Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/2lzGzSsE7qEjcf9PzXDizRHl4GA.roa
File: 2lzGzSsE7qEjcf9PzXDizRHl4GA.roa (raw, json)
Hash identifier: 6MeRRYKHi/wCpZm5Bjjt06hO9qoFhG2axiDdw/SWirI=
Subject key identifier: DA:5C:C6:CD:2B:04:EE:A1:23:71:FF:4F:CD:70:E2:CD:11:E5:E0:60
Certificate issuer: /CN=7ba513f38cceef4bc6332099a2d4fa08c25a8403
Certificate serial: 0185710C15398039761E7385483F1C87F584
Authority key identifier: 7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6UT84zO70vGMyCZotT6CMJahAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/2lzGzSsE7qEjcf9PzXDizRHl4GA.roa
Signing time: Mon 02 Jan 2023 05:54:55 +0000
ROA not before: Mon 02 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:eb40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:15:39:80:39:76:1e:73:85:48:3f:1c:87:f5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba513f38cceef4bc6332099a2d4fa08c25a8403
Validity
Not Before: Jan 2 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da5cc6cd2b04eea12371ff4fcd70e2cd11e5e060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:da:eb:f8:a3:55:d9:ea:ce:87:9c:c6:75:
66:71:cd:66:ef:b1:1a:6e:92:df:82:f0:39:34:63:
97:87:96:f6:98:23:fe:48:39:0d:39:1b:0d:38:7e:
d0:1c:34:bb:0c:61:95:50:15:ad:ed:39:a6:54:53:
9f:9a:c8:62:34:94:5f:25:22:90:38:ba:41:8e:e9:
c9:b8:ec:73:45:5c:59:1e:34:5b:ba:05:52:5e:d1:
21:e9:8d:1b:1c:ad:b2:7c:77:5b:8a:77:68:6f:42:
e9:ea:5c:84:0d:62:46:1d:51:e2:37:66:fa:c3:3d:
6f:a2:0b:ad:41:59:79:ee:86:aa:e4:a5:27:0b:9e:
d6:80:0b:65:b7:a6:7a:7f:d2:ed:70:6b:b0:aa:4d:
2c:c8:60:8c:fc:77:04:34:c2:01:38:5e:eb:ef:c8:
c8:e2:a7:bc:5c:34:79:c6:e7:ca:b9:39:c8:4a:34:
e7:a8:9c:69:dd:0e:08:98:36:d4:14:84:1c:9e:ed:
0d:e4:4d:89:94:13:2c:20:01:cc:28:4b:2a:49:11:
80:ab:53:c5:a7:7e:a3:7f:17:7e:8f:03:63:f8:bf:
25:4c:21:af:7e:2c:10:41:89:6b:b3:f8:9d:56:d7:
b3:9c:86:6f:35:8c:1f:8e:32:37:0d:d4:95:73:05:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:C6:CD:2B:04:EE:A1:23:71:FF:4F:CD:70:E2:CD:11:E5:E0:60
X509v3 Authority Key Identifier:
keyid:7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6UT84zO70vGMyCZotT6CMJahAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/2lzGzSsE7qEjcf9PzXDizRHl4GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/e6UT84zO70vGMyCZotT6CMJahAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
43:65:b4:93:6e:9e:bf:c1:61:6f:dd:dc:b6:17:7b:6f:1b:0b:
b8:99:d6:8f:61:2c:c0:e7:4b:88:97:d3:a1:ea:d7:ba:b8:69:
15:f1:9a:8e:7b:82:26:79:75:60:ef:03:63:72:33:63:ef:77:
ef:61:45:98:d5:f9:7c:57:49:85:f4:89:0f:a2:55:3e:4e:fc:
e1:3c:47:9a:81:1a:ac:2c:5d:a1:57:95:42:38:e9:4d:b1:25:
84:70:80:a1:fb:e8:ca:bd:91:58:a8:cd:f8:fb:64:74:e1:0b:
f6:c9:b5:16:a5:f9:d5:a7:cf:e8:b8:e5:78:b5:6e:23:7e:e7:
46:d5:4e:21:4d:cd:42:02:d7:f2:6c:ca:0b:af:07:54:5f:50:
5b:37:1d:87:5e:5c:11:44:58:bf:47:87:08:cc:fb:11:94:5b:
52:b6:01:ec:54:27:f7:e0:f4:ed:79:0d:52:57:3f:b7:1c:88:
d6:be:6a:15:cc:e0:3e:0a:b5:61:0d:ca:b3:a0:1a:ab:e0:6f:
c3:ba:8c:ac:f9:a7:72:3f:5f:de:20:b8:b4:b7:8a:c8:49:c8:
4a:52:7c:eb:4c:3e:6c:76:59:1f:6e:f1:1b:0b:c0:40:ea:cb:
0f:36:2d:d1:c0:fe:0b:36:15:a0:f0:18:6c:c0:de:aa:53:7f:
8c:ba:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:25:52 2025 by rpki-client