Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/p6yu9K0prb-3wy95x-qc7KcMywQ.roa
File: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (raw, json)
Hash identifier: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=
Subject key identifier: A7:AC:AE:F4:AD:29:AD:BF:B7:C3:2F:79:C7:EA:9C:EC:A7:0C:CB:04
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 019420683D745A42817BBCAF00407D873CA8
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/p6yu9K0prb-3wy95x-qc7KcMywQ.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39239
IP address blocks: 2a00:8860:b00::/40 maxlen: 64
2a00:8861:b00::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3d:74:5a:42:81:7b:bc:af:00:40:7d:87:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7acaef4ad29adbfb7c32f79c7ea9ceca70ccb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:7f:95:86:b5:b9:3a:3d:37:6a:66:40:7c:
27:34:c4:7c:b6:b2:e0:00:8d:45:29:c7:74:c6:b8:
0b:6b:11:2f:7e:25:d9:c0:20:12:a0:22:92:0e:28:
a4:8e:29:12:d0:f7:3d:b4:bb:c7:fb:96:15:9b:b0:
dd:28:9d:3c:da:d8:9d:4c:48:46:0c:c2:cd:cf:e8:
67:46:46:0c:d8:1d:9f:5c:e0:3e:82:d6:67:49:57:
d6:3b:f8:2b:21:41:ec:ff:c4:be:37:42:f7:0a:e2:
75:65:4a:45:40:92:6f:de:6b:32:16:81:91:06:77:
41:58:3d:a2:05:0c:95:3e:63:b1:d7:88:55:67:bd:
dc:be:78:24:4d:f9:30:49:9f:d7:e4:4e:d5:c2:43:
56:43:d2:04:6c:41:15:05:cc:de:1c:9b:a1:cd:a6:
38:86:29:7e:d7:92:ae:4f:13:56:85:23:95:8e:01:
d4:e0:94:63:e6:91:d3:4b:df:92:73:36:99:f2:42:
46:50:6e:c9:b1:a7:49:47:88:eb:aa:c1:14:9d:9f:
44:f5:e8:3b:3b:e5:2e:2d:46:53:70:ab:e4:f8:2c:
a7:53:57:ff:cb:e7:46:52:b1:bc:7d:fa:25:be:9c:
43:5a:5b:6e:86:6f:e5:83:6c:31:60:5a:f2:32:7f:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:AE:F4:AD:29:AD:BF:B7:C3:2F:79:C7:EA:9C:EC:A7:0C:CB:04
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/p6yu9K0prb-3wy95x-qc7KcMywQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8860:b00::/40
2a00:8861:b00::/40
Signature Algorithm: sha256WithRSAEncryption
6a:28:01:0f:85:ef:43:e4:dd:e9:d0:61:45:df:8b:56:0e:5b:
66:ed:55:16:d2:60:73:f0:54:44:69:35:8a:d0:af:b0:45:9a:
a2:e4:3c:b1:28:44:df:ca:ce:f8:4c:27:4f:43:68:f3:c7:04:
32:87:df:c4:a7:26:62:ce:c4:55:34:ed:3e:24:86:fb:13:55:
d9:c1:69:b2:cc:9a:62:c7:f2:5d:1a:92:1c:12:5e:c6:e5:ae:
00:b5:ba:1c:ea:c1:9f:16:f3:16:1c:01:4d:c4:c7:94:0a:28:
3a:d7:33:19:dc:ac:53:fe:78:d3:9a:88:e1:18:04:d6:32:ed:
b5:13:ca:0c:7e:bc:83:70:bd:91:46:f3:0c:65:0b:ae:5d:d8:
2e:d8:e4:f4:cc:53:82:25:82:c8:8d:78:f8:e9:e9:34:7a:9b:
98:8e:3f:46:e0:9a:b3:fe:aa:2b:9f:c2:e3:36:e2:ca:8b:5a:
62:00:51:4f:6f:e3:b1:0b:26:a7:f9:b0:9f:98:a3:2b:28:d3:
61:82:f0:aa:4c:3e:72:c4:31:30:6a:8f:af:be:48:5e:ff:9d:
b5:f2:e0:19:f8:bc:2c:77:44:4d:a9:9f:31:27:8d:84:1d:5a:
26:60:27:aa:34:7a:1c:d0:af:d6:57:3c:08:eb:93:58:fe:05:
c1:c0:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:51:34 2025 by rpki-client