b:78:93:61:33:a4:11:37:
cf:65:d4:ec:8c:4b:5e:3d:29:fb:57:81:31:e6:78:2c:52:09:
75:00:3b:91:d8:51:95:69:73:e9:74:69:d9:49:82:a7:85:64:
37:c8:4d:67:6b:13:db:d1:d6:91:50:34:fe:92:03:3f:f0:f9:
c6:2b:66:d8:75:af:24:7c:c1:0b:a1:26:ed:1d:47:20:9d:8e:
d9:6e:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:59 2025 by rpki-client