Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa
File: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (raw, json)
Hash identifier: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=
Subject key identifier: 07:19:3E:96:3A:1C:D9:D5:BC:42:C6:35:B7:A4:A7:96:3B:95:CE:B7
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019421B238DAE5672B671CFA489EE6335CF1
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211442
IP address blocks: 2a10:e1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:38:da:e5:67:2b:67:1c:fa:48:9e:e6:33:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07193e963a1cd9d5bc42c635b7a4a7963b95ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:3e:ad:14:7c:80:fd:9d:c3:c1:a7:0d:d8:
57:28:7d:28:cd:60:b0:1a:61:d6:2f:bb:e5:bf:db:
b8:af:67:e6:96:a7:71:75:f1:f0:41:37:57:b4:db:
27:f5:f4:b3:5d:ae:24:7c:60:93:bb:32:d5:b2:bb:
3c:9f:b3:b2:66:d6:d5:01:1c:fa:76:25:e2:af:7b:
35:1b:4a:a6:e2:56:27:f9:d7:f6:05:df:de:36:2f:
5e:fc:c5:78:fe:3e:f5:63:8b:0f:8b:be:4b:4f:79:
06:15:19:09:78:93:98:d2:0b:1d:b3:32:df:5a:97:
3c:d7:77:b1:71:5f:fb:8c:e4:98:c4:fc:39:66:5a:
95:6d:63:7f:18:16:fd:c8:3e:d2:3c:c4:49:8c:1c:
a4:b3:ea:39:a7:55:df:34:00:6d:ae:78:86:08:57:
28:71:62:94:38:eb:20:09:84:74:0c:49:bb:eb:64:
9c:fa:10:49:5c:65:0f:1e:55:0d:f5:e0:1a:ce:20:
55:c7:6a:b4:2a:7c:e3:c4:01:a3:7c:16:bd:07:7e:
5c:29:97:5b:85:34:f9:2d:33:f7:97:65:5f:76:d1:
65:a2:ac:a7:b7:7a:89:f8:fd:12:c8:09:1a:c4:cd:
24:5a:bf:3f:1e:f3:dd:78:30:57:00:0c:62:f5:31:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:3E:96:3A:1C:D9:D5:BC:42:C6:35:B7:A4:A7:96:3B:95:CE:B7
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:e1c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:dc:88:f3:bc:9b:10:4e:ee:09:fc:a3:1a:17:c9:7d:c7:d5:
8e:83:89:49:be:4e:19:71:b8:a0:8e:5a:d7:1f:2e:82:f2:3e:
0a:29:6f:54:07:3a:5f:40:93:8c:4c:78:91:44:59:02:13:8b:
0a:e8:d7:09:ad:e3:ac:95:db:49:c6:8e:64:3c:39:0d:58:d5:
b6:36:ad:b4:db:f7:13:26:bc:23:63:df:da:51:38:26:69:78:
7d:58:f6:b0:fe:f9:00:a4:75:50:5a:c2:50:e2:2f:a3:0e:5a:
c1:24:b4:53:0f:65:c0:da:90:c0:aa:14:5a:5e:8d:e8:fe:c8:
bc:aa:8a:8c:be:49:4c:d2:63:14:c4:30:8d:b1:7d:bf:0a:cd:
1a:e3:1e:01:73:d5:f9:19:d0:5d:da:2b:5c:fb:0b:52:25:6a:
76:1a:91:6d:54:05:8a:8f:9a:cf:8e:ad:b5:e4:96:b7:f6:44:
91:b9:0f:6c:81:68:f1:92:50:0b:a4:f6:a7:c5:ea:e8:6b:f4:
93:c1:5e:c3:57:8a:32:30:84:11:83:60:97:3e:57:f1:d4:e2:
98:5c:ba:89:bc:39:dd:07:84:f2:e3:4a:98:0c:5e:00:21:a8:
47:0d:82:9f:3e:ab:ab:f9:99:ce:e7:f2:d3:a8:cd:08:10:e3:
22:b4:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:42 2025 by rpki-client