Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/x-3D4SyWxTWtE8fU6h7K761mso0.roa
File: x-3D4SyWxTWtE8fU6h7K761mso0.roa (raw, json)
Hash identifier: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=
Subject key identifier: C7:ED:C3:E1:2C:96:C5:35:AD:13:C7:D4:EA:1E:CA:EF:AD:66:B2:8D
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019427B5F050406129970E706E7BF26ADAAD
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/x-3D4SyWxTWtE8fU6h7K761mso0.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212722
IP address blocks: 2a10:501::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f0:50:40:61:29:97:0e:70:6e:7b:f2:6a:da:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7edc3e12c96c535ad13c7d4ea1ecaefad66b28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:af:fe:75:5b:64:c5:e7:03:38:b0:48:42:
19:9c:98:af:d7:ae:7b:ae:c5:b0:ea:7a:4f:e7:a6:
bb:8c:df:75:8e:3c:8f:ab:cd:7b:2b:63:23:db:46:
78:8d:d4:6a:01:f7:1a:e9:4b:57:ea:64:2c:f2:bd:
bb:e4:90:02:d5:ce:6e:6e:99:9f:80:d0:ad:c7:92:
71:89:92:7d:35:92:3d:ea:82:2f:b5:85:36:57:e9:
17:a6:c7:72:cb:59:5d:31:2f:1c:06:01:31:96:6b:
a1:64:99:b7:08:ca:40:0e:4a:30:7a:97:6a:a1:3c:
9b:b1:02:4f:3e:f2:9b:24:1f:d5:b8:b3:52:00:55:
2b:6b:49:84:f5:7d:8f:64:66:96:f0:4d:bf:dd:55:
86:e7:62:bd:a7:b0:9a:27:4e:fc:5e:00:ec:fe:c1:
36:a0:e6:2c:48:09:94:48:b9:ee:eb:85:b5:a0:a6:
98:67:51:33:77:f2:38:c5:ee:bc:94:cc:c0:c5:b3:
70:87:03:3e:cf:17:0b:c0:9d:f6:f5:e2:25:6e:c2:
b6:20:85:45:57:c4:e2:7c:0e:41:a9:4b:cc:ee:74:
2d:81:ae:ae:94:aa:6c:bb:f2:25:35:eb:48:0c:e5:
ff:15:95:27:df:20:92:f5:0b:a0:d3:98:25:70:f0:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:C3:E1:2C:96:C5:35:AD:13:C7:D4:EA:1E:CA:EF:AD:66:B2:8D
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/x-3D4SyWxTWtE8fU6h7K761mso0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:501::/32
Signature Algorithm: sha256WithRSAEncryption
89:75:ea:c6:04:f9:15:15:a6:8a:34:f6:92:22:13:9b:4b:db:
94:26:5b:e0:27:e1:fa:97:0a:88:07:85:f0:06:80:b4:94:a8:
05:ee:fe:a0:04:4c:fb:27:74:77:8f:ca:b7:fb:cb:4b:4c:1b:
7a:07:42:e2:2c:6a:06:51:e5:9c:28:b8:14:b0:95:f0:22:55:
13:c7:af:b1:60:5d:22:1d:f3:0e:80:19:1f:a1:48:b0:35:ae:
67:23:ed:22:6d:5e:c5:d2:e5:65:56:45:56:38:4d:df:e3:14:
14:08:05:e3:a5:e1:45:c1:59:7d:3e:58:02:56:5c:6d:ad:f5:
9b:45:96:95:53:97:d7:4a:d3:a2:94:f0:fa:78:a3:1f:7b:26:
d8:dd:0f:a3:56:84:0c:9a:7a:96:1a:e6:a1:86:20:1d:a1:a9:
15:22:9b:c6:99:db:97:28:f2:cd:eb:72:0d:2c:a0:c1:dd:b2:
59:88:3e:ac:1e:11:84:fa:69:4a:09:c8:50:c0:d1:cf:35:d9:
bc:d6:0b:af:cc:11:61:bd:94:1a:72:cc:38:91:d7:ae:88:97:
09:10:bd:1c:a4:62:1b:68:58:57:e8:fb:ff:9b:65:52:df:87:
9f:a8:d4:75:d3:e0:06:9c:55:2a:1c:15:ad:83:9f:89:ba:96:
bb:83:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:15:08 2025 by rpki-client