Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bbauAtpZJTnysprdGQB_7SBDCcc.roa
File: bbauAtpZJTnysprdGQB_7SBDCcc.roa (raw, json)
Hash identifier: S0jg+4F8XMSAzGWhr9YsJ3z7JLXhiocZw3kPMCq4hZU=
Subject key identifier: 6D:B6:AE:02:DA:59:25:39:F2:B2:9A:DD:19:00:7F:ED:20:43:09:C7
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7760488590AEE56308B5651A4DE92
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bbauAtpZJTnysprdGQB_7SBDCcc.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215389
IP address blocks: 2a09:e1c1:efd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:76:04:88:59:0a:ee:56:30:8b:56:51:a4:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6db6ae02da592539f2b29add19007fed204309c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:f9:ed:c1:92:db:c4:bd:c5:02:bd:19:af:
2d:6f:09:93:77:1e:72:b0:50:61:54:6c:c7:9e:b5:
db:e1:8e:7f:bb:47:f7:a2:cc:7b:47:ae:4e:05:b3:
42:27:0d:6b:ad:80:e1:48:88:3d:1a:47:64:97:11:
59:39:d2:3f:73:33:c4:db:98:44:5b:41:eb:c4:45:
20:f6:74:7d:97:cb:7f:26:4f:2d:c5:d5:66:b3:30:
2d:f9:fb:e0:37:57:54:82:69:5e:ce:9f:15:4f:89:
c7:9b:a0:8f:2d:d6:31:bb:08:bd:5c:5b:06:b6:0e:
85:c7:03:48:03:dc:a2:bd:10:c7:93:e2:38:d2:e8:
9b:7a:c5:a4:d9:5b:91:ed:89:13:1c:97:c2:50:7b:
28:ba:c4:90:1a:c4:06:48:62:bc:31:cb:59:63:fd:
c0:98:ff:0f:0c:04:5f:4a:60:c5:29:e5:43:03:1c:
d8:d1:80:93:8a:64:7c:e0:c5:25:6f:eb:44:f1:cd:
50:71:f5:e0:13:48:db:54:a2:b3:5c:b3:08:ec:96:
fe:03:85:0d:2f:43:c3:90:54:ba:79:cb:48:84:a7:
8f:49:bd:65:e2:fa:63:5b:a8:89:b1:31:ee:e0:d8:
e6:07:77:e5:a4:cd:2f:61:58:4d:0b:73:51:9d:6b:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:AE:02:DA:59:25:39:F2:B2:9A:DD:19:00:7F:ED:20:43:09:C7
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/bbauAtpZJTnysprdGQB_7SBDCcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:efd0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:fe:86:32:74:22:5c:94:93:a6:a8:23:07:86:a2:dc:9a:74:
3d:3e:98:f6:1b:94:39:96:3c:9e:55:a8:72:1a:bb:a7:34:71:
76:f7:6d:ed:b9:35:e8:de:90:bd:83:d6:b7:31:5c:a7:89:2b:
c4:80:90:8f:53:19:d9:f8:b7:27:91:51:e1:80:a8:42:3c:fb:
ae:d6:a9:2b:03:98:c5:2c:df:e4:7a:82:fa:eb:9c:c3:45:eb:
4d:07:36:30:8e:e2:4d:c9:5d:f7:76:d8:31:af:16:e9:22:62:
a2:c0:d1:0b:3a:d1:2b:0f:13:f4:ff:c3:e0:55:8d:99:2e:79:
d2:26:d8:5e:54:e8:16:fc:8b:c4:af:02:6a:44:8a:de:e7:10:
d1:0a:fd:78:ce:2b:46:25:d0:31:ff:0a:03:90:b0:df:c4:7e:
d3:68:a1:a7:d8:01:7f:e5:5a:87:88:77:f7:29:a0:27:38:81:
b0:93:2b:e1:bc:b6:34:77:99:aa:25:90:49:56:9c:a2:d0:0c:
e7:72:77:25:9c:a9:5e:1b:67:74:f1:4c:d8:48:ae:54:6f:5e:
1f:35:25:e8:75:b7:43:ea:68:b8:5e:70:84:c8:32:96:80:a1:
65:30:64:74:b3:74:dc:88:76:16:4e:64:db:89:5d:68:27:75:
7f:e1:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:33 2025 by rpki-client