Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DpRkqHZsyIXIK_SqcY8F1dTmGtQ.roa
File: DpRkqHZsyIXIK_SqcY8F1dTmGtQ.roa (raw, json)
Hash identifier: VsQJzWqbkXhyzoa6AHX53F9GO2dtnpzbXXSQwfn/PBU=
Subject key identifier: 0E:94:64:A8:76:6C:C8:85:C8:2B:F4:AA:71:8F:05:D5:D4:E6:1A:D4
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0195247948AA7514C5CBD582F9E845948FF1
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DpRkqHZsyIXIK_SqcY8F1dTmGtQ.roa
Signing time: Thu 20 Feb 2025 17:48:02 +0000
ROA not before: Thu 20 Feb 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:9442::/32 maxlen: 32
2a11:6bc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:79:48:aa:75:14:c5:cb:d5:82:f9:e8:45:94:8f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 20 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e9464a8766cc885c82bf4aa718f05d5d4e61ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:47:c1:7b:30:0a:54:3e:66:08:da:03:fb:
4e:fc:c4:54:83:9b:b3:9c:1d:42:a0:cd:39:4f:cb:
df:44:e2:19:a9:52:86:94:d2:f8:8e:00:02:db:4e:
c6:b4:73:2b:19:89:03:4a:5b:da:11:58:49:6a:a3:
9b:ec:9a:36:d2:c4:08:13:64:d3:2e:a3:17:0d:bb:
2e:47:43:7a:54:c7:b6:fe:75:a1:4c:1d:10:f3:9a:
de:68:12:42:12:02:75:e2:43:c9:e0:8c:92:5a:ae:
b3:ed:6b:99:c5:46:9e:4a:fc:f4:ac:99:61:4a:98:
ee:0c:86:d1:32:a3:41:4d:1f:a1:41:b7:e8:78:94:
7d:c6:3e:c5:3e:44:ff:1b:b9:c0:5a:78:6d:fb:00:
b4:f5:18:a3:a4:72:e8:31:1b:24:d4:c6:27:2e:d1:
04:f5:9a:62:bf:3b:f9:4a:a2:01:ae:c1:b2:60:49:
43:65:2c:96:e4:9a:75:ef:b7:94:57:44:76:38:fd:
6a:6c:04:f2:5f:e9:e0:64:6b:49:da:d5:d9:44:b7:
55:c4:bf:62:cf:b1:80:a0:3b:7f:f6:48:57:42:da:
ab:20:7a:4c:7f:ec:4d:63:fb:c6:1d:b3:07:c3:2b:
d3:91:14:7c:a3:f7:b5:49:1a:ff:9c:4e:52:74:95:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:64:A8:76:6C:C8:85:C8:2B:F4:AA:71:8F:05:D5:D4:E6:1A:D4
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/DpRkqHZsyIXIK_SqcY8F1dTmGtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9442::/32
2a11:6bc7::/32
Signature Algorithm: sha256WithRSAEncryption
38:be:97:f3:65:70:04:ff:69:df:d6:f1:92:2e:30:bb:37:27:
8c:db:55:ea:2b:3d:a2:37:8e:f6:16:dc:82:a5:61:6b:ab:4c:
4b:be:42:89:e6:77:69:9e:e3:9f:62:81:c7:92:c5:40:f4:44:
d4:da:5a:f3:86:4a:de:15:0b:4e:ca:4c:35:8f:f6:41:ee:f0:
a2:5e:81:a4:c8:07:39:d8:b8:d3:85:c2:0b:58:ee:c4:c5:67:
7e:16:a0:61:8e:d5:f2:d5:c5:e2:10:37:86:14:db:c1:5c:44:
6e:84:6c:35:0d:1f:00:57:00:a2:38:aa:db:39:4f:b6:ff:19:
b7:7c:42:0c:80:da:9a:a0:0f:00:52:f9:7d:6b:88:79:85:f6:
1d:ae:58:b4:79:cf:27:b2:ce:4d:f0:92:9f:b8:54:6d:40:68:
a6:b3:94:a4:d1:34:3b:de:99:3d:70:34:00:c4:5a:1e:da:6e:
cd:53:34:81:e3:fa:ec:56:e9:54:4e:d7:be:ee:39:3f:b0:a8:
09:16:07:cb:81:52:c8:9f:aa:05:5a:35:04:39:24:b1:a7:06:
12:5d:4e:57:ae:a1:ae:45:47:34:fa:81:82:9c:a5:a3:42:40:
91:77:88:2c:fd:e6:13:93:a1:bd:b0:c1:dd:c2:55:37:38:ae:
31:73:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:28:49 2025 by rpki-client