Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa
File: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (raw, json)
Hash identifier: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=
Subject key identifier: 1B:C6:71:66:FD:EB:02:C7:72:8E:46:48:59:B9:AE:DA:D5:D5:FC:E8
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019427484ED2404BB437B99F7A62AE118AB0
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 2a0a:c640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:d2:40:4b:b4:37:b9:9f:7a:62:ae:11:8a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc67166fdeb02c7728e464859b9aedad5d5fce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:48:6b:d3:65:17:44:1e:c6:a1:d9:a9:69:
30:86:13:c6:be:db:a1:61:12:6e:77:9d:7e:f0:d9:
d3:7a:67:76:b8:e8:35:c7:ce:a6:2b:1f:ba:94:99:
8c:ea:28:52:d5:c0:90:ba:b9:2f:a2:26:3d:34:d7:
03:5a:b8:84:57:f9:f6:be:2b:d8:b7:37:64:85:4e:
05:26:d9:a9:25:dc:bd:be:ad:29:fa:f1:7c:ea:c1:
e7:0d:18:31:64:b2:5f:b4:cc:e9:28:ba:08:d7:50:
93:0e:56:76:13:aa:cf:d8:27:50:7e:07:65:45:c2:
49:d1:ab:a2:05:f9:86:3e:10:e9:9f:95:6c:ab:bb:
11:96:92:05:95:c9:0a:91:f4:d4:44:5b:db:8a:be:
c6:17:d5:07:b1:b4:7f:f8:f7:09:0a:08:82:71:04:
05:11:82:dd:03:b4:cb:b7:d6:3b:87:94:1d:98:5f:
d8:aa:e7:f0:2f:92:02:53:00:b2:ee:bd:4b:47:c9:
b2:9d:75:e8:e3:fe:6d:a3:63:7a:df:7e:72:f2:a6:
59:8b:91:07:66:92:68:c9:ca:56:81:26:99:99:43:
19:6f:41:cd:11:90:02:02:66:78:0b:e5:5e:ae:85:
5b:1c:2e:7e:a6:59:7b:72:c1:7a:af:ff:a5:e3:34:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:71:66:FD:EB:02:C7:72:8E:46:48:59:B9:AE:DA:D5:D5:FC:E8
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c640::/29
Signature Algorithm: sha256WithRSAEncryption
36:d6:c4:38:1d:a6:f3:0b:1d:d5:b8:23:e0:bf:ca:1c:aa:46:
d7:41:1a:c9:3f:57:cd:a0:ab:d1:b4:c7:86:3d:f9:1b:11:c6:
af:2c:57:bf:54:b8:e1:03:82:58:e7:10:0c:71:dc:f2:ab:64:
be:35:a3:b2:47:16:80:6c:5f:db:cf:a5:cf:0b:a4:75:26:dc:
73:d1:45:0f:64:ba:cb:a3:75:cb:81:ca:2e:e4:8c:f2:25:71:
21:b5:50:90:85:03:2e:aa:7e:8c:2b:94:52:a5:6c:24:c9:27:
cd:39:d1:6d:59:5a:bd:c6:30:41:16:e6:87:e6:6b:b0:7d:db:
05:a3:1d:d3:8f:93:41:9e:17:4c:68:0e:25:8e:5e:7a:47:ea:
98:21:95:99:ef:3c:ff:60:08:b5:df:ae:4f:c9:b2:10:e6:52:
1e:39:be:ab:9b:16:ff:63:bf:08:5f:a5:2c:fd:13:42:64:aa:
d5:78:77:ec:fb:c1:9c:33:d6:70:e3:6a:9e:57:a2:2a:c0:68:
14:e0:53:ac:d7:4e:d7:8b:e2:fc:a4:02:f6:46:04:c0:39:2b:
cf:15:e6:b6:0f:c3:06:8c:a6:f4:f0:82:c3:da:dd:10:f4:ea:
3f:b2:8f:42:ee:00:58:c9:18:99:52:fe:ea:11:29:64:69:b3:
d2:b4:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:24 2025 by rpki-client