Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lF2tMNmAECsDyNeG2rCO6R3__so.roa
File: lF2tMNmAECsDyNeG2rCO6R3__so.roa (raw, json)
Hash identifier: pWOiasxTY3xtkB3iN0Oo+urlEY6/TFwmjLa5LXlfNYI=
Subject key identifier: 94:5D:AD:30:D9:80:10:2B:03:C8:D7:86:DA:B0:8E:E9:1D:FF:FE:CA
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDBA9D477FFAF013CABA54EAF5C07A
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lF2tMNmAECsDyNeG2rCO6R3__so.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24595
IP address blocks: 2a04:9a01:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ba:9d:47:7f:fa:f0:13:ca:ba:54:ea:f5:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=945dad30d980102b03c8d786dab08ee91dfffeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:cc:37:d5:96:53:b3:41:9b:db:90:ea:83:
d4:e6:36:fe:f6:a3:83:5c:b5:8f:7d:4d:10:d7:36:
86:a4:7a:3f:c0:d3:60:38:ca:8c:76:9f:dc:06:6d:
7b:ba:f5:40:e7:a8:32:de:4a:c6:bb:05:25:6e:99:
2b:36:e5:80:d1:b7:75:bd:32:73:ff:c0:2b:39:36:
e9:da:2f:13:0a:e2:24:54:8c:7d:7e:c7:3b:7c:4c:
8f:1b:b2:5a:23:f6:d7:fc:9f:d6:4d:4d:d1:9e:64:
3f:f5:97:11:90:6f:f4:9b:25:41:9b:f4:02:a1:fb:
d9:d0:a9:4d:c6:04:4f:c6:1c:9e:7f:45:20:bf:58:
db:e5:43:5b:fb:cd:e7:6a:29:24:01:b5:8b:b7:7a:
ac:f7:d2:d7:91:ca:cb:86:96:f9:5b:fc:a2:34:1d:
26:9b:95:ad:e0:87:2c:a0:0e:0d:9f:64:f0:b1:21:
4f:89:66:1a:c8:fc:f2:7b:f8:78:c0:86:d2:9d:59:
8d:af:c1:5d:7f:19:ee:c9:13:cb:e1:8f:68:94:15:
e8:32:c8:cf:75:58:76:fe:9e:66:47:38:eb:f7:49:
bd:73:4d:a2:01:8c:63:e9:79:90:4f:f8:7a:50:cb:
1f:9c:1f:58:5d:49:56:01:ef:b3:8b:7c:06:eb:2d:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:AD:30:D9:80:10:2B:03:C8:D7:86:DA:B0:8E:E9:1D:FF:FE:CA
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lF2tMNmAECsDyNeG2rCO6R3__so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a01:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:57:39:65:c2:58:05:dc:80:40:a8:76:5b:e1:ee:c4:c9:71:
e2:b2:09:49:7c:7c:21:71:2c:d0:4e:eb:58:59:0f:7c:46:a6:
81:ee:07:ba:f3:ef:c6:73:0d:3d:28:11:de:28:df:b3:66:1d:
3b:2a:9f:e7:21:ef:6e:31:01:e3:60:77:8c:4b:47:1e:7d:fd:
3f:4b:e3:42:dd:8d:a1:ec:d6:81:fd:63:0c:d3:7d:c0:fb:53:
4e:a9:aa:cb:8e:04:cb:de:ba:90:d6:83:aa:b6:81:ea:5a:17:
4d:2d:af:92:63:63:6a:ed:fe:23:45:68:5c:73:be:9d:d7:4f:
98:0d:97:fd:19:72:ba:c7:26:ad:8c:58:ba:f3:1a:1a:a3:cd:
26:e4:4f:85:66:39:cc:21:9f:d9:e6:d2:84:ea:21:9f:a5:25:
72:66:c9:9a:bc:81:19:b2:55:19:cb:d4:65:6c:88:87:e9:80:
5d:4e:02:73:30:d2:d6:8e:be:50:4f:2e:1d:5d:7e:cc:77:5a:
28:39:15:52:c8:3c:aa:d9:9a:63:9c:42:b3:92:7f:14:bd:41:
e5:72:d3:85:1e:87:3b:bf:05:7f:a2:bc:04:9b:11:65:07:1a:
2f:a9:b4:d0:81:55:f8:21:86:68:b9:14:34:49:91:28:e8:53:
c8:0e:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:00 2025 by rpki-client