Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/c5GR0CvkfkgJP50hkVwQxiZA7C8.roa
File: c5GR0CvkfkgJP50hkVwQxiZA7C8.roa (raw, json)
Hash identifier: H+OOhfte4ViJLC2qWeoEPiaOcajpT6H91Tk+JZt70Sk=
Subject key identifier: 73:91:91:D0:2B:E4:7E:48:09:3F:9D:21:91:5C:10:C6:26:40:EC:2F
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 019427B60620F54741B0E0ED1E7F98B991F3
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/c5GR0CvkfkgJP50hkVwQxiZA7C8.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35365
IP address blocks: 2a0c:6580:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:06:20:f5:47:41:b0:e0:ed:1e:7f:98:b9:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739191d02be47e48093f9d21915c10c62640ec2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:3e:0c:69:82:48:95:23:68:02:c6:fd:18:
1a:7f:90:5b:69:d3:9e:43:bf:9b:11:99:de:25:77:
a6:70:35:b8:89:f7:c7:98:68:83:18:dd:ac:a0:21:
03:97:e6:1a:3b:cf:47:43:4a:7a:c1:cb:e2:a2:cc:
f8:bb:ae:9f:ce:9b:82:02:9c:f3:13:7d:19:e0:24:
8b:2c:27:ae:91:7b:fe:bf:77:8b:55:dd:26:2e:3d:
9f:41:60:18:b6:62:8e:2d:71:07:76:79:f1:a1:c7:
5b:b8:64:57:7b:cc:6e:7f:dc:f4:4e:d5:5c:80:0e:
41:84:14:3b:7e:d2:8b:07:98:5a:ff:86:17:23:7a:
49:8f:29:be:eb:f9:c2:20:b3:4b:31:0c:68:ff:f7:
88:96:5c:10:64:77:0f:85:56:6d:49:3b:14:dd:aa:
c7:51:69:8f:12:89:90:b5:9b:33:e6:77:5e:f6:32:
64:b1:58:b3:c2:c0:ad:78:07:71:08:73:e8:44:07:
79:d4:cd:56:5b:78:2e:7f:b7:b1:06:71:5e:e6:aa:
5b:c5:7c:03:62:45:87:dd:e0:af:96:7d:25:b9:cb:
19:63:14:1c:c3:6a:99:05:d6:cf:54:7a:88:17:39:
77:e8:e2:a9:6f:2d:59:bc:98:2a:18:ff:fc:6e:d0:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:91:D0:2B:E4:7E:48:09:3F:9D:21:91:5C:10:C6:26:40:EC:2F
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/c5GR0CvkfkgJP50hkVwQxiZA7C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6580:2::/48
Signature Algorithm: sha256WithRSAEncryption
67:14:85:66:dc:bd:d3:ad:ca:e1:b8:16:01:b2:92:d5:db:de:
70:8c:e3:68:e1:3a:7d:2c:7a:f9:ec:f7:dd:1a:60:65:ec:2d:
c3:2f:52:93:5d:12:29:23:a2:1d:ec:b2:49:8d:28:78:51:df:
cd:cf:fc:0a:2f:b5:b9:66:a6:1e:e0:bc:d2:85:22:37:0c:3e:
f2:33:c2:99:21:d1:1f:58:3c:a8:2d:a3:3e:34:cb:98:9f:48:
52:dc:45:a3:4c:7d:b1:64:04:09:3f:5b:c8:63:d7:29:7f:8f:
01:35:38:2d:35:4d:e1:05:b8:e3:df:78:e7:c7:bf:30:74:3d:
71:d6:9e:a1:f9:92:0a:d6:49:fc:2b:e7:9f:ac:ac:59:95:81:
7f:8f:d1:f4:c4:fc:cc:31:07:08:07:49:39:ca:2b:0d:51:a0:
d6:aa:00:df:bf:86:82:bb:23:df:b3:0a:d1:ff:61:ee:8f:29:
93:f8:57:8c:a7:52:05:98:b0:fc:da:cc:bb:32:ef:41:63:7e:
3b:f7:d4:2b:ff:97:2a:c5:f3:9d:ca:03:b7:58:00:21:34:b9:
bd:bf:1e:75:c1:5f:04:48:95:f9:99:73:61:32:b8:90:93:a7:
e9:ca:af:5a:36:31:d0:62:64:fe:e1:f7:e6:ee:27:23:c5:32:
7b:66:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:29 2025 by rpki-client