Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/sJa8reR2mkuVQCPsBOyH2kdgHt8.roa
File: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (raw, json)
Hash identifier: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=
Subject key identifier: B0:96:BC:AD:E4:76:9A:4B:95:40:23:EC:04:EC:87:DA:47:60:1E:DF
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 0194214464316D4801DD5FA7FC68D3B3EE57
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/sJa8reR2mkuVQCPsBOyH2kdgHt8.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57052
IP address blocks: 2a00:ad40:10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:31:6d:48:01:dd:5f:a7:fc:68:d3:b3:ee:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b096bcade4769a4b954023ec04ec87da47601edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:cd:9c:a2:e3:bf:a5:d9:a0:c0:6a:78:ae:
ec:53:e3:c3:77:80:7a:02:a7:74:d5:d0:f8:16:5e:
4a:1b:f4:d7:5b:46:a4:89:99:04:90:09:56:99:ac:
3d:bf:2f:72:7e:fe:1e:ff:71:f5:42:56:8d:df:77:
74:73:e0:64:7e:19:04:4c:b8:95:7a:26:cc:6d:5a:
cc:d8:58:78:08:fd:6a:3d:0f:ba:27:09:cf:d1:36:
3b:0a:5d:fb:57:0a:af:74:c1:08:0f:9a:f8:ae:c1:
83:64:e5:f9:eb:b0:de:ed:e4:21:b8:53:5d:18:83:
d4:f9:f7:22:ce:56:db:79:92:39:53:02:72:35:20:
2b:5f:fb:f5:a9:c7:05:a9:46:e0:3c:e8:4c:4b:99:
31:a3:fe:0a:73:54:6d:08:3c:8c:ce:7f:79:9a:6e:
ee:6b:a7:e4:de:3f:e7:39:f1:76:86:87:64:d1:1c:
71:0e:4b:22:18:8d:fc:8e:94:6d:02:27:a2:b7:f7:
f3:2a:ae:6f:52:8a:5d:e1:7a:f4:d4:9e:28:5d:35:
c4:90:17:e6:ee:e1:11:35:44:7e:b5:5f:06:d5:4e:
59:45:31:e1:c6:1d:c0:51:d5:85:e6:11:3f:cc:17:
00:12:0d:1b:81:04:7b:68:03:eb:ab:cf:d9:f4:bf:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:BC:AD:E4:76:9A:4B:95:40:23:EC:04:EC:87:DA:47:60:1E:DF
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/sJa8reR2mkuVQCPsBOyH2kdgHt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:10::/44
Signature Algorithm: sha256WithRSAEncryption
8a:8e:f0:37:da:f2:8f:23:e6:c4:e3:0d:4a:53:a9:90:34:54:
49:a4:33:50:2c:21:9f:f1:d1:d4:e8:f1:02:59:c8:8c:76:26:
a6:52:67:72:3c:e4:f3:42:c6:c9:3d:3b:f1:40:e2:b3:9b:44:
0a:9f:a8:12:07:eb:2a:9e:e5:db:f9:06:68:e7:0e:53:fe:ae:
3b:82:31:e0:8b:14:cc:bc:78:de:68:1e:a0:2e:fb:87:34:cf:
61:e2:85:8b:bd:1c:b8:c8:c0:58:10:cb:24:b9:39:25:c3:33:
0a:b5:f9:df:41:0c:b1:77:05:52:ad:90:44:6b:a6:95:1a:46:
96:ae:03:18:f9:31:b4:5b:70:33:2e:ab:48:69:38:f1:8b:2e:
0f:44:cd:e2:32:93:9c:0b:2b:72:06:79:de:b4:cc:55:e5:13:
5e:45:c4:ee:65:57:ce:0e:05:5f:da:f3:b2:95:e3:70:61:5c:
e3:d2:86:10:53:f4:57:35:62:6c:49:53:75:4e:cb:a8:f0:a9:
97:f5:13:aa:42:40:ac:3f:b3:10:d1:ee:ba:5f:16:99:95:cf:
2e:a9:64:b2:e9:6e:22:c1:f5:8a:57:33:5f:96:86:43:13:ba:
36:84:c9:45:54:1c:b4:31:e7:4e:a3:6e:74:af:f2:e8:5f:22:
9f:f8:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:09 2025 by rpki-client