Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/p1mSMR7xN9m1jztS6WxG27UANcc.roa
File: p1mSMR7xN9m1jztS6WxG27UANcc.roa (raw, json)
Hash identifier: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=
Subject key identifier: A7:59:92:31:1E:F1:37:D9:B5:8F:3B:52:E9:6C:46:DB:B5:00:35:C7
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01956BE58A52B47F021F3829A0DB3C9D9154
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/p1mSMR7xN9m1jztS6WxG27UANcc.roa
Signing time: Thu 06 Mar 2025 14:39:20 +0000
ROA not before: Thu 06 Mar 2025 14:39:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264749
IP address blocks: 2a0d:c940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:e5:8a:52:b4:7f:02:1f:38:29:a0:db:3c:9d:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Mar 6 14:39:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a75992311ef137d9b58f3b52e96c46dbb50035c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:57:ca:d0:da:a6:c8:84:da:1f:d9:e3:f9:
8b:1f:46:c7:75:88:f8:c8:f6:d9:7c:5d:0b:c7:62:
a4:40:40:c9:39:ca:30:8d:0d:57:23:b9:8f:ea:6d:
9c:67:ed:54:37:e6:da:e8:17:59:cc:e4:4f:be:d4:
9c:c0:02:27:d0:81:68:d9:92:3a:ab:4d:ef:ca:ff:
59:7e:1a:46:bf:80:58:3f:6e:d2:f6:3d:1a:06:0c:
81:15:c8:fc:82:0b:bf:39:93:5b:3e:ec:a4:49:b9:
93:13:53:13:b1:a5:7c:6c:3b:86:48:3c:41:ab:0f:
e1:e1:91:e9:9d:ab:ac:45:ff:ae:a0:b8:07:94:04:
e2:b5:dc:ff:85:f5:66:89:6e:a3:a5:36:de:47:55:
cf:84:7b:d7:f4:70:aa:ec:fa:85:9d:92:89:4d:e7:
41:6c:26:81:54:1b:36:b7:36:a5:09:91:1a:88:33:
54:cf:b1:7e:70:cc:3f:67:90:1f:b2:c5:70:ef:92:
69:1a:15:f1:6d:fd:9f:cd:b7:89:fd:e5:27:2c:8c:
88:54:0b:14:8d:14:88:e6:69:62:4e:63:2e:7d:e7:
16:32:72:ad:70:89:92:a8:8b:4c:d0:6a:4e:39:4a:
d5:df:00:f7:7a:e3:28:c1:b1:a5:7f:a2:75:da:99:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:92:31:1E:F1:37:D9:B5:8F:3B:52:E9:6C:46:DB:B5:00:35:C7
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/p1mSMR7xN9m1jztS6WxG27UANcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c940::/29
Signature Algorithm: sha256WithRSAEncryption
a3:cd:d7:89:b1:9b:9b:ae:0d:6a:f9:d2:a0:bc:d5:4e:e8:f1:
7c:63:4f:a6:5f:eb:e4:33:4c:9e:76:e8:2f:3e:70:37:c7:96:
c6:c0:d2:3e:f8:99:c0:43:3c:bb:5c:7c:b7:ab:34:de:4c:db:
6c:11:04:6f:1a:56:a4:b2:60:62:e7:e1:8e:e9:ef:02:9a:c7:
df:40:19:90:91:fc:7b:0e:2d:b6:32:94:24:3f:e2:70:60:00:
00:1c:f4:38:1d:d8:0c:f1:a4:d6:12:ea:e8:a3:ee:b1:40:cf:
d2:d1:4e:df:4e:e6:e2:92:b9:b9:d6:fb:81:7b:6b:b4:26:4a:
56:6e:89:c8:1a:00:26:1d:75:8c:2f:2e:0c:71:94:30:10:c1:
45:96:42:e5:3b:ba:26:06:81:91:3c:91:ee:22:71:83:ea:89:
bc:a6:0f:9f:56:ae:0e:cd:0e:75:49:f2:44:56:b6:d8:0d:ef:
4f:7e:64:14:41:6b:9c:aa:bf:ac:2b:57:6a:31:d0:a1:7c:2b:
71:57:03:3c:da:7f:0c:0f:be:8e:23:14:45:2a:5f:17:12:cf:
c8:54:b7:3d:a8:ec:12:c8:74:38:99:8e:9a:8b:8b:4b:94:a1:
75:45:83:69:68:46:e1:02:79:c6:cd:64:0a:a0:d8:27:a7:0a:
02:da:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:40:09 2025 by rpki-client