Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/0NDg7PSFqCtlOZYcAWca7yUfVmo.roa
File: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (raw, json)
Hash identifier: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=
Subject key identifier: D0:D0:E0:EC:F4:85:A8:2B:65:39:96:1C:01:67:1A:EF:25:1F:56:6A
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F136820EB48834511AB12BBA69B5A
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/0NDg7PSFqCtlOZYcAWca7yUfVmo.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212128
IP address blocks: 2a0e:5904::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:13:68:20:eb:48:83:45:11:ab:12:bb:a6:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0d0e0ecf485a82b6539961c01671aef251f566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:15:7b:3c:96:e0:91:fd:92:f1:a9:dd:6e:
e5:7b:9f:bb:c2:3a:51:23:18:4a:fc:a4:05:b1:46:
09:81:1a:25:c2:bc:35:f2:96:25:74:54:fa:9c:fe:
aa:cb:3c:c2:13:8d:ff:8d:ca:fd:83:f0:d6:c3:d9:
fc:31:c6:10:79:0e:91:30:9e:5a:6c:06:ff:8d:3b:
21:ce:0c:93:e6:a1:66:93:a6:65:7e:56:99:3d:19:
43:e9:df:f7:75:9b:53:0b:73:60:9e:66:78:4d:20:
d6:28:41:8d:fd:79:05:8e:12:b2:49:ea:dc:9a:10:
5e:ec:81:42:40:f6:39:29:70:ee:bc:5c:e8:fe:50:
d3:4d:a4:e0:e7:56:51:a6:d0:2c:9d:ac:2d:12:e1:
be:30:75:8b:69:0e:85:69:a7:51:01:7c:3b:b7:37:
90:cf:06:38:5c:61:7c:6b:1e:d5:30:b6:0b:14:da:
a2:a8:3a:a2:6e:02:16:ec:57:ab:3f:e9:c9:8f:27:
7e:d3:fc:e4:a4:c4:a1:ac:bd:e7:3a:02:2f:f0:52:
6f:ac:7c:56:3d:dc:2b:c2:e9:80:eb:e6:d8:8d:6f:
f2:20:51:4e:2a:76:2a:86:f1:77:e2:87:c8:e1:69:
f8:93:48:06:40:8e:1f:10:99:19:21:fc:27:c0:b7:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:E0:EC:F4:85:A8:2B:65:39:96:1C:01:67:1A:EF:25:1F:56:6A
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/0NDg7PSFqCtlOZYcAWca7yUfVmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5904::/32
Signature Algorithm: sha256WithRSAEncryption
56:60:d0:67:a3:a0:30:35:f1:bc:28:dd:57:64:26:9c:fb:39:
c6:1f:f4:3e:21:3a:fc:28:38:cf:98:42:c9:75:81:ad:5f:4d:
30:77:79:c8:dd:4c:c1:f3:22:e8:63:52:53:40:73:bb:ec:e0:
5d:09:47:3b:38:2c:bd:07:5c:52:12:96:43:d3:fc:98:f0:c5:
bb:f9:04:77:61:ea:e7:e6:b5:2d:19:14:fb:20:cd:5c:9e:16:
78:ea:57:bf:14:e3:f7:b8:e6:fd:45:9c:84:a3:5e:58:9f:bd:
1d:1c:48:05:a1:7e:a7:62:6d:ee:52:f9:e9:e2:e3:3c:83:39:
b9:13:0e:9a:1e:59:83:15:83:bd:5f:ec:e5:2b:fc:71:94:b3:
69:51:67:42:08:e8:5e:6d:40:c3:40:53:64:93:8d:9c:05:d8:
aa:6e:49:4a:b9:2c:84:76:bb:52:46:05:94:4a:74:26:16:e7:
10:40:f2:22:8f:55:6d:3e:fa:84:89:47:13:ff:05:a8:5c:a9:
b5:09:32:15:d0:5b:f7:11:d3:78:ca:18:bb:59:1f:5d:2d:89:
4c:99:59:78:19:b2:4b:8d:06:6a:5f:1d:21:ed:3f:1a:03:66:
4a:90:69:b8:7a:8e:cb:7d:b3:e4:bf:a2:6c:a8:e7:61:bd:22:
83:07:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:50 2025 by rpki-client