Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/a62WnrF9WFFCgWyUtQ3HZktqTRo.roa
File: a62WnrF9WFFCgWyUtQ3HZktqTRo.roa (raw, json)
Hash identifier: //YUDr2x0xleCKubRHWSpCG/u0W3sPwDSId841VoOVA=
Subject key identifier: 6B:AD:96:9E:B1:7D:58:51:42:81:6C:94:B5:0D:C7:66:4B:6A:4D:1A
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 018C51B160477083D6E58FE6011F03C38DB7
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/a62WnrF9WFFCgWyUtQ3HZktqTRo.roa
Signing time: Sun 10 Dec 2023 03:07:08 +0000
ROA not before: Sun 10 Dec 2023 03:07:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216415
IP address blocks: 2a0e:1840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:51:b1:60:47:70:83:d6:e5:8f:e6:01:1f:03:c3:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Dec 10 03:07:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bad969eb17d585142816c94b50dc7664b6a4d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:e8:d4:a1:d2:2f:e5:8c:b8:d9:89:92:84:
01:9b:d0:cd:ac:d7:70:50:5a:04:2f:23:a9:7e:c3:
11:f2:fd:2b:15:98:82:fa:0f:d6:9b:75:ea:8f:71:
37:0a:ba:be:a5:c7:1b:09:de:b5:2c:fd:2d:d8:6a:
30:f1:01:4f:77:2e:1d:57:89:71:e3:85:b7:59:9d:
c1:ed:bb:16:4a:e4:a2:de:ff:20:64:92:06:49:fd:
bb:9d:df:eb:a7:69:1f:f1:6f:b9:e3:2b:d5:c4:8a:
10:c1:3b:93:bd:c3:f9:df:ff:92:a3:0a:71:54:19:
4a:6f:08:5b:72:1a:1a:ca:0b:77:7a:64:c2:ad:6e:
cd:59:c1:12:14:34:53:9d:18:a1:f5:dc:e9:7a:e8:
98:f7:96:5a:a8:ab:95:56:7a:fd:15:1e:3f:53:0a:
4d:ca:8a:02:2c:6e:74:14:cf:5f:18:af:53:c3:51:
ea:7e:77:93:65:69:a5:28:d9:ad:e9:f1:b9:ec:9d:
b9:49:7d:cd:d0:07:aa:60:49:6a:d9:8d:ea:9c:7d:
a9:d7:92:f6:4a:d7:5d:a7:22:7f:2d:59:d2:26:30:
3c:f2:46:af:34:25:a2:a9:3b:55:65:fc:4e:9f:5b:
19:c7:d9:ee:93:a9:38:e0:8d:da:47:7d:45:17:27:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:96:9E:B1:7D:58:51:42:81:6C:94:B5:0D:C7:66:4B:6A:4D:1A
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/a62WnrF9WFFCgWyUtQ3HZktqTRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1840::/29
Signature Algorithm: sha256WithRSAEncryption
1b:c2:42:08:26:c8:fb:5a:02:89:06:03:59:2b:ea:86:f2:b5:
63:d3:a6:4d:c6:ac:c2:b4:a0:e3:8a:17:67:54:a3:88:1c:35:
fc:c6:75:83:ae:bb:21:36:31:2b:8e:94:29:83:08:3c:72:6e:
ac:b2:ce:9d:18:b0:97:93:0a:19:48:84:09:6d:6c:b1:43:46:
56:95:cf:77:e3:99:d3:4d:75:02:9d:72:84:6c:44:16:81:d7:
cc:2a:76:98:a7:f4:7d:08:39:bd:3d:e9:57:33:4c:0a:5d:02:
3d:c5:4c:3d:03:ee:e7:d7:39:94:3b:92:83:37:56:88:0e:15:
ac:8a:fe:83:9d:24:6b:a4:40:22:c1:50:1e:cc:67:0b:4c:72:
04:77:fc:3c:8c:11:f6:10:77:aa:2c:22:ef:2e:84:00:28:b9:
b2:94:ee:57:f4:08:2d:22:e2:32:a7:ad:ed:03:4b:c1:74:e3:
4c:30:a7:16:d5:fe:ba:8e:95:59:de:f2:1c:fa:fd:db:f9:4b:
6d:b2:c8:97:38:91:11:9d:b3:eb:68:a8:6d:b5:80:59:8d:ee:
91:f4:40:a7:2a:eb:14:67:fd:1a:4e:e8:7a:58:7b:e7:18:c9:
81:b9:6b:16:1c:58:b0:e8:4a:f6:40:42:f0:1a:06:79:8f:9d:
4f:36:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:41 2025 by rpki-client