Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BoJrTRL7_K7BqMiLZWZ278-6QdU.roa
File: BoJrTRL7_K7BqMiLZWZ278-6QdU.roa (raw, json)
Hash identifier: eotqHBWeJDM1TmkEutPB1j11shFJ4Khva4Jo8XqUnck=
Subject key identifier: 06:82:6B:4D:12:FB:FC:AE:C1:A8:C8:8B:65:66:76:EF:CF:BA:41:D5
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0194466B85740367B3F89319776A331F08E9
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BoJrTRL7_K7BqMiLZWZ278-6QdU.roa
Signing time: Wed 08 Jan 2025 14:57:19 +0000
ROA not before: Wed 08 Jan 2025 14:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23764
IP address blocks: 2a0f:7806:fff1::/48 maxlen: 48
2a0f:7806:fffc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:6b:85:74:03:67:b3:f8:93:19:77:6a:33:1f:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 8 14:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06826b4d12fbfcaec1a8c88b656676efcfba41d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:91:5b:7b:c5:40:9c:8f:9c:38:cb:54:38:
02:cb:c5:c0:27:97:fb:4c:03:07:2f:16:58:86:62:
c2:09:9d:d8:9d:bf:8f:ce:54:2c:af:42:70:e6:30:
11:3e:1e:1c:1f:24:dc:b7:ea:06:38:cc:3c:62:6d:
62:4c:3c:22:f1:be:36:a2:f9:b6:ed:83:32:fd:73:
a9:a0:d6:2e:ed:bc:87:22:da:a6:41:24:0b:71:34:
d2:dc:1d:b4:12:71:8b:0f:82:f7:b9:3a:b6:96:f3:
0c:3e:f8:a7:eb:42:b9:3f:8d:03:40:38:d9:ac:df:
38:35:58:f1:5a:18:dc:1d:31:cf:59:40:c8:4b:5d:
0d:7f:cb:50:b3:8f:a0:8d:78:93:ec:26:ea:1e:3b:
a8:1a:62:f7:14:81:e6:50:36:aa:17:10:0f:e1:54:
90:60:ce:87:bf:16:56:22:86:a3:16:b7:13:0a:9e:
fc:34:86:dd:05:92:7b:e6:74:cb:1c:93:81:27:f0:
7f:60:f9:5d:a3:87:9f:84:da:6a:0d:8e:31:08:56:
d4:b9:d7:3b:d3:cd:f6:64:28:52:55:56:59:c5:11:
9b:4d:0a:cf:67:99:ba:02:ef:af:53:e3:c7:8e:86:
39:e2:3d:3d:d8:51:5a:a9:d8:c8:43:fe:dc:43:d0:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:6B:4D:12:FB:FC:AE:C1:A8:C8:8B:65:66:76:EF:CF:BA:41:D5
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/BoJrTRL7_K7BqMiLZWZ278-6QdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7806:fff1::/48
2a0f:7806:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
9f:c2:16:17:6c:70:d2:4b:29:08:29:fe:fa:c6:fc:4f:5b:ac:
19:5d:9f:21:28:9c:6e:ba:19:e8:9c:2a:b6:3a:18:6b:33:78:
b4:53:1a:eb:be:6a:07:ac:03:23:a1:94:7d:ea:1b:01:e0:ee:
5f:92:bb:ec:0b:17:50:eb:66:8e:6c:44:39:87:5a:e4:9f:a4:
7f:06:90:45:f1:10:89:24:37:49:9d:8f:84:21:f0:24:28:4d:
c3:6f:8f:b8:3c:f2:11:fd:b0:0e:dc:0c:a7:03:09:cb:14:33:
c7:0a:08:f0:9e:8a:d6:3d:20:60:4c:a7:a7:4a:ae:7a:43:74:
e3:f4:a7:de:b9:09:c9:bd:86:71:1b:4f:05:52:8f:b4:dc:2a:
0e:6f:fd:82:d7:8c:6a:3c:73:70:94:fe:71:c1:b7:2c:63:5e:
09:b9:d5:fc:a0:50:b1:01:27:23:f5:d7:62:66:4f:31:c3:28:
13:d5:30:74:3b:9f:c3:15:04:e8:60:ec:37:bc:d6:df:e2:37:
a4:29:c3:56:84:c5:91:e4:9d:b3:8b:b7:f8:a6:61:f3:28:a9:
61:98:48:0c:db:95:89:77:37:0a:b5:74:df:09:58:23:15:a0:
85:1b:5c:b0:7c:4a:bd:bc:bf:fd:f8:d2:1d:d6:27:52:48:24:
ac:61:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:18 2025 by rpki-client