Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa
File: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (raw, json)
Hash identifier: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=
Subject key identifier: 6E:06:48:F1:EA:BC:A8:B0:7D:71:12:AC:2F:3C:D5:CB:A2:21:7C:FC
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0194228D62AC2F6C0D1AA41B04385122522C
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31743
IP address blocks: 2a10:8800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:62:ac:2f:6c:0d:1a:a4:1b:04:38:51:22:52:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0648f1eabca8b07d7112ac2f3cd5cba2217cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:72:fc:d1:26:28:82:8b:ca:c5:b3:01:bc:
78:04:6d:f6:d9:5b:72:ce:3f:2e:d2:b8:81:99:34:
4d:87:0b:aa:ad:c9:98:b0:9a:c9:73:a9:c6:80:0d:
76:9c:20:61:84:9f:f6:13:f3:38:f5:f9:f5:70:c9:
bb:04:31:49:bf:dc:20:3d:ae:5e:02:f6:7d:f3:b7:
27:d8:bd:bb:7f:97:b7:a7:5e:eb:f4:f8:99:62:81:
be:de:2f:bd:62:23:70:87:5b:e3:ff:eb:84:36:50:
ac:c0:e7:d4:0d:25:e1:00:3f:46:d6:54:14:4b:54:
d5:0a:59:4a:f2:97:90:a0:a5:8a:55:34:9f:23:94:
fe:44:ba:fb:a7:5d:71:ab:d5:1a:75:d1:95:21:53:
76:7c:f4:d5:e9:54:c8:24:28:d3:5f:81:4c:b4:6b:
39:cb:17:f6:06:1c:c6:8c:8c:5c:5c:2d:aa:44:09:
75:3d:1f:1d:67:ba:20:83:87:1b:0a:9c:09:18:c8:
2c:b6:22:20:3c:e1:c9:cd:b6:ef:e0:b6:cb:df:bc:
32:6c:ac:18:4b:2b:35:17:03:2f:10:38:5a:67:dc:
c4:d9:6e:d6:e0:ca:70:42:44:85:7c:34:4c:7b:81:
e5:4d:47:88:c7:bc:9e:b6:e1:1f:3b:c8:38:93:da:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:48:F1:EA:BC:A8:B0:7D:71:12:AC:2F:3C:D5:CB:A2:21:7C:FC
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8800::/29
Signature Algorithm: sha256WithRSAEncryption
4b:e5:b4:ff:17:e3:50:2d:4d:f4:ea:a6:a3:93:a5:d0:9a:aa:
0c:f0:b2:54:bc:dd:eb:30:9a:a2:8d:49:62:70:b5:78:42:3e:
2c:05:d3:75:3b:44:41:c3:86:db:31:4d:af:b4:27:13:80:6c:
12:54:ba:92:42:fd:72:8c:da:90:33:8a:b4:a1:b0:33:82:f3:
83:ea:9a:64:45:5d:5a:67:b3:88:8f:77:11:ea:5b:44:4b:69:
9f:18:21:0b:60:87:4f:d4:20:d4:30:71:3e:c5:10:e6:9f:2c:
de:c1:c4:bd:da:2a:34:fa:ab:94:ae:45:09:8d:05:76:03:5a:
ae:b4:6d:dc:51:7d:be:aa:f5:16:6a:f0:3d:c5:e8:fd:4a:ba:
9b:77:0b:95:c5:c1:c4:f0:10:31:13:7a:ea:d3:17:0a:14:ba:
8c:f8:18:3b:21:02:86:3f:06:e7:4a:92:c2:02:01:69:39:76:
88:53:27:d0:af:09:35:97:0e:a3:0e:72:0b:5b:e7:a0:d9:66:
54:e2:f9:80:60:ff:6d:23:f8:a7:88:b1:23:b7:e1:f9:7b:67:
dd:36:e3:c6:fb:fe:9d:28:e5:b3:61:03:c6:8e:7d:ba:de:4b:
5d:46:dd:34:71:2a:97:58:69:77:63:1f:84:46:98:37:09:e3:
e2:6d:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:31 2025 by rpki-client