Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/3t2CVo8lZxK05qVhWuiu4c8sgzo.roa
File: 3t2CVo8lZxK05qVhWuiu4c8sgzo.roa (raw, json)
Hash identifier: stXOtWs8A5ImkqXvcLQ61uhzCWwyOQe5BXcDJYFxYKQ=
Subject key identifier: DE:DD:82:56:8F:25:67:12:B4:E6:A5:61:5A:E8:AE:E1:CF:2C:83:3A
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0194221F3066949BE86A67DE1E73336E88E0
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/3t2CVo8lZxK05qVhWuiu4c8sgzo.roa
Signing time: Wed 01 Jan 2025 13:47:36 +0000
ROA not before: Wed 01 Jan 2025 13:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32931
IP address blocks: 2a0b:2280::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:30:66:94:9b:e8:6a:67:de:1e:73:33:6e:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 13:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dedd82568f256712b4e6a5615ae8aee1cf2c833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:21:6a:50:65:42:e9:b4:0f:8a:1f:db:c6:
fc:6a:70:54:f8:7b:0b:53:aa:0d:a3:12:cb:bf:5e:
d0:bc:88:1f:99:4e:02:54:b4:99:ee:c1:c2:f1:6f:
cc:f1:05:85:96:20:af:a2:24:54:d5:b6:22:e9:34:
de:3a:ad:4d:fe:2a:b1:33:40:6d:81:d7:46:2c:9b:
f6:95:a9:b6:3f:94:5f:de:22:70:03:8c:b3:11:44:
8d:00:eb:d6:d9:42:9e:4d:99:7a:61:8d:c7:c9:c1:
d9:b2:f8:79:4c:ed:b8:21:ae:4e:35:e4:79:88:92:
45:fb:1b:18:2e:69:50:08:d1:bd:11:5d:55:c4:58:
bb:93:b1:52:cb:cc:f6:09:bf:de:26:b6:f3:05:2c:
a6:64:b2:38:77:77:9e:76:9e:bb:fa:9d:db:ec:63:
bc:aa:12:19:a5:8e:1a:94:f1:a2:e9:92:58:01:e9:
de:70:ee:d9:13:34:93:36:be:a1:98:25:10:47:90:
f8:99:b1:e6:cb:8f:81:ef:cf:17:0e:a1:e4:9a:20:
22:62:f3:2c:b4:86:6a:7e:0b:cd:cc:66:eb:24:74:
cb:33:bf:60:eb:fa:d0:41:6c:2a:97:49:48:e4:2c:
bf:eb:b3:55:fa:d4:08:46:35:1c:6a:4b:4c:3d:21:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:82:56:8F:25:67:12:B4:E6:A5:61:5A:E8:AE:E1:CF:2C:83:3A
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/3t2CVo8lZxK05qVhWuiu4c8sgzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2280::/29
Signature Algorithm: sha256WithRSAEncryption
a2:4e:7e:db:43:8f:bf:9d:f0:26:e4:36:0d:e8:55:54:46:7a:
55:ad:de:1e:85:3c:e9:83:c7:38:7f:cb:b3:b4:f3:7c:24:b0:
a0:0e:0f:a4:21:79:f8:f2:92:6b:38:e0:b8:4e:7f:59:61:3d:
bf:1d:9f:65:62:ee:33:81:65:42:56:1a:49:39:fc:4b:71:6b:
38:58:24:ec:40:e6:f4:2f:bf:52:da:29:db:f9:18:f4:30:91:
33:eb:f3:ac:5f:69:4b:84:e4:a8:93:d6:48:af:47:c6:f7:fb:
cc:bd:8a:cc:a6:09:23:63:66:22:3f:a1:ac:1e:a9:67:4e:e9:
63:4c:c1:1d:72:d1:7d:0e:83:ab:5c:93:6d:99:16:15:9a:32:
3f:61:74:17:ef:0c:67:8e:be:96:af:85:e3:47:db:28:0d:9d:
46:b4:d9:d5:ae:c4:d3:1f:c7:0d:ce:f4:9c:20:1c:cf:9b:3b:
4d:3b:a3:80:94:d7:60:0d:ee:3c:74:f3:a2:3f:7b:4f:62:87:
6c:b3:45:50:26:9b:e6:ef:23:d1:7a:7c:86:88:3c:b1:00:dd:
3d:42:33:be:25:a8:97:dc:b2:80:55:da:1b:67:20:11:c2:70:
f2:6c:fb:fb:20:f9:46:b1:5a:80:1b:20:5b:ef:a9:dc:a1:64:
72:28:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:51:14 2025 by rpki-client