Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5PF7JkQJruSRgX8OFdh0ldo0avk.roa
File: 5PF7JkQJruSRgX8OFdh0ldo0avk.roa (raw, json)
Hash identifier: GVp4KrnuPKkWi3YMSKTa/JA6oV/P98xz1Epz6kEOfe8=
Subject key identifier: E4:F1:7B:26:44:09:AE:E4:91:81:7F:0E:15:D8:74:95:DA:34:6A:F9
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC3F18DE27E46CDD150574D6FF219
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5PF7JkQJruSRgX8OFdh0ldo0avk.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208973
IP address blocks: 2a07:3500:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:f1:8d:e2:7e:46:cd:d1:50:57:4d:6f:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f17b264409aee491817f0e15d87495da346af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:4e:69:8c:9b:8a:23:45:b5:2b:af:01:0e:
48:c3:8d:45:c9:da:ae:1c:ad:2e:a1:7c:a3:ae:66:
6c:88:1a:03:3f:c1:43:d2:14:9c:5d:db:56:e7:d6:
c8:b2:04:b2:8c:31:27:53:53:c1:40:67:da:fc:4b:
22:f1:ae:b3:6e:be:dd:31:b5:dd:c4:62:8e:c7:8f:
e5:e6:de:3c:85:2a:6a:42:ac:2c:c1:54:ed:90:84:
d0:14:e8:06:0a:ec:b4:ee:b8:fa:2f:8f:72:ed:64:
62:97:42:20:59:37:34:28:ea:82:96:33:68:19:85:
a6:83:df:1c:18:b2:7c:03:15:f2:99:9e:40:a3:45:
7a:8f:85:74:19:98:83:55:45:d2:7b:e6:a3:ac:52:
89:26:2f:87:62:c9:db:a5:95:7e:7a:11:98:02:72:
37:b1:49:39:5f:80:ea:4a:e6:2d:eb:03:61:d9:ac:
a7:9b:a1:16:b9:3d:bc:32:5d:09:bf:ea:c8:2b:55:
b0:ad:d7:a3:56:69:ea:67:9a:dc:aa:d6:b6:bc:f9:
eb:6b:d5:ff:1b:25:83:6b:da:43:4a:76:7b:11:f8:
00:ed:68:33:cf:32:ef:ff:69:7b:60:59:ba:1e:9e:
bd:4e:3f:66:40:f3:27:3d:16:12:0a:84:18:59:61:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:7B:26:44:09:AE:E4:91:81:7F:0E:15:D8:74:95:DA:34:6A:F9
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/5PF7JkQJruSRgX8OFdh0ldo0avk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:9f:20:f4:59:7a:e0:2c:fb:45:f8:21:4b:74:bf:94:d2:9e:
58:a3:35:c0:88:ab:48:23:5c:ff:58:d2:be:33:54:24:6e:ba:
fb:b8:9f:65:41:72:3c:b1:b6:f3:05:f4:bc:f8:d8:60:00:e9:
fa:b5:1e:f4:c0:ab:5b:ed:f6:29:38:a8:81:e4:a9:44:07:86:
a0:99:0c:4f:72:b4:5a:2c:c8:0a:32:85:9a:d2:74:c3:7e:23:
29:81:74:3c:2c:95:1c:d8:72:c2:12:21:44:c8:77:96:63:a9:
19:c4:e7:df:d5:5d:99:d8:c0:df:62:83:fa:7b:39:64:a4:2f:
5a:53:a2:b8:56:f4:61:ac:03:ba:74:17:d2:66:e6:34:c5:43:
ac:19:ba:dd:e2:68:5e:a2:6a:27:1e:b7:6e:d0:4b:85:75:a8:
fd:0f:2b:05:e8:22:24:94:ae:80:30:5f:db:b4:f4:0c:05:35:
c5:de:4b:88:ef:e9:c1:bf:b7:6c:e7:03:26:f6:0b:e8:10:c8:
29:c7:6f:12:bd:e7:be:7c:b9:38:c5:7a:1b:e4:c1:c1:f5:d2:
15:f1:6d:b7:52:73:b1:7e:ec:f8:8a:9d:5b:19:05:d1:62:7b:
b8:da:0f:14:29:1a:e3:10:99:93:75:db:26:2d:09:cf:2e:84:
c5:48:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:17 2025 by rpki-client