Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/aWw5wJuzfBEHmyQaah8xYehdUG8.roa
File: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (raw, json)
Hash identifier: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=
Subject key identifier: 69:6C:39:C0:9B:B3:7C:11:07:9B:24:1A:6A:1F:31:61:E8:5D:50:6F
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019425FD630D1DC49B2FE5EA7B4F0A23F962
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/aWw5wJuzfBEHmyQaah8xYehdUG8.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 2a09:a6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:63:0d:1d:c4:9b:2f:e5:ea:7b:4f:0a:23:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696c39c09bb37c11079b241a6a1f3161e85d506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:10:5d:ef:72:19:32:f6:56:ab:74:95:c2:
19:f9:ab:f3:1d:73:d6:0f:c0:17:8d:e6:69:53:71:
a6:28:1d:8b:39:7b:ee:e2:a3:ac:2c:8a:ae:bc:19:
2d:56:1b:1f:be:88:90:ac:3e:38:ff:71:a2:e6:37:
83:dc:85:0d:1a:07:63:57:a5:5b:4a:12:7c:eb:50:
44:a8:5e:e0:35:eb:c1:fe:17:a3:25:6f:96:2d:55:
15:3c:e5:7b:56:3e:64:e4:a5:f2:63:56:74:8c:57:
84:4a:f2:4c:d3:c1:af:88:a5:a9:37:5c:a4:31:59:
73:06:2f:8f:b2:a7:1e:26:32:45:94:04:86:cc:4e:
fe:a1:b2:33:66:df:02:59:cd:c3:b0:26:c5:51:34:
b7:73:2b:d6:ee:41:ac:74:b0:7a:76:37:80:a3:46:
a6:86:b7:ca:9f:43:3c:62:a4:57:96:c5:60:7f:09:
39:e6:14:20:d6:8d:18:fc:8c:0e:4f:cc:33:13:0b:
4b:71:96:2c:f5:38:bf:22:b8:2f:7f:90:ef:5e:b9:
d7:0f:8c:f3:42:02:e6:ba:0a:24:e6:84:96:8e:81:
88:c0:5b:32:e1:e9:be:83:a8:eb:1c:aa:ee:79:37:
62:ac:cd:ec:ca:89:1a:a8:1d:2b:4e:37:08:27:42:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:39:C0:9B:B3:7C:11:07:9B:24:1A:6A:1F:31:61:E8:5D:50:6F
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/aWw5wJuzfBEHmyQaah8xYehdUG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:35:e6:15:f4:a5:ec:59:6c:9d:f2:33:bf:b9:b1:c7:15:d6:
3b:d5:31:f1:48:4a:ba:e6:41:98:54:eb:20:10:4a:d6:31:2a:
6c:99:2c:c3:72:76:a1:31:1d:87:7e:d6:26:93:a4:44:92:ed:
6d:2f:7f:cb:4e:f8:38:8f:e8:72:10:c9:f3:12:80:6e:0d:2e:
f1:0f:0a:96:4e:a8:7b:96:b3:2c:82:8e:ca:7e:5f:ea:45:b8:
b3:f8:45:93:2e:11:6f:f3:2f:9a:cb:82:2a:e4:6f:63:3b:4b:
2c:4e:0f:0c:10:24:9d:bf:26:b0:2d:dc:3c:8e:18:05:fa:ee:
5f:42:81:66:d5:80:88:e3:ca:01:19:7b:54:e5:2f:4f:f9:55:
7b:3c:e5:5e:b2:1a:33:1b:8c:aa:7e:28:c1:25:a5:c7:5a:db:
44:1f:7b:b5:dc:0e:30:7d:ff:27:c5:18:1a:d8:94:02:90:89:
e2:58:5f:84:76:58:f9:66:32:46:b1:c8:a2:d5:f7:89:10:7e:
dc:82:e2:94:ad:98:fa:98:35:b2:49:0d:0d:df:3c:bc:38:13:
28:07:16:7f:81:76:94:22:f8:16:59:83:39:24:4a:00:68:f5:
f8:c9:46:c9:30:65:95:76:87:e5:05:a2:f0:04:d3:ae:8b:af:
08:9d:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:45 2025 by rpki-client