Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BmQJ1bUunxBgtykCHWDF9mjv0Rc.roa
File: BmQJ1bUunxBgtykCHWDF9mjv0Rc.roa (raw, json)
Hash identifier: NA71TMRYK8mHjETRfj247G/5nj5YSVYdiez/EksxYZU=
Subject key identifier: 06:64:09:D5:B5:2E:9F:10:60:B7:29:02:1D:60:C5:F6:68:EF:D1:17
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01949430634BF741EF92391ED4F5A176C3C3
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BmQJ1bUunxBgtykCHWDF9mjv0Rc.roa
Signing time: Thu 23 Jan 2025 17:23:06 +0000
ROA not before: Thu 23 Jan 2025 17:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a0f:e000::/29 maxlen: 36
2a12:6b80::/29 maxlen: 36
2a12:f0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:30:63:4b:f7:41:ef:92:39:1e:d4:f5:a1:76:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 23 17:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=066409d5b52e9f1060b729021d60c5f668efd117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:10:09:23:6b:6d:41:16:3b:a8:e1:eb:4c:
18:be:14:e2:8f:6f:21:8c:5c:98:43:78:49:ec:01:
b9:23:7c:a0:61:80:bc:16:73:bb:b5:10:50:58:e7:
b6:fe:ce:18:06:e8:a9:50:59:9e:88:16:8e:4f:a5:
7b:16:ad:1b:3d:43:07:cb:ae:82:68:9d:db:59:10:
e1:e1:e7:49:99:73:a9:eb:3b:fc:83:96:91:23:ab:
df:2a:79:a2:2f:83:a4:71:f8:13:31:87:23:da:46:
cb:88:12:67:6e:68:de:61:42:15:98:0a:25:f3:db:
29:af:e0:ec:c8:7b:06:fb:33:59:29:fa:63:2b:e6:
78:65:f6:7f:02:68:8c:61:ee:f6:60:5b:cf:f3:34:
d8:72:c0:b4:74:d4:29:e8:46:f6:eb:0e:21:47:87:
c1:98:26:b9:b3:0b:e7:25:03:6b:8d:92:06:78:e5:
14:07:d7:9c:86:96:fd:67:60:9e:69:00:cc:76:f8:
11:db:3b:2a:b1:e7:44:58:f4:b2:92:11:e8:c2:38:
f4:0b:b2:5a:4c:d4:f3:5a:23:f1:2b:ee:14:52:4c:
10:b5:2e:1f:3b:eb:ac:8b:f0:13:bc:21:9a:ee:2f:
3c:e1:4b:02:ee:ba:c7:12:47:bc:e5:bd:bc:af:df:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:09:D5:B5:2E:9F:10:60:B7:29:02:1D:60:C5:F6:68:EF:D1:17
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/BmQJ1bUunxBgtykCHWDF9mjv0Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e000::/29
2a12:6b80::/29
2a12:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:25:99:17:c1:2b:f1:fa:7b:f8:81:c8:40:e2:d7:65:a3:2b:
37:ae:65:6e:11:0b:4f:f2:35:05:c7:23:15:d0:61:1b:7d:ea:
58:ca:5e:53:f0:1d:42:f7:68:e1:44:b6:de:27:b3:93:4a:cc:
a8:8d:89:16:50:13:8d:b6:7c:55:0f:35:ca:01:73:a0:07:5a:
3f:0b:02:83:69:13:f6:8b:7d:f2:af:f5:f3:f5:78:fc:43:2f:
49:ed:9a:6c:6b:ba:cf:96:30:9d:ec:25:9e:ba:80:87:f6:36:
24:60:82:c2:ba:48:86:3b:c5:da:1d:cc:45:6f:60:91:fe:f1:
6d:8b:52:f1:26:2f:8b:84:86:e5:ec:fb:1b:62:44:ba:14:1a:
1e:eb:d8:71:26:34:9e:f5:cc:56:50:cb:7d:f2:e0:f2:70:bd:
5a:b0:d7:b6:1d:6d:8d:fd:10:8a:81:52:7a:b2:bb:c8:2c:6d:
6c:5f:4e:ca:e0:21:67:1f:7f:f5:15:5d:0b:e3:ba:f0:16:f1:
cf:86:fc:5a:7b:b6:f4:43:e8:a0:5e:af:13:a3:53:99:46:0b:
d6:8d:40:4f:82:7e:67:51:18:80:69:c0:3c:d2:70:f9:6a:c6:
e6:e6:18:74:61:b3:69:44:c7:a2:ed:89:8b:10:32:da:dd:af:
25:42:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:20 2025 by rpki-client on console.sobornost.net