Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/5giw-glAqkb4ga3tho0-9kOiFpQ.roa
File: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (raw, json)
Hash identifier: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=
Subject key identifier: E6:08:B0:FA:09:40:AA:46:F8:81:AD:ED:86:8D:3E:F6:43:A2:16:94
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019421442C03765FB82A1062A059D8BC1803
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/5giw-glAqkb4ga3tho0-9kOiFpQ.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16097
IP address blocks: 2a0b:2400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:03:76:5f:b8:2a:10:62:a0:59:d8:bc:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e608b0fa0940aa46f881aded868d3ef643a21694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:d5:65:4f:19:12:2b:83:ea:ed:d0:4c:35:
0d:3c:40:a7:8b:d2:17:4b:80:83:f6:b9:5e:46:17:
f5:28:3e:30:1e:b4:f3:13:5e:cb:a7:df:19:6f:b8:
81:af:28:aa:c1:8d:84:82:9d:6f:1b:e9:4b:de:0c:
fc:d8:a1:77:eb:5a:4e:5c:80:0e:3d:6d:15:df:0b:
5a:62:74:ef:48:72:62:fd:da:ca:bc:bc:32:97:61:
7f:17:9e:93:ac:7e:fd:0b:13:b6:d8:35:48:30:88:
88:54:46:34:5d:8f:6e:70:e5:8b:1d:77:58:be:66:
7d:dc:16:48:bf:c5:13:4b:00:f7:6f:a2:1e:24:aa:
4a:1d:00:91:d7:27:1d:1b:05:c2:ba:f0:2d:c9:2d:
25:e8:ed:da:65:ae:c3:1d:51:94:6f:7e:c3:ac:f7:
8b:31:2c:29:59:da:4a:e6:10:1c:9a:2d:f2:23:0a:
94:eb:b7:bd:42:c2:49:cd:71:e4:31:b1:3f:1e:f8:
62:cd:0d:a5:de:64:8c:f2:52:99:b0:04:79:2a:d7:
e2:8d:6e:f1:b1:d9:ee:02:d7:52:f9:11:8e:72:8f:
6f:da:d6:6d:59:62:f3:0b:b7:7e:60:79:91:eb:65:
29:d2:f4:a3:fb:53:ea:c7:c8:c8:5c:47:f8:07:bd:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:B0:FA:09:40:AA:46:F8:81:AD:ED:86:8D:3E:F6:43:A2:16:94
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/5giw-glAqkb4ga3tho0-9kOiFpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2400::/32
Signature Algorithm: sha256WithRSAEncryption
6a:60:b9:4b:07:d9:12:4b:98:0d:01:8c:31:ff:1a:8d:7d:56:
77:e2:78:c0:47:6c:89:ad:6f:f8:99:b3:a8:b8:8c:4c:3b:79:
50:21:0f:7f:57:4e:bd:b3:04:55:44:47:b3:f3:62:ce:f4:11:
8c:1d:78:fc:6e:77:e1:d9:83:5b:f2:49:1e:be:2b:f4:64:f9:
2a:da:e4:f0:9b:2b:6e:49:c7:60:42:0e:0b:38:0e:b1:d8:aa:
bc:46:50:cf:2c:fe:d1:a4:7f:7e:aa:73:8f:88:a2:d9:52:39:
ba:91:75:6c:67:39:43:0a:b4:86:f2:26:24:90:02:bb:fd:6e:
55:74:45:51:3a:f2:76:22:bf:13:ed:b5:c4:ca:88:a5:27:e1:
34:17:fa:81:6e:b4:77:9f:04:07:3e:39:75:80:40:14:ba:45:
00:63:68:b7:af:64:b4:df:0a:1d:d1:54:36:02:0d:f3:e1:87:
b6:0a:88:e3:e3:97:3b:15:1e:68:0f:f6:b4:59:8a:14:95:13:
4d:e3:2c:0e:3d:19:8c:5b:1a:05:ba:c9:1f:f1:12:0f:c3:aa:
ab:8a:f1:f8:36:0e:da:2a:99:40:b8:50:94:1b:0d:0d:7d:6d:
8e:d0:b2:26:c9:c5:ef:ca:21:14:86:05:a3:41:e8:c7:72:46:
fc:ec:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:53 2025 by rpki-client