Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/54SI4AU08cWeiBESR3sCSHx0TbY.roa
File: 54SI4AU08cWeiBESR3sCSHx0TbY.roa (raw, json)
Hash identifier: ogC6E7nBlCKY8Q7uANOLw5dJbxOpZ0GvO/Ezuu8OGxE=
Subject key identifier: E7:84:88:E0:05:34:F1:C5:9E:88:11:12:47:7B:02:48:7C:74:4D:B6
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 0194221FA6D0D2DCBCD6E9043969AED620B4
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/54SI4AU08cWeiBESR3sCSHx0TbY.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214328
IP address blocks: 2a10:f900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a6:d0:d2:dc:bc:d6:e9:04:39:69:ae:d6:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78488e00534f1c59e881112477b02487c744db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:d0:54:ec:79:13:54:46:d7:11:46:0a:9d:
ae:47:21:b5:ca:a7:9f:37:90:72:da:86:db:76:c1:
cf:c7:f0:e9:6d:b6:99:ea:c2:49:4e:58:e6:1d:43:
ed:25:a7:13:30:d2:76:95:2e:68:22:36:84:a9:07:
07:20:12:73:40:f7:f2:f5:86:f3:79:8e:90:26:32:
73:06:ec:97:a3:8b:f5:81:21:35:2e:2a:c4:71:fa:
96:68:17:82:eb:c6:4e:20:b0:57:4c:40:2f:ff:d9:
ee:2c:1b:98:37:92:cb:9c:39:ce:de:35:1e:0a:a6:
ba:e6:7a:e5:4f:ac:db:1b:e9:b9:4f:70:62:95:d3:
e2:84:80:e4:84:d5:49:a4:bf:37:c7:8f:15:55:36:
b6:48:81:50:19:7c:06:38:ce:14:08:b2:e6:9b:db:
80:27:7e:d4:34:24:34:17:2e:fa:4a:ae:cf:d7:e7:
0a:84:10:66:47:21:56:75:99:e4:10:8a:a9:67:6e:
0a:a2:f8:23:f4:c5:fb:8d:10:ae:5c:8f:18:c8:e5:
11:ad:16:a7:79:a9:dc:7a:be:7a:01:90:5e:75:af:
a9:66:c8:f0:db:f0:84:08:4b:27:7b:1f:c2:51:62:
81:0b:de:53:42:e0:74:be:fd:2b:a0:8c:71:56:f1:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:88:E0:05:34:F1:C5:9E:88:11:12:47:7B:02:48:7C:74:4D:B6
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/54SI4AU08cWeiBESR3sCSHx0TbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f900::/29
Signature Algorithm: sha256WithRSAEncryption
13:8f:42:86:8a:df:91:ca:8b:75:02:66:19:72:a9:7c:49:52:
85:f2:77:1a:d0:2f:d7:ad:47:d3:51:f0:63:07:7e:e0:8a:61:
3f:74:62:15:78:61:ea:18:cc:38:a4:7a:b1:1d:6e:1e:d8:43:
a4:51:4d:12:49:06:ed:76:ce:f8:b9:05:2a:e5:9c:a9:21:48:
c7:67:a5:69:14:85:5a:ab:d4:5e:77:ce:ef:f1:65:98:7e:fd:
37:f9:59:9f:24:cf:54:a2:51:9f:50:de:f9:63:61:5e:5a:d5:
ee:98:86:80:3c:f1:c4:ad:85:c2:aa:b0:f8:d7:8d:dd:6a:14:
03:81:0d:9c:e8:45:9c:68:a9:82:af:37:3f:f4:79:d9:35:20:
5e:c6:9b:8f:16:ff:7c:2f:da:f5:a0:66:3e:ef:88:5b:f3:78:
bc:5a:36:a4:c8:55:83:e1:19:ff:7a:cd:30:99:e5:4b:35:e3:
e0:01:3d:2c:79:f6:cb:c2:15:ba:c1:4c:1d:75:65:8f:c7:d6:
be:14:18:9d:75:47:81:b8:ed:ea:b4:28:69:e5:b7:a2:34:75:
7a:bf:d5:b7:a1:9d:c5:05:6e:0a:b1:aa:d0:a6:67:62:ce:fa:
10:c4:5a:b1:44:73:e3:4c:bd:3e:c1:b7:72:9d:e1:69:46:dd:
c2:da:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:42 2025 by rpki-client