Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa
File: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (raw, json)
Hash identifier: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=
Subject key identifier: 6F:9B:B4:3C:FD:8B:52:6A:5B:A4:D2:78:A8:07:48:97:7B:3D:22:32
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01941F8C6F21A36B7B86675180FDB2EC70DE
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212469
IP address blocks: 2a0e:e704:60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:21:a3:6b:7b:86:67:51:80:fd:b2:ec:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f9bb43cfd8b526a5ba4d278a80748977b3d2232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:49:98:9d:d3:86:04:97:4b:0a:df:4f:f2:
8a:17:78:3f:7c:d8:33:a4:68:59:1f:60:87:82:7f:
c9:c8:c6:f3:b6:cc:80:3a:73:90:3f:4a:51:23:80:
a5:fa:09:98:b8:09:6a:f5:52:63:9b:58:1e:d0:dc:
73:7b:c8:4f:6c:12:09:da:b5:7d:59:6a:29:95:36:
72:d8:cf:8f:6d:5e:b2:d8:52:d4:b9:96:41:a2:28:
7c:5c:9c:b6:19:33:46:98:3a:5b:ac:58:8c:af:80:
22:cc:ce:1d:c7:99:6d:34:07:35:10:55:5b:45:3b:
32:9d:8e:4c:2e:cd:b4:1c:a4:19:c0:bb:37:2e:90:
f6:bd:4e:a9:f2:54:83:4b:57:d4:25:b0:4c:43:6f:
50:7e:4a:0a:7d:73:24:7f:88:d3:fa:71:d2:ae:93:
c3:c0:58:5d:c8:aa:f7:f7:e6:e9:83:9c:28:50:e3:
57:f4:99:4c:f4:9d:03:57:3b:50:ec:95:79:87:af:
d4:79:b7:9e:cd:05:19:ab:7a:28:f1:ed:fb:4e:d5:
95:c4:72:e7:e2:d9:56:9f:30:31:e9:9a:a3:ae:25:
e4:31:5d:9d:71:2a:dc:b5:d2:10:5d:45:6e:cf:ac:
e8:12:9e:ca:20:44:de:e5:86:4c:17:ad:d5:d1:cc:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:B4:3C:FD:8B:52:6A:5B:A4:D2:78:A8:07:48:97:7B:3D:22:32
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:60::/44
Signature Algorithm: sha256WithRSAEncryption
a3:3c:ad:81:bc:35:e0:df:cd:34:1e:6b:e9:e7:07:2d:62:21:
c5:b5:49:ac:c8:13:ac:36:e2:24:ee:49:12:ec:30:bc:e9:b1:
01:a4:b8:67:b4:e8:5f:7e:2b:ad:c6:9d:e1:20:47:64:76:ff:
74:2c:eb:52:ad:55:83:30:b6:a4:ae:77:8b:65:43:02:a3:f4:
bb:16:93:6f:49:57:ff:96:81:03:71:c1:91:c9:30:99:42:d5:
ed:43:eb:b6:f7:eb:8d:0f:de:03:0d:ed:65:61:1c:21:57:66:
b1:21:e1:d9:27:35:a5:94:d8:47:0f:78:7f:b8:93:60:e5:12:
a9:35:f6:76:ed:8a:c0:f0:4e:81:56:9d:aa:e9:25:3a:83:36:
2b:59:2c:c7:e1:af:0f:41:2c:52:ed:cf:f3:f9:03:3b:f2:3d:
a0:fa:79:a1:b6:44:11:e9:55:4a:70:da:c4:4a:f4:c9:03:e9:
ea:da:33:22:7e:62:1a:03:23:bd:e5:09:c9:c5:12:bd:fc:0c:
c8:c5:34:4b:af:1f:e4:c3:01:1a:9b:ea:cb:92:a5:cb:fb:10:
eb:b1:dd:48:98:a0:f4:17:ec:38:e6:81:4f:4a:9f:e0:90:49:
43:bc:e7:eb:98:ea:bc:06:95:d3:3a:09:9c:29:e6:e7:47:7c:
f4:bf:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:09 2025 by rpki-client