Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/o36bDi5imHAA6iUtlmJWAH2iULw.roa
File: o36bDi5imHAA6iUtlmJWAH2iULw.roa (raw, json)
Hash identifier: 8vtVZLyaNNv4njNZPtFHX4gcmO6pUsai9ap+a3Eyh/o=
Subject key identifier: A3:7E:9B:0E:2E:62:98:70:00:EA:25:2D:96:62:56:00:7D:A2:50:BC
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204403435EB274600C7C26661BA14E
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/o36bDi5imHAA6iUtlmJWAH2iULw.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212358
IP address blocks: 2a0e:8f02:f00f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:44:03:43:5e:b2:74:60:0c:7c:26:66:1b:a1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a37e9b0e2e62987000ea252d966256007da250bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:86:0a:ec:6c:49:5e:e8:3e:c3:26:6e:50:
0f:8d:48:77:b3:40:81:1d:bb:ee:71:fc:b4:6b:25:
18:53:47:f8:54:9c:2c:4c:b3:84:56:86:fb:29:4c:
b5:63:99:ca:92:c6:e6:10:4f:7a:d7:3a:97:41:09:
c9:10:69:1d:12:6b:ed:b9:45:09:13:78:1a:c4:d3:
af:8d:73:fc:e0:4d:f5:3c:7c:90:07:01:05:40:b2:
9d:a3:d3:09:a9:4f:56:b2:e2:52:26:bf:bf:5d:52:
91:eb:f8:99:9d:0d:75:9b:80:6f:1f:38:59:24:45:
38:dd:9b:4e:d2:2a:9f:3f:db:74:5a:e4:20:e7:3c:
7e:17:23:be:d8:00:14:36:8b:40:3a:6c:b2:82:82:
dc:da:c6:15:a5:83:b3:20:fe:8e:b8:14:4b:97:cc:
05:6d:bc:ed:26:63:0b:3a:a3:69:0e:1a:da:5d:a3:
3e:15:7c:06:e3:8e:61:44:92:e2:b7:2e:66:20:94:
1c:34:1b:b3:ac:57:d0:51:ce:b9:a5:7f:99:6c:67:
42:88:4c:75:92:53:bb:ef:40:b7:2b:ed:7e:7d:d4:
f7:df:16:02:12:fd:46:85:ec:88:e1:68:74:1d:b4:
cb:0e:85:3d:f7:a8:27:3e:aa:0c:53:bb:07:5f:b4:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:9B:0E:2E:62:98:70:00:EA:25:2D:96:62:56:00:7D:A2:50:BC
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/o36bDi5imHAA6iUtlmJWAH2iULw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00f::/48
Signature Algorithm: sha256WithRSAEncryption
07:db:9a:2f:e0:d5:ac:ca:61:7e:28:0a:d4:0c:3a:1e:cb:c4:
fa:88:6f:52:6d:9c:8a:0e:ae:55:9f:4c:04:c6:9a:b1:4c:ac:
de:fc:09:29:d2:6c:01:52:67:8d:6a:f3:f9:5e:0f:d5:e2:42:
0a:37:3d:99:df:25:f4:8d:64:e5:72:71:44:ac:0e:06:1b:08:
57:52:79:3e:75:99:7f:cd:f5:6f:2a:50:05:be:33:f6:43:73:
47:2d:09:4f:99:95:33:bc:96:c8:da:c6:67:8f:42:f8:72:23:
bb:3b:7c:c0:a2:59:88:eb:13:4d:c7:6e:40:62:49:66:1e:d2:
eb:5f:6a:14:59:34:7e:ff:70:e9:a3:08:dc:77:a5:2d:92:7d:
b4:a6:55:63:bd:6c:e9:57:4f:12:e3:8e:f3:82:8f:31:38:97:
b3:27:fd:bd:2b:9b:34:74:87:95:07:08:85:86:73:54:18:3e:
71:c7:0d:72:0e:97:ff:89:dc:9d:16:a2:01:da:24:f1:35:4f:
cf:e4:4c:e5:1d:29:ca:7a:ce:4c:6d:5b:a5:70:9c:57:ea:4a:
cd:3d:f8:6f:5a:51:be:7d:68:8f:31:e3:f4:65:1b:f9:2e:3f:
32:6b:f8:21:4a:d4:8a:30:c4:01:07:70:c8:ea:60:c7:cb:fc:
29:2e:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:07 2025 by rpki-client