Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/5QAY4a4yajmPvw7i0HpL0HsiAR8.roa
File: 5QAY4a4yajmPvw7i0HpL0HsiAR8.roa (raw, json)
Hash identifier: P+FTmvC1Smnqkmb6HULtl3qRQDJVYoSl4epwSPUFI94=
Subject key identifier: E5:00:18:E1:AE:32:6A:39:8F:BF:0E:E2:D0:7A:4B:D0:7B:22:01:1F
Certificate issuer: /CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Certificate serial: 01879A09F9F03D41D94216D67FF0CBC627B3
Authority key identifier: 51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/5QAY4a4yajmPvw7i0HpL0HsiAR8.roa
Signing time: Wed 19 Apr 2023 15:02:37 +0000
ROA not before: Wed 19 Apr 2023 15:02:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52212
IP address blocks: 2a07:f880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:09:f9:f0:3d:41:d9:42:16:d6:7f:f0:cb:c6:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a4a49050350a8a8d4321c8850654529b78f8bf
Validity
Not Before: Apr 19 15:02:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e50018e1ae326a398fbf0ee2d07a4bd07b22011f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:27:55:ea:8c:c0:9d:5c:84:ff:2a:68:03:
c6:fb:98:1a:ae:ba:50:4c:f0:52:b7:d7:26:1a:46:
54:61:bc:68:62:a7:72:8a:1a:68:1a:0b:ef:d2:f3:
5d:ee:a6:8a:45:54:a2:cf:be:c7:56:99:f2:23:0c:
2d:a9:f9:f1:4c:74:7d:ab:c5:58:b8:04:d9:c5:da:
74:b5:51:c3:be:28:25:da:6b:fc:2b:ee:00:32:46:
8d:9e:9d:af:fe:ec:02:b3:10:55:0f:32:d2:1f:16:
48:fc:f3:84:29:94:71:34:8b:12:86:61:b4:fa:85:
24:18:4d:57:f9:ab:b7:64:36:26:4b:42:c9:c6:cf:
c9:62:ae:aa:7f:76:a0:c0:a0:a8:48:74:d0:ca:a0:
70:a4:f4:37:3c:60:91:35:8e:81:98:fb:db:24:45:
ed:83:77:ce:7e:c2:40:26:36:c0:47:ce:6a:4b:ab:
98:c6:4c:8c:35:0a:40:8e:e2:6a:53:6c:5c:a6:9e:
eb:02:88:b5:e4:b7:e1:4f:4d:db:1d:1d:94:a5:19:
4a:7d:8c:e5:8d:0d:81:43:0a:9a:d4:33:52:7b:27:
9f:4a:b5:b7:45:ab:e1:60:8a:f5:8d:64:c2:95:af:
de:2b:fc:12:bb:b8:6f:d3:d8:55:47:1a:d9:65:af:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:18:E1:AE:32:6A:39:8F:BF:0E:E2:D0:7A:4B:D0:7B:22:01:1F
X509v3 Authority Key Identifier:
keyid:51:A4:A4:90:50:35:0A:8A:8D:43:21:C8:85:06:54:52:9B:78:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaSkkFA1CoqNQyHIhQZUUpt4-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/5QAY4a4yajmPvw7i0HpL0HsiAR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4089e8-bf78-4653-a5dd-08b4eb909f49/1/UaSkkFA1CoqNQyHIhQZUUpt4-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f880::/29
Signature Algorithm: sha256WithRSAEncryption
4d:2f:dc:29:f0:00:2e:cd:bb:e8:b4:70:bf:ff:6b:ec:71:b0:
6c:fa:da:06:7e:b6:00:85:99:1d:30:81:e5:59:23:b1:11:cb:
12:28:f3:aa:21:80:8a:e1:ce:3f:bd:59:dd:95:7f:c0:34:58:
a2:ac:a8:aa:65:8a:85:62:1b:f3:0f:9c:38:1e:64:a4:6a:87:
67:83:e0:57:40:4e:cd:ad:2e:ba:a3:e4:bb:ff:53:9c:59:92:
b5:2e:2b:36:f4:86:8e:1c:61:cb:f2:89:f5:2d:eb:05:1e:de:
58:d6:4a:9a:c5:c3:a6:31:71:3c:41:b3:7b:51:c5:03:22:9c:
2f:f5:dc:66:e1:7a:77:c1:8e:e9:9c:66:72:e9:7f:d6:ec:15:
b4:47:7d:c5:83:64:c1:80:61:38:0a:f5:66:47:d3:eb:32:25:
c2:16:73:01:f6:8a:b1:e4:fc:0e:64:a4:a7:b4:f2:a3:39:f4:
04:b1:5a:19:fe:04:3f:50:9b:1f:13:d6:71:f0:c2:c4:38:45:
d4:8a:e3:4b:50:ff:57:a2:cc:39:41:72:d7:e5:42:8d:a7:75:
e8:2a:c4:71:89:27:46:3b:43:f8:7a:d3:84:ea:3e:c9:a6:8a:
9d:0b:03:e1:9d:20:ef:ee:b8:eb:22:f1:34:ba:df:b9:f1:f3:
13:9b:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:03:27 2025 by rpki-client