Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kFkkfMX0nrKI8hos-rr8JkgPk9U.roa
File: kFkkfMX0nrKI8hos-rr8JkgPk9U.roa (raw, json)
Hash identifier: 0gBJAElkjUCMVMMbcRrp6f5VCBdvaVAa0w0QgPj2Ymc=
Subject key identifier: 90:59:24:7C:C5:F4:9E:B2:88:F2:1A:2C:FA:BA:FC:26:48:0F:93:D5
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0194920769306E9D3A8BE45E2EFA00AA2091
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kFkkfMX0nrKI8hos-rr8JkgPk9U.roa
Signing time: Thu 23 Jan 2025 07:19:06 +0000
ROA not before: Thu 23 Jan 2025 07:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:dfc4::/32 maxlen: 32
2a0e:dfc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:07:69:30:6e:9d:3a:8b:e4:5e:2e:fa:00:aa:20:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 23 07:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9059247cc5f49eb288f21a2cfabafc26480f93d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:32:ff:a5:87:a6:ee:b3:37:39:e1:be:0a:
56:00:07:3b:15:eb:de:2a:b1:4d:30:d2:06:0c:6e:
1a:02:a7:cd:d0:fa:24:23:0f:8e:4d:3e:dd:f0:95:
32:92:f4:f9:e9:90:0f:a8:54:d0:42:2e:35:b2:a5:
6b:7a:ed:09:87:8c:68:04:b3:b6:7c:6d:94:9e:1d:
3c:5b:05:99:fd:8c:15:7e:d2:63:e9:0e:21:0d:aa:
85:15:c7:ae:ee:f6:7c:37:f9:d8:a3:11:c5:2a:16:
72:ea:4f:9d:85:de:3e:50:7a:22:f3:4c:30:55:f9:
75:ef:4b:90:16:24:26:bb:5e:4a:4b:5c:f3:aa:3b:
a0:43:80:c7:5c:d6:18:24:7f:6f:a7:48:fd:a1:e9:
87:43:14:13:0b:28:9d:64:78:1a:22:80:d3:6a:f4:
94:5d:48:28:34:69:71:6a:a7:e3:70:63:f8:7d:00:
7c:40:d6:b4:27:33:50:52:06:58:2e:a5:57:89:03:
c5:33:7f:4c:26:f2:c6:7b:be:66:8d:e3:5c:cb:6d:
53:ef:6c:c2:c7:59:80:6b:93:33:e6:88:a0:13:27:
5a:e1:08:db:3d:ce:61:17:4e:6a:1b:3e:bc:5b:ca:
2f:1d:00:47:72:f6:13:8e:0e:51:49:21:01:94:a8:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:24:7C:C5:F4:9E:B2:88:F2:1A:2C:FA:BA:FC:26:48:0F:93:D5
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/kFkkfMX0nrKI8hos-rr8JkgPk9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc4::/32
2a0e:dfc6::/32
Signature Algorithm: sha256WithRSAEncryption
6d:6e:d9:4c:ef:0e:7f:45:29:68:9e:11:ff:82:75:e9:16:25:
a2:f5:d4:6d:3c:16:9d:a3:8f:bd:21:d7:04:a0:74:e9:db:80:
92:54:e6:73:a2:44:e3:87:f6:e9:f6:a6:bf:b1:b6:8c:15:b1:
86:3a:39:00:c4:8f:39:67:8b:27:97:6a:ff:5c:d8:8d:10:17:
23:04:71:0e:b7:cb:33:f2:95:3d:29:de:9e:ec:59:45:da:78:
26:16:06:fa:6f:7b:e6:eb:8a:01:55:68:4b:28:6d:7b:5f:ab:
35:6b:ef:75:6b:b9:15:92:98:de:87:e5:22:46:8f:3e:e7:f5:
75:f3:5e:43:2b:38:cc:3c:05:14:89:8c:a8:54:b3:45:85:87:
48:d3:b4:15:0e:87:55:94:c2:b7:9e:0d:2f:1c:76:9b:0a:ab:
7d:36:5c:0e:7b:9c:6b:87:49:f0:c6:c4:2d:34:3d:69:e8:47:
0c:6f:c5:7b:e1:1a:dd:2b:c0:41:dd:b7:8b:48:b7:9f:0e:8a:
44:5c:bf:17:22:54:b0:36:7b:d3:de:10:34:3a:c0:e2:0f:47:
b4:3b:b2:f6:fe:42:31:23:25:ad:f1:2f:ff:0a:4d:53:41:e2:
dd:94:e5:7a:03:3e:f7:4f:a7:fc:0b:d0:7f:99:f2:27:0b:ae:
65:a3:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:42:40 2025 by rpki-client