Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dEXO9NtDWtMvuKsCei1xkWUIoBE.roa
File: dEXO9NtDWtMvuKsCei1xkWUIoBE.roa (raw, json)
Hash identifier: gWxcq8JfsePhlPUyxSKsdmXYD6a8c5bTJZtjvL0VdUU=
Subject key identifier: 74:45:CE:F4:DB:43:5A:D3:2F:B8:AB:02:7A:2D:71:91:65:08:A0:11
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 019427484667AB77C3C779B59D89944389A1
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dEXO9NtDWtMvuKsCei1xkWUIoBE.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a12:35c0::/29 maxlen: 29
2a12:41c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:46:67:ab:77:c3:c7:79:b5:9d:89:94:43:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7445cef4db435ad32fb8ab027a2d71916508a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:ad:8d:87:ca:eb:42:82:0a:5d:42:0a:9d:
f0:71:11:9f:9d:d6:e6:c9:91:54:95:ce:8f:49:84:
06:16:16:fd:b9:1f:28:0f:7f:6b:59:bd:62:35:7c:
f1:d8:cb:bc:99:e0:8f:f0:b6:ef:9b:7f:b8:fd:a2:
76:51:cb:77:0e:45:ad:e5:44:32:cc:0c:9c:0d:12:
f3:16:56:9f:fa:8e:6a:8f:0c:22:ba:6e:31:b9:bc:
ce:f4:43:b2:e4:f0:dd:7d:f5:a2:cd:db:63:c5:de:
7d:e6:18:c2:39:c0:14:37:5f:13:4a:0a:63:a7:52:
6d:ef:41:08:50:91:52:b0:10:ff:25:b2:3f:5f:27:
84:72:ed:8e:6f:24:0e:18:f6:9e:16:e1:07:f4:83:
16:18:8c:b1:ac:f7:4d:17:12:11:fe:de:b4:65:6e:
08:8c:fd:70:51:14:14:be:ce:f4:a7:fd:e5:bb:d5:
10:03:95:94:46:ea:16:5c:c8:5c:f0:99:40:cd:0a:
39:e7:c1:b5:77:d7:46:12:3b:29:96:3d:93:c6:63:
3f:d6:f8:7e:7e:55:52:f2:e8:23:ba:4e:5e:81:15:
16:4a:1a:a9:a2:2b:cd:be:56:a6:e2:30:90:9f:9a:
ed:a5:b3:34:c4:61:29:ea:26:1b:9f:0b:cc:59:0d:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:CE:F4:DB:43:5A:D3:2F:B8:AB:02:7A:2D:71:91:65:08:A0:11
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/dEXO9NtDWtMvuKsCei1xkWUIoBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:35c0::/29
2a12:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:2b:2b:7d:68:29:7a:a7:3d:0f:6c:c7:3e:90:49:15:c2:63:
08:2f:d9:66:4e:9f:f7:04:de:16:81:54:30:f8:f3:ff:6d:8f:
5e:ad:fa:ff:45:06:1d:56:06:4c:8f:2f:37:ce:d4:8b:2f:e4:
40:5d:16:9b:a8:f1:b7:ee:6a:e6:6a:89:e1:5c:d9:d4:4f:fe:
1e:fe:0d:81:88:b4:6f:d9:96:09:03:5f:6a:6e:42:c3:10:72:
94:9d:30:bb:e7:fc:98:30:40:59:41:e7:cf:4b:12:ab:d2:e5:
df:a8:15:d3:1b:c8:d7:94:e0:01:d5:0f:87:0c:c7:cc:70:f9:
ea:e0:5b:07:0a:7a:08:a3:84:88:9d:fd:9f:ed:0d:97:85:a5:
51:c6:8c:21:dc:a1:2b:20:6d:e9:9c:c6:ad:ec:cf:41:69:9b:
ee:8f:08:f5:ef:64:bb:f3:7e:c5:ec:c7:f7:4b:45:76:ed:40:
02:8b:d9:6e:0e:f0:76:66:59:32:a4:28:7f:0c:7d:78:3c:88:
97:ca:e4:37:3e:97:2d:97:bd:48:5b:88:7e:02:9e:ab:dd:9e:
12:37:1e:a7:13:fa:68:ef:7a:0f:eb:8b:f4:3f:75:3b:86:78:
72:13:9a:d2:91:d0:56:76:39:75:99:bc:ae:4e:ac:ce:c1:34:
d0:fb:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:20:05 2025 by rpki-client