Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ABuElM6_NHXhhyjrbNO7-7-4-tw.roa
File: ABuElM6_NHXhhyjrbNO7-7-4-tw.roa (raw, json)
Hash identifier: RB6lZGDNmRmLvQ7wPbU3Ifx1OhDqRcQW8eOAw1dgZcE=
Subject key identifier: 00:1B:84:94:CE:BF:34:75:E1:87:28:EB:6C:D3:BB:FB:BF:B8:FA:DC
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 0194266B9BC764D73F42AB554C70BFFF4721
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ABuElM6_NHXhhyjrbNO7-7-4-tw.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216415
IP address blocks: 2a05:cd00::/32 maxlen: 32
2a05:cd02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9b:c7:64:d7:3f:42:ab:55:4c:70:bf:ff:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001b8494cebf3475e18728eb6cd3bbfbbfb8fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:ac:09:ea:89:50:e8:27:85:4c:88:99:b5:
dc:a3:77:21:c2:ea:2e:65:ad:a6:f9:84:1b:48:e9:
b2:e0:7d:da:cf:14:02:61:26:8e:ad:ff:2c:a4:0a:
7f:27:1f:68:2e:61:56:7a:8e:9f:ce:64:99:ef:5e:
c0:a0:2d:f0:5a:11:bb:98:47:af:92:f0:92:ae:93:
cb:e6:95:f5:c9:28:24:a6:67:c6:fd:9a:07:63:75:
b9:b8:c3:52:81:cd:29:a6:75:c1:a5:4a:16:e1:8d:
06:30:d6:72:0a:80:aa:3e:3a:5f:f0:2e:02:df:23:
02:4c:eb:cd:2b:1e:b3:fa:21:0f:ff:62:56:4c:95:
35:56:36:64:e4:07:08:43:69:ee:5c:17:ff:13:fa:
1d:d2:1f:e4:62:73:da:1e:70:b1:9d:7a:23:02:bb:
74:83:62:9d:fa:99:d0:70:c8:89:d1:f8:af:f6:ac:
e7:8a:73:10:b5:52:71:71:d6:50:05:e8:9d:8c:52:
6f:7e:9d:da:8a:72:85:7c:26:2c:6d:3c:1d:3a:7d:
89:c1:7f:ea:ac:ed:4d:0c:13:9a:91:92:99:54:59:
fd:3a:0a:83:ec:54:fe:21:58:10:c6:c0:c0:d9:02:
cd:04:f3:07:a5:0b:26:36:d0:f4:49:59:68:49:e0:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:84:94:CE:BF:34:75:E1:87:28:EB:6C:D3:BB:FB:BF:B8:FA:DC
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ABuElM6_NHXhhyjrbNO7-7-4-tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:cd00::/32
2a05:cd02::/32
Signature Algorithm: sha256WithRSAEncryption
91:15:33:8f:55:8a:1a:51:b3:a4:68:81:44:53:2f:2b:49:8b:
d3:f9:9a:11:5f:cb:88:b6:55:bc:af:05:0f:95:44:e9:d9:48:
20:d1:31:17:b0:f5:19:50:70:09:72:7a:8a:07:a6:e5:78:b7:
97:3e:70:ea:79:6e:6f:8b:d1:ab:f7:63:ec:ab:18:12:1e:f7:
f0:9d:94:ef:0c:1f:6e:57:0a:b6:de:d2:51:bd:7d:63:8b:98:
c9:2c:8d:b2:4d:e2:e7:37:11:6d:cf:5f:c1:c9:d7:7e:39:10:
47:cb:80:9f:58:20:fd:5d:bc:00:2d:c0:f3:96:d3:40:55:0a:
f2:1a:be:a9:4c:57:bd:36:4f:01:0e:c2:6e:39:c2:f9:8c:e9:
91:05:ce:b6:5a:f1:14:2e:ac:f5:49:ba:07:1f:ab:4a:87:63:
2b:49:f0:2d:bd:9e:e7:e5:f5:ab:b6:3a:0c:90:af:d7:cd:e2:
a6:4d:94:91:9a:91:8f:04:98:a4:00:64:1f:80:65:0c:f3:ef:
27:01:ea:fd:7f:98:b3:27:17:e4:42:2c:3c:6a:b9:9e:3c:63:
5e:7e:52:c4:64:7f:f0:8d:97:a1:e3:69:58:49:00:29:70:ec:
18:1f:3f:a1:f6:8d:c8:26:37:bb:9e:07:80:62:03:fa:a9:6e:
04:90:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:15 2025 by rpki-client