Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa
File: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (raw, json)
Hash identifier: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=
Subject key identifier: 0B:C5:50:BD:B7:57:15:25:B1:63:D7:14:4B:26:91:A6:51:8B:1B:C3
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 019427B591538549F3DB812B12E0114FB88F
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25446
IP address blocks: 2a0c:c580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:91:53:85:49:f3:db:81:2b:12:e0:11:4f:b8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc550bdb7571525b163d7144b2691a6518b1bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:40:ef:0f:3f:fa:73:38:cd:1f:2d:51:0c:
47:c6:d5:9f:d5:4c:9e:53:f8:6c:6d:4c:ab:0c:8c:
20:d2:8e:50:04:14:ce:25:a6:47:53:35:79:ca:ef:
5d:b4:4d:b3:b1:16:c2:5f:1f:7b:6d:cd:65:6d:da:
e2:33:04:5d:f1:ee:9e:27:d3:9b:69:17:53:5e:17:
5e:42:6f:cb:f1:af:0c:4f:78:48:86:49:60:d4:70:
41:69:36:0f:69:33:57:92:1a:f3:c0:2a:85:a5:d6:
10:8d:28:50:eb:a2:91:15:25:78:b6:b2:fc:6c:98:
88:f2:89:0d:1c:05:24:55:c7:d3:ef:a2:a8:2b:75:
7e:9a:c6:c1:df:4c:76:31:1d:75:d3:d5:22:28:96:
6a:74:d7:fc:87:03:47:e2:d6:3a:ca:72:97:38:5b:
cc:2e:5f:96:a5:d7:b4:e1:ea:92:67:a7:b0:54:30:
7e:b4:ad:e5:75:e0:6e:9c:cd:94:3b:29:b8:44:53:
e4:d6:25:17:81:e3:6e:89:3c:4e:9b:b9:ab:e6:9d:
bf:ed:83:8e:0a:66:a8:bf:37:9c:63:ab:3c:50:35:
f3:3f:2b:1c:80:fe:a6:5c:b6:5d:1d:b4:46:a2:03:
a0:e9:03:13:41:03:2c:75:c9:4d:bb:8b:35:ba:48:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:50:BD:B7:57:15:25:B1:63:D7:14:4B:26:91:A6:51:8B:1B:C3
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/C8VQvbdXFSWxY9cUSyaRplGLG8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:c580::/48
Signature Algorithm: sha256WithRSAEncryption
86:8e:7c:51:13:07:1f:3b:ec:3f:1d:37:af:45:98:cc:e0:cb:
a9:4e:d0:d2:e4:94:6a:23:f9:08:79:f9:4f:68:b2:3d:25:2a:
ee:e2:e8:40:fa:bc:cd:c1:0c:23:f0:5a:b2:5b:f5:54:16:60:
71:40:61:43:59:6a:ca:6f:23:fa:1d:ff:5f:4a:d6:eb:a2:a1:
73:31:ad:e3:09:05:de:65:23:4f:43:4c:6d:09:db:e3:b6:5c:
d5:b7:eb:04:83:68:86:d6:d0:43:8b:0b:2a:5a:29:84:d4:47:
f9:f5:b9:d0:04:d3:81:e4:37:a8:f6:b6:da:16:6f:b3:4d:ea:
87:b2:b6:e8:65:0f:b9:90:42:f1:7c:59:f5:31:0c:1f:4e:8d:
54:59:4f:2f:4e:6d:a2:17:c2:80:04:a9:e7:82:54:af:73:94:
c2:1d:07:9e:0e:41:07:9d:9b:bb:5d:43:62:b5:60:58:30:56:
b4:83:55:d8:ee:64:ef:c8:8c:21:87:8d:35:13:12:db:ba:76:
7f:79:6c:6e:6e:d9:cd:aa:43:c8:32:0d:d2:53:18:f4:86:90:
8a:17:2e:96:c3:20:f3:37:b8:d4:01:27:44:4b:d9:ea:96:1a:
e2:f3:0f:86:1e:1f:fc:bb:83:cd:69:84:3e:37:58:c2:14:02:
db:9b:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:27 2025 by rpki-client