Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bGNQnuIK_5kExRAlN46wgE0JoJc.roa
File: bGNQnuIK_5kExRAlN46wgE0JoJc.roa (raw, json)
Hash identifier: fZv5vBC+JrJoGMDIAM2CHg/rL9OjVr/9DpeiB7nS9o0=
Subject key identifier: 6C:63:50:9E:E2:0A:FF:99:04:C5:10:25:37:8E:B0:80:4D:09:A0:97
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194282572312E7341A55AA4CEA85F0CAD22
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bGNQnuIK_5kExRAlN46wgE0JoJc.roa
Signing time: Thu 02 Jan 2025 17:52:10 +0000
ROA not before: Thu 02 Jan 2025 17:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49975
IP address blocks: 2a0f:b241:119::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:72:31:2e:73:41:a5:5a:a4:ce:a8:5f:0c:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c63509ee20aff9904c51025378eb0804d09a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:8c:ed:4d:1a:4d:16:e2:c0:2a:2f:31:1b:
33:5d:14:62:2f:21:a3:70:44:22:b0:51:43:aa:75:
85:55:ce:52:a7:4f:50:1e:12:ed:2e:8d:45:30:11:
e2:aa:03:7e:2e:2a:0b:a3:d5:07:a8:6e:0c:7a:62:
ec:79:ba:46:86:0c:f2:cd:db:13:a3:74:51:89:37:
3f:0f:74:50:09:35:38:57:b7:a7:7a:70:46:f4:4e:
e9:21:dc:1f:e5:6d:45:a7:9e:16:ac:2b:d7:71:2f:
d1:d7:40:64:3f:c9:6a:cd:97:31:18:d8:ce:ee:50:
4e:9d:10:5b:f9:d5:0f:b7:a4:0a:be:24:73:de:d1:
c4:a2:ff:ab:c8:06:b3:d2:84:96:59:fc:8d:86:d3:
19:f9:47:20:3f:9a:31:e7:73:ad:69:27:60:10:6d:
4d:fe:39:2a:11:70:25:ad:04:17:6d:d3:f4:28:a8:
e3:77:c0:63:26:08:4e:f1:84:85:3c:36:4a:30:2d:
5d:b8:e2:43:bd:b9:f6:31:88:18:fa:9d:1d:10:ce:
8c:3c:1c:d5:be:a8:64:c4:9c:c6:3f:08:cc:3d:a0:
82:21:92:56:db:37:92:2f:34:55:89:9c:94:1c:6d:
f9:a6:72:e2:a6:10:0d:64:57:cc:73:ff:14:d0:1a:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:50:9E:E2:0A:FF:99:04:C5:10:25:37:8E:B0:80:4D:09:A0:97
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bGNQnuIK_5kExRAlN46wgE0JoJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:119::/48
Signature Algorithm: sha256WithRSAEncryption
12:5f:da:a5:2f:21:41:d4:d3:3d:f5:45:53:39:d1:e1:a2:21:
f5:76:92:4f:7b:4a:37:a4:e6:95:42:1a:a8:92:9b:16:e0:ae:
2b:11:3d:0d:9f:c9:f5:f8:fb:76:95:0e:9e:02:54:ea:f9:5b:
51:f6:60:c6:2f:55:3f:c9:3c:8d:82:42:42:5b:59:8f:53:75:
10:4a:03:0e:3c:30:90:cb:57:52:9d:31:fe:50:d0:e6:d6:5a:
73:89:9b:21:35:21:2d:10:70:7b:90:53:e8:7c:aa:cb:d1:68:
90:62:1e:81:78:88:fe:dd:24:0d:d1:bc:92:8a:f0:72:3d:24:
b6:49:28:e3:7a:1e:56:87:fc:e6:07:25:67:c1:c0:c2:53:a1:
14:98:cc:b0:23:da:ad:d2:c6:e6:7d:20:bb:35:e3:d7:04:6e:
7e:ef:6e:b5:22:df:6d:60:2c:d2:a0:4a:c8:5a:9e:f7:24:2d:
29:ea:24:2c:7b:0d:b7:27:bc:98:90:b9:37:2e:8c:d4:10:1f:
9a:7b:c4:04:fd:59:48:22:b7:cc:2f:0d:d5:99:72:d3:a3:a4:
c5:0f:d1:bc:42:15:4b:e3:8b:be:35:e9:b6:e2:88:c5:1c:04:
6b:06:95:90:85:85:a2:fe:da:35:d9:41:35:f1:47:8f:d9:9f:
ac:e7:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:30 2025 by rpki-client