Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Jy2dzojQmDDHrT1ZglR62KXl9KE.roa
File: Jy2dzojQmDDHrT1ZglR62KXl9KE.roa (raw, json)
Hash identifier: 9d9Gsb0ep9phZqm2SLYU7Tj/IcHV8fHdUCwzejsx/PY=
Subject key identifier: 27:2D:9D:CE:88:D0:98:30:C7:AD:3D:59:82:54:7A:D8:A5:E5:F4:A1
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F1492AF444750FEFFF0234067C768
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Jy2dzojQmDDHrT1ZglR62KXl9KE.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a0e:5384::/32 maxlen: 32
2a0e:5386::/32 maxlen: 32
2a0e:5642::/32 maxlen: 32
2a0e:5907::/32 maxlen: 32
2a0e:ccc6::/32 maxlen: 32
2a0e:ccc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:14:92:af:44:47:50:fe:ff:f0:23:40:67:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272d9dce88d09830c7ad3d5982547ad8a5e5f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:72:a6:13:1f:c9:27:7e:da:59:1e:b8:12:
91:04:59:77:64:ab:16:69:f3:e6:52:51:70:72:22:
4d:bb:57:30:7c:25:d6:30:74:00:7f:99:27:d0:2f:
3e:fa:be:2d:68:74:d9:90:e6:b5:60:ff:78:ca:9a:
89:fd:76:c5:e5:38:65:c6:45:55:53:b3:32:27:f1:
99:af:86:f3:e0:77:d2:5b:51:cd:88:76:91:bb:72:
41:5d:50:e7:a3:77:2e:29:96:d8:d3:df:35:40:98:
14:c5:c7:f0:6f:f1:1c:37:6c:22:28:99:f7:ba:ac:
a4:57:95:02:46:06:79:22:26:e8:65:d7:1e:79:2f:
1a:47:36:d6:f2:e7:47:0b:bb:e7:71:fe:76:c1:3b:
54:a4:f0:7e:dc:64:33:59:9a:77:8b:ef:e6:03:52:
84:d9:af:a1:91:f8:e0:b9:05:02:8e:08:3e:e0:9a:
e2:b4:be:82:36:2d:35:c3:45:0c:7b:75:60:23:48:
fb:0c:d1:fa:a6:9b:cd:94:87:9e:9e:a2:e2:6e:56:
32:e3:78:66:cb:04:e0:3e:4e:1c:4d:15:fb:87:ac:
18:db:77:35:dd:d2:e8:dc:b1:aa:64:c9:17:96:5f:
06:96:b9:1f:e4:77:c8:55:ca:5f:14:9a:43:fa:a8:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2D:9D:CE:88:D0:98:30:C7:AD:3D:59:82:54:7A:D8:A5:E5:F4:A1
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Jy2dzojQmDDHrT1ZglR62KXl9KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5384::/32
2a0e:5386::/32
2a0e:5642::/32
2a0e:5907::/32
2a0e:ccc6::/31
Signature Algorithm: sha256WithRSAEncryption
2d:64:cb:c4:d7:b2:2a:bb:ef:c6:e3:88:fa:a1:25:06:a6:8a:
ec:20:82:08:76:99:81:a0:ba:b5:e4:7c:56:45:4e:12:c5:dc:
b6:26:c9:14:d8:f8:c2:0d:51:84:e2:ea:93:0b:d1:b4:c5:98:
d8:9b:1c:e7:fd:3c:a2:2e:36:9d:3a:b3:ac:e6:5e:a2:b1:a5:
1a:20:cd:ce:c8:c7:e4:49:ee:3f:e8:4d:f1:09:42:05:dc:8f:
2d:a5:61:e9:67:69:3b:4e:01:1a:79:33:02:40:20:69:61:9f:
a4:a8:bd:fe:29:40:2f:b0:89:b9:28:1b:0c:ed:9f:6e:de:9e:
8e:3d:8c:3c:d8:89:3b:91:13:92:bb:48:49:43:03:42:17:12:
2c:75:15:54:53:94:18:cb:3a:d4:19:fd:26:69:1d:7d:b1:e5:
ad:4d:34:77:4e:d8:71:c6:c1:65:26:e0:db:e4:fe:b4:af:40:
0b:19:da:e5:12:84:0d:f9:d8:ca:6e:1a:fa:2b:1b:81:37:ff:
a4:54:9a:0e:61:3f:93:f2:78:6c:44:44:d8:f0:b4:16:8f:74:
84:ce:ec:85:16:c9:2d:ea:42:be:ef:c8:92:03:4a:df:9a:bf:
d0:42:9a:de:de:51:46:ea:99:3f:78:e2:21:bd:d0:db:02:6a:
d2:f2:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:55 2025 by rpki-client