Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/x02wwRJLWXkhho02hs7In5F9tAw.roa
File: x02wwRJLWXkhho02hs7In5F9tAw.roa (raw, json)
Hash identifier: tCAs80Mhnn5ZbsqK3yFV+a3nsSOqYzSlvn1Cj5qDFLA=
Subject key identifier: C7:4D:B0:C1:12:4B:59:79:21:86:8D:36:86:CE:C8:9F:91:7D:B4:0C
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01941FFA7B6BAB4343F96D8EE93304C42F41
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/x02wwRJLWXkhho02hs7In5F9tAw.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a0b:7a80::/29 maxlen: 29
2a11:1380::/29 maxlen: 29
2a11:15c0::/29 maxlen: 29
2a11:34c0::/29 maxlen: 29
2a12:2740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:6b:ab:43:43:f9:6d:8e:e9:33:04:c4:2f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74db0c1124b597921868d3686cec89f917db40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:4c:40:41:b6:51:4c:1b:60:02:65:26:1a:
a7:db:fb:a1:22:c5:cd:b4:56:06:8d:92:1e:a0:75:
11:2c:98:c6:e0:2d:c8:f3:ca:2f:8d:5e:c6:47:e9:
26:fd:0f:9c:fb:98:a4:f2:06:6e:fc:7a:f9:d9:1b:
50:c5:3f:09:18:c8:fb:de:0a:56:4d:5a:cd:9e:26:
be:32:55:d4:91:2e:f3:35:0e:62:e8:0b:43:7e:ef:
48:7b:cd:e9:7d:b2:0f:02:98:f8:9d:8a:65:2c:9f:
db:62:70:b1:89:08:0d:7b:dd:60:4b:e8:28:27:53:
1f:d7:3f:5a:18:90:0f:62:33:c3:14:73:13:8c:78:
9e:14:73:92:d3:44:3f:b1:f6:cf:d7:2e:b4:f5:82:
af:29:c1:ed:1b:ca:dd:13:d7:3b:02:40:a0:62:5f:
ac:a6:54:e0:d4:40:e3:ba:f6:91:d5:43:5c:dd:4e:
40:7f:fc:c8:56:d5:25:94:3b:eb:38:be:03:2d:01:
a0:48:52:cd:e3:0f:58:88:c4:5a:e6:8c:b8:e3:7b:
58:4d:01:88:6f:aa:d5:91:d4:af:a4:e8:80:8c:8b:
46:82:2e:b5:54:c7:67:6d:ef:ba:37:17:59:f3:9a:
44:e3:89:9d:e9:bb:87:bc:23:e6:7f:32:15:f7:50:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:B0:C1:12:4B:59:79:21:86:8D:36:86:CE:C8:9F:91:7D:B4:0C
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/x02wwRJLWXkhho02hs7In5F9tAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7a80::/29
2a11:1380::/29
2a11:15c0::/29
2a11:34c0::/29
2a12:2740::/29
Signature Algorithm: sha256WithRSAEncryption
99:5b:d4:d9:66:76:11:02:c8:b5:f2:97:42:85:32:45:80:8d:
4c:c5:e5:ca:58:62:da:28:61:96:00:19:6a:82:e0:e4:82:8f:
ff:37:76:85:a2:e4:7f:d8:0d:7b:4a:2f:94:53:ea:24:92:cc:
c2:53:d6:a5:07:0e:e5:c4:50:c6:b2:a7:30:1e:57:66:65:80:
2c:4e:f4:f8:aa:30:2b:d9:53:36:23:8c:8e:17:40:e0:fe:c0:
0c:10:7a:bc:02:dc:31:7b:08:b6:d9:c9:1c:91:79:11:c5:fb:
ad:8a:bc:a5:b0:51:94:87:a0:74:60:28:b2:e7:1f:23:3e:9c:
94:22:de:4c:55:cf:c4:aa:7f:31:fa:33:ad:33:95:c6:a7:e6:
61:ad:17:38:b1:4c:81:76:f3:ce:d2:8f:53:d9:2c:8b:32:60:
e4:12:f3:e0:46:42:f5:7f:40:57:b6:fb:44:f6:01:5e:6b:a7:
9e:50:f8:38:ce:cf:28:51:c4:ef:bf:25:06:b8:d5:da:14:9c:
85:6c:3c:88:b5:32:5c:7d:83:6c:c0:86:8a:5d:ec:df:22:db:
d9:32:0e:f3:a5:c7:4a:71:49:c1:d1:0c:1e:5c:6d:0e:81:3e:
76:36:fb:d2:ba:c8:e2:41:9d:6b:09:c6:fb:d6:6c:56:dc:01:
71:07:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:12:55 2025 by rpki-client