Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa
File: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (raw, json)
Hash identifier: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=
Subject key identifier: E6:0B:6E:17:FF:FB:23:E4:53:88:C1:B6:BA:48:3E:3A:C5:F6:31:B4
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 01952924F48E4A561C22E5040997CD446675
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa
Signing time: Fri 21 Feb 2025 15:34:02 +0000
ROA not before: Fri 21 Feb 2025 15:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22611
IP address blocks: 2a04:c5c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:24:f4:8e:4a:56:1c:22:e5:04:09:97:cd:44:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Feb 21 15:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60b6e17fffb23e45388c1b6ba483e3ac5f631b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:08:c4:73:b8:be:ac:d3:ec:3c:41:f0:8e:
f3:a7:ce:a8:e0:34:ce:9b:f2:33:df:7a:e0:dd:bd:
8f:d5:cd:dc:54:d8:4c:79:83:1a:32:2d:0c:e3:99:
74:a1:8f:ce:fb:bb:52:22:fa:8a:78:90:5a:3a:15:
01:57:63:5e:bb:e4:d3:16:9c:44:02:b3:16:1d:fb:
41:fc:5b:08:94:57:e7:7e:b1:4f:6c:1a:1c:a1:c4:
ca:ad:f6:d5:3d:81:50:d7:15:4f:f7:b8:05:23:7c:
d8:a5:53:0d:27:d2:29:5c:fc:14:52:3a:a7:f3:68:
9b:db:65:cf:56:72:8f:d5:79:a9:cc:09:a5:5f:43:
e6:66:79:64:19:59:38:18:ca:bb:d8:d6:03:29:c2:
41:9c:28:10:36:4e:59:91:28:f6:71:45:4b:aa:9b:
b5:8f:13:c5:27:41:43:10:35:31:99:9a:5e:4e:22:
ab:ba:7b:b1:3d:65:a9:86:73:46:0a:88:45:87:14:
71:e4:41:13:5f:b8:87:ae:5f:d1:7b:a6:e2:c3:e3:
be:a7:f5:ed:e5:9b:15:25:ba:21:b5:6a:86:e8:13:
0e:d8:a9:27:ea:d6:2d:60:9e:9a:de:9b:fa:5d:54:
e7:85:57:87:36:95:e6:b5:12:bd:a2:b2:e5:ce:df:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:6E:17:FF:FB:23:E4:53:88:C1:B6:BA:48:3E:3A:C5:F6:31:B4
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:c5c0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a5:97:1c:21:4a:07:59:e9:97:2c:5c:d4:b7:97:41:d9:8d:
f4:11:57:32:3f:cc:41:67:a8:a0:6d:e5:9c:4e:bf:16:a9:e4:
75:45:5f:17:71:0c:31:62:f5:b7:5f:12:c4:e9:fc:e2:57:80:
eb:26:98:a7:bb:f1:1d:2b:57:18:4c:b2:a4:a1:02:49:72:a7:
34:c1:b0:8e:1b:67:ad:cb:a5:fa:5f:19:f4:68:40:8f:08:68:
99:1b:a9:21:ca:ea:47:8d:dc:84:52:31:aa:32:d2:e4:f5:06:
d0:94:ab:1c:2c:90:c0:64:26:2f:ce:f7:df:52:ac:9e:5e:ac:
b7:1f:3c:03:4b:87:a8:9e:89:57:84:1a:f4:8c:fc:64:44:e9:
61:3b:c0:82:cd:34:21:ee:60:01:50:c9:66:7e:7a:75:b0:52:
16:1f:2e:b6:6c:e8:72:d1:58:f5:0f:da:da:67:2f:ea:6c:e6:
51:33:5a:47:97:d3:5d:c8:64:d4:59:de:e4:ac:e6:75:69:59:
d7:8c:9a:8c:e3:b2:91:45:1b:55:60:64:f2:61:5e:8f:6c:d9:
38:22:a5:24:b8:95:6b:c9:4c:46:7d:ed:44:5c:81:d4:94:ff:
84:30:c2:1f:61:e0:43:f2:ef:08:bb:f5:27:db:ea:bd:04:8d:
47:26:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:06 2025 by rpki-client