Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa
File: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (raw, json)
Hash identifier: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=
Subject key identifier: A4:16:B7:64:86:1C:8E:67:2A:56:6B:C0:1E:C8:69:78:0F:98:37:2F
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0194206804903D57C13F0DDE0BD04478B5EC
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2a03:96e0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:04:90:3d:57:c1:3f:0d:de:0b:d0:44:78:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a416b764861c8e672a566bc01ec869780f98372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:c8:3a:62:2f:90:65:97:b7:86:a5:80:5c:
90:70:77:2c:35:40:84:84:4a:29:ab:93:34:64:40:
8f:61:c5:6d:fc:76:e8:57:72:11:b2:14:a3:12:4f:
43:a6:cf:83:af:92:24:da:42:c8:76:26:7c:ce:d1:
e8:59:80:67:9b:71:4e:cd:78:0a:7e:1a:08:55:fa:
0d:9b:c7:9f:d1:90:17:b8:40:57:c5:06:f4:04:a7:
5a:73:90:6b:07:4a:33:8c:b7:1b:0a:a0:67:83:43:
cb:1b:1d:93:b6:1f:ac:25:f0:cf:5b:57:a2:b5:7b:
38:bc:0b:80:14:ad:2c:70:33:e2:3c:89:f7:50:48:
15:64:ee:2e:18:81:e5:22:02:31:cc:50:21:a1:93:
82:45:02:47:4a:7f:26:06:02:ce:36:9c:12:58:be:
c8:f2:d9:d8:3f:43:73:1a:c6:8d:05:f9:c9:63:2c:
24:2c:13:ba:b0:69:16:b8:74:28:b8:2b:bc:dd:4a:
38:97:b1:c5:5f:af:73:10:b7:39:79:02:90:8f:3e:
f4:31:98:10:54:0a:19:ee:d7:2a:e4:9f:af:a9:3b:
4a:de:08:11:4f:45:e3:57:bf:b6:c7:68:ff:0d:f4:
91:82:6c:7d:82:61:9a:66:b0:b7:c6:2b:89:f7:bd:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:B7:64:86:1C:8E:67:2A:56:6B:C0:1E:C8:69:78:0F:98:37:2F
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:96e0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
14:ee:97:d5:35:70:01:82:07:76:f5:ca:75:42:c0:af:43:2a:
3e:c6:2d:8a:4f:16:99:5f:b0:16:23:41:d6:eb:5e:ab:12:02:
29:74:76:aa:64:24:af:fd:d9:f8:1a:b2:b8:dd:eb:c8:33:13:
eb:73:b5:76:59:6b:1e:8c:ac:de:5c:f5:3c:70:1a:ea:5c:cf:
1d:d3:8e:51:38:d5:55:b5:3b:0e:d0:d9:36:c6:ac:2e:9e:e8:
51:ef:37:ee:57:e1:22:e1:4f:5f:77:68:e4:aa:e5:d9:ef:9c:
ab:31:81:48:39:38:14:78:c0:88:81:fa:35:89:9c:27:b6:9d:
2e:e4:f8:de:06:f5:2f:a9:1e:56:66:d5:64:73:84:df:a9:0d:
ac:fe:8f:5c:15:25:59:6e:10:4a:4f:2f:d4:86:9a:75:62:b2:
1e:2e:ba:97:20:62:e9:0a:9d:32:5c:7a:32:ec:50:03:6c:d4:
0e:72:04:a7:f7:e7:84:2b:fb:cf:8e:78:a4:a3:7a:ef:1e:1a:
1f:05:38:2b:53:67:34:7a:64:59:e5:aa:fb:8f:83:26:a3:15:
cc:a0:d9:01:a8:f1:a2:f1:22:9f:f8:29:db:d0:41:42:06:1a:
44:f6:f5:f6:cd:5b:05:f6:af:35:a1:4f:79:f2:87:4b:14:4c:
34:c6:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:49:59 2025 by rpki-client