Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/L2g5JebuYY7V2mQAYgdmVvxTDpM.roa
File: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (raw, json)
Hash identifier: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=
Subject key identifier: 2F:68:39:25:E6:EE:61:8E:D5:DA:64:00:62:07:66:56:FC:53:0E:93
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019424B27B09E186A92C9E3BAFEC4DF3EA6A
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/L2g5JebuYY7V2mQAYgdmVvxTDpM.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 2001:2020::/31 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7b:09:e1:86:a9:2c:9e:3b:af:ec:4d:f3:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f683925e6ee618ed5da640062076656fc530e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:87:08:b6:3e:dd:0d:5d:f3:84:54:5b:b6:
19:59:9e:4f:d1:f9:79:65:7f:7b:fd:f3:a8:d6:15:
37:ae:bb:72:3f:80:1c:1a:5d:d9:c9:2d:78:db:fe:
70:b7:a7:c9:97:4e:b9:c4:de:c0:47:7a:b5:af:73:
dc:d3:5a:87:79:cd:b0:dd:85:e7:fd:11:5b:e6:e5:
df:e1:ac:40:76:16:0f:7a:5b:0f:39:af:4a:28:35:
1e:2c:7a:f9:73:e6:51:d7:35:c9:7b:4c:06:3b:6f:
44:a7:76:d1:09:92:56:ed:62:4b:4b:97:27:f7:cd:
f2:1b:34:bf:c3:f0:3a:ac:cf:c9:22:43:6a:76:af:
40:8a:0c:fb:e2:39:0a:50:61:36:98:fe:05:d1:2c:
72:47:94:de:61:c5:81:be:dc:24:2a:3d:43:21:4c:
8f:ea:20:54:cf:4a:57:29:fd:18:f5:e3:8a:95:5c:
c3:28:a7:8a:4a:84:a5:cd:40:8d:10:29:11:62:b5:
e1:9b:e9:4a:7c:ee:fb:02:08:5a:3c:51:90:5c:0b:
63:ff:41:c5:66:9f:cb:d5:0d:2a:e4:01:a0:8b:e9:
26:b9:e1:30:12:e7:ba:9b:2f:07:9f:b6:b7:94:7a:
1e:33:5d:cb:a1:b1:be:27:02:76:bf:0c:99:04:0c:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:39:25:E6:EE:61:8E:D5:DA:64:00:62:07:66:56:FC:53:0E:93
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/L2g5JebuYY7V2mQAYgdmVvxTDpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2020::/31
Signature Algorithm: sha256WithRSAEncryption
26:58:d9:2e:25:db:ef:93:7f:7b:45:9b:d0:e3:24:58:8b:3b:
70:6c:c1:d1:f1:eb:8c:bf:1c:56:96:ae:21:ab:bd:5b:4a:3f:
3a:e1:3e:86:5d:be:a2:7c:bd:62:27:26:f9:3a:7d:71:4e:f9:
d4:b3:8f:95:b1:7d:00:bf:5a:58:fd:0c:30:f9:e8:d4:f1:11:
c9:ca:e4:b1:28:79:d5:30:e0:d9:6e:cc:bc:06:52:e1:c8:b5:
92:bf:e8:ec:18:b7:7d:96:82:68:6b:92:2f:ae:a0:8b:66:c8:
6a:e2:9a:cf:48:f0:9e:14:e9:37:54:d2:f8:d4:da:f6:da:5d:
2a:d3:ce:2a:64:5d:62:2c:49:a5:11:29:36:a7:72:a3:dc:80:
dd:26:60:0c:c7:e8:4a:ed:3c:51:71:15:0c:5b:d2:b4:23:60:
f1:e0:a5:66:46:6b:e4:90:96:63:c8:42:60:f9:95:05:40:04:
a7:2c:66:1e:e9:b0:cb:d4:ae:af:a3:09:10:34:81:33:12:03:
6e:3f:50:6d:a9:4e:d1:e4:95:5b:8b:99:ed:15:1c:7a:f4:df:
7a:bc:8c:51:67:fe:16:de:e6:40:8d:5e:2d:db:9e:e4:6a:cd:
34:c5:73:e3:d3:63:5a:43:8a:a6:d1:b3:21:69:df:59:4e:80:
10:2b:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:11 2025 by rpki-client