Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/CO0wbZNu7l8q8j2dCETYIMHij3Y.roa
File: CO0wbZNu7l8q8j2dCETYIMHij3Y.roa (raw, json)
Hash identifier: Au5UiGjbK1AvBh5qsK2d7dGONtin2lRnDoP91v5NYx4=
Subject key identifier: 08:ED:30:6D:93:6E:EE:5F:2A:F2:3D:9D:08:44:D8:20:C1:E2:8F:76
Certificate issuer: /CN=4207baedb4063082b245dd82623c981bae56f9ac
Certificate serial: 01856B810F0D4296743D0EEF3E3DECAB12BF
Authority key identifier: 42:07:BA:ED:B4:06:30:82:B2:45:DD:82:62:3C:98:1B:AE:56:F9:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qge67bQGMIKyRd2CYjyYG65W-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/CO0wbZNu7l8q8j2dCETYIMHij3Y.roa
Signing time: Sun 01 Jan 2023 04:04:57 +0000
ROA not before: Sun 01 Jan 2023 04:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212271
IP address blocks: 2a11:e100::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:0f:0d:42:96:74:3d:0e:ef:3e:3d:ec:ab:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4207baedb4063082b245dd82623c981bae56f9ac
Validity
Not Before: Jan 1 04:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ed306d936eee5f2af23d9d0844d820c1e28f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:53:41:04:84:e2:f2:de:b4:5c:ba:d2:d2:
6f:ae:9a:49:9a:c7:c2:c3:9f:46:9d:84:f7:9c:13:
a4:24:f7:b7:f3:cd:f2:de:cc:25:bd:65:87:8c:99:
5f:72:63:68:6f:74:2c:e4:8a:a1:c8:64:5e:f9:b6:
c7:a4:a9:6d:83:3a:d2:c0:7e:bd:3a:65:b6:b7:0f:
d7:cf:c9:e2:1a:9b:d9:d3:7d:8f:a3:20:7c:fb:31:
92:88:59:6f:3d:d3:d2:63:52:48:5d:2a:67:e0:e6:
11:36:13:6e:79:19:24:e1:89:03:1a:4f:07:8e:96:
1c:a0:4d:10:a7:c0:e0:a7:e7:aa:15:50:b2:1d:1e:
8c:73:9c:0d:4c:58:18:1a:ad:1b:48:fe:9e:4d:b8:
2e:a9:91:ca:9d:4b:b3:df:9c:34:dd:aa:45:65:a3:
db:03:c9:93:e3:4f:43:ae:a1:9d:15:90:79:fb:a0:
13:9d:d6:be:cd:49:83:be:98:06:bf:b3:55:12:cc:
be:2e:2c:dc:a8:e7:a0:c2:7e:2b:d4:e5:a4:c6:14:
d3:05:7f:fb:c5:40:4a:4f:be:08:b7:c8:7d:b6:30:
ae:0a:bc:1e:39:f5:2c:bc:cb:17:f9:3f:30:40:22:
10:47:78:23:fe:68:73:d2:7a:f0:18:cd:f4:60:fc:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:30:6D:93:6E:EE:5F:2A:F2:3D:9D:08:44:D8:20:C1:E2:8F:76
X509v3 Authority Key Identifier:
keyid:42:07:BA:ED:B4:06:30:82:B2:45:DD:82:62:3C:98:1B:AE:56:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qge67bQGMIKyRd2CYjyYG65W-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/CO0wbZNu7l8q8j2dCETYIMHij3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/Qge67bQGMIKyRd2CYjyYG65W-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e100::/32
Signature Algorithm: sha256WithRSAEncryption
77:8e:7c:58:e6:fa:81:57:9a:3e:47:54:72:8b:30:82:82:c2:
64:e3:6b:cc:8e:22:ad:f0:66:21:77:9d:ca:ac:09:92:f2:bc:
3a:59:54:13:68:03:cc:30:94:b1:11:12:3e:bf:88:88:0f:4a:
5e:85:e8:92:14:62:1c:2f:43:ff:c1:dd:7e:c9:5c:ff:b2:35:
85:a4:10:3e:18:bf:5d:8f:38:6d:8c:d6:45:50:ea:7b:44:67:
5b:f8:dd:c6:65:4b:cc:a4:69:4d:c0:24:b0:fa:95:2d:90:a6:
ef:03:cc:c3:a9:97:50:32:61:f4:d1:c1:b7:81:3e:8a:e1:48:
66:24:72:bd:eb:ec:08:5f:58:35:da:63:b5:42:9c:6a:95:b1:
98:26:2a:8b:6d:45:77:d4:7f:ab:ab:40:d3:d0:44:ab:24:79:
53:21:d4:4b:ce:9f:1a:14:a6:1d:5d:9d:10:b3:bb:6c:43:e1:
22:09:60:97:c5:2c:c3:00:b9:3f:37:9c:b6:82:b2:77:73:d4:
b5:91:6e:be:89:de:28:ff:8d:ca:be:59:b8:67:ed:b5:5e:34:
0f:6e:8f:8a:ad:5a:a6:05:af:20:9a:89:b2:30:36:34:06:22:
ef:2c:8b:62:eb:c1:9d:e1:88:ff:09:59:cd:7f:c9:8c:a6:41:
61:a0:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:01 2025 by rpki-client