Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa
File: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (raw, json)
Hash identifier: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=
Subject key identifier: E6:E1:6A:30:DD:DA:5E:56:CF:43:24:7F:CD:5F:9A:4A:17:68:37:F6
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019425218960C1FA44E5B54A16F6BF58E948
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41111
IP address blocks: 2a0b:cd41::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:89:60:c1:fa:44:e5:b5:4a:16:f6:bf:58:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6e16a30ddda5e56cf43247fcd5f9a4a176837f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:7e:18:db:39:ae:fc:0d:f5:f4:20:72:cd:
1f:eb:d1:cf:8c:48:01:92:01:15:8e:c8:96:44:17:
d3:a8:b4:a7:f5:e1:01:44:98:35:f3:75:57:2e:4d:
ca:0c:9e:0c:53:e5:09:5d:c5:2a:b0:b6:d3:7b:77:
e1:54:46:7c:e8:45:01:11:ee:2a:5f:17:a0:a3:04:
60:2e:fb:99:33:ab:5d:57:96:47:b4:ec:34:0e:cd:
9c:2b:c8:bb:cd:36:77:86:03:fc:15:ee:c1:35:cb:
f1:28:ba:ef:66:0f:77:7b:9e:93:f6:63:38:83:6d:
36:c2:9f:8a:be:b1:af:da:76:06:3d:89:72:df:cd:
7f:09:8f:07:51:4f:4e:d0:26:84:1b:62:59:97:49:
d0:71:e7:cd:0a:88:b8:62:37:2b:ed:62:8a:a5:96:
88:a3:64:7b:2f:49:e4:24:8f:75:58:4b:7a:51:fc:
99:3b:6a:e2:bf:9b:50:76:3c:66:d1:e8:5c:01:c0:
5c:3d:2e:7a:21:2a:b4:49:9d:d6:de:da:5d:62:4f:
74:41:9c:4b:e8:f7:6e:4a:51:61:e5:de:3b:0a:ad:
50:6e:28:b6:bc:95:02:10:be:e2:1f:21:12:b3:68:
d6:49:6c:e2:94:17:a3:89:0c:85:81:95:5d:5f:65:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:6A:30:DD:DA:5E:56:CF:43:24:7F:CD:5F:9A:4A:17:68:37:F6
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:cd41::/32
Signature Algorithm: sha256WithRSAEncryption
ae:c2:65:3c:4d:ff:94:5c:7f:dc:4c:66:7b:8a:e8:29:ab:53:
73:17:25:f3:11:7d:eb:3d:ea:a5:2c:91:64:5e:18:0a:99:74:
62:b7:64:c4:24:d5:ef:24:db:45:9b:f5:e3:7b:cc:80:7e:6a:
27:7d:6a:86:61:9f:fc:65:3e:2c:60:26:1c:8b:44:f3:ca:72:
78:d4:e9:13:2b:c3:24:a9:de:da:53:7c:92:05:96:84:73:f7:
b6:f3:3f:3c:cb:9d:6a:b8:72:66:46:a3:51:78:59:b8:7b:21:
6d:da:c1:bd:ae:01:53:23:69:28:42:05:43:8f:40:87:66:de:
28:81:82:3a:54:90:19:49:35:8e:01:58:6d:98:e6:07:17:30:
99:c4:45:95:5f:26:7a:94:cf:79:a3:b3:0e:71:fd:6c:1f:a9:
4a:3b:36:ef:39:ed:d4:5f:31:79:58:e8:d0:bb:3e:0f:99:c9:
90:f7:c6:29:c5:3a:b3:db:0f:39:6c:3a:41:3a:16:e1:51:13:
02:19:cb:f5:74:a4:d1:7c:5f:b4:0b:96:1a:24:a9:59:4c:54:
6c:57:af:66:be:50:f5:9e:66:95:5d:af:6c:50:ac:d4:a6:22:
4b:44:51:6f:1f:6f:91:c5:38:40:57:83:19:a2:8b:77:fb:45:
74:42:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:03:02 2025 by rpki-client