Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa
File: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (raw, json)
Hash identifier: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=
Subject key identifier: D7:E0:58:9A:EA:CF:AF:92:C0:12:C6:5B:83:72:24:A9:04:3C:6D:31
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01941FFA75BD63E2020BB6FDBA582218799F
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202590
IP address blocks: 2a04:5d00:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:bd:63:e2:02:0b:b6:fd:ba:58:22:18:79:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7e0589aeacfaf92c012c65b837224a9043c6d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:00:dc:8b:9d:a7:4e:2a:e1:2f:8d:9f:ad:
d6:a8:39:f3:d4:fc:d9:9a:95:82:71:5e:b9:f2:88:
78:ec:4e:54:a9:0b:a6:ed:8c:c8:fc:2c:95:c2:12:
bb:63:d7:f9:2f:1e:fa:df:3a:dd:af:56:05:a8:a6:
74:a0:af:b6:e5:ce:e3:22:29:5c:3b:3d:fd:bf:de:
d1:01:2d:7f:39:92:1b:9b:4a:57:c7:96:29:0a:67:
d9:c2:6a:57:3c:48:97:b5:21:a4:18:0e:50:0e:fa:
c0:ab:d9:f3:1e:87:92:02:a4:36:49:a0:b9:e1:71:
da:9f:36:3b:04:3e:3e:6e:4f:e3:b1:b4:c9:ee:52:
9c:7c:e2:8c:c6:6f:2f:59:09:b1:0c:cd:27:b4:78:
ed:23:7b:f4:50:37:97:dc:f7:68:23:e2:dd:14:ec:
aa:5f:a9:7d:c4:52:c3:e1:e5:21:d3:22:c7:42:1c:
1b:0e:5d:ad:16:21:b5:af:4a:d1:d6:d4:27:53:71:
d0:27:c1:7e:a5:18:a4:f7:50:32:d0:63:f9:64:c9:
5e:57:d1:69:f2:5d:da:09:2d:9c:80:01:f2:24:e9:
da:8f:a5:ea:d8:2c:33:91:df:64:0b:88:bb:ab:e6:
3b:21:d7:09:df:d8:64:01:b5:9a:fe:2a:a2:0a:5c:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:58:9A:EA:CF:AF:92:C0:12:C6:5B:83:72:24:A9:04:3C:6D:31
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:70::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d4:f0:4c:7e:57:51:1d:42:e2:b1:31:3f:e5:a0:39:7f:20:
3d:52:55:8e:0b:7e:d4:78:9f:01:d0:a6:52:7e:f9:7d:58:b7:
a7:92:4b:9f:3a:f2:84:8b:69:35:05:9d:f8:a1:f0:8d:5a:16:
16:7d:84:85:e7:e3:e8:58:fd:1a:89:8d:64:e6:96:92:e0:c5:
3f:84:1e:03:c4:8d:bb:23:62:ef:67:9b:17:25:d6:46:5c:12:
a6:78:f2:8d:1f:a4:5c:1b:b0:e4:d7:6a:f1:61:6b:9f:07:0d:
f4:07:fd:73:a1:1e:29:c8:e3:78:ec:90:c7:5a:11:dc:70:25:
01:bc:92:9f:27:02:20:4f:22:2c:45:44:01:fa:b6:99:d9:8d:
db:6d:66:44:93:fc:40:10:71:6f:8a:b1:c8:34:11:43:11:79:
a7:b8:6f:7b:e6:bf:73:ad:d1:41:5f:b1:52:55:81:cd:94:0d:
93:2f:2d:5f:31:d7:92:12:76:f5:5d:59:cd:09:b7:48:27:2b:
a0:45:41:14:43:1a:8c:62:b7:c8:d2:52:4e:58:b2:89:31:fe:
f4:dd:7c:59:8c:a0:c1:14:39:be:73:05:f0:53:98:db:0f:69:
d5:80:be:8d:79:25:9e:3d:eb:23:e4:93:23:27:22:b8:14:b2:
74:35:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:43 2025 by rpki-client