Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/376uKVDEsbfyWeb-TaHPDEYp6S8.roa
File: 376uKVDEsbfyWeb-TaHPDEYp6S8.roa (raw, json)
Hash identifier: BD+LxbyF1AN5Ecy5O3vzyBdewt4kk1ooetnCHkgAMtw=
Subject key identifier: DF:BE:AE:29:50:C4:B1:B7:F2:59:E6:FE:4D:A1:CF:0C:46:29:E9:2F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ECD9AC9529CE45C288FFCC095438B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/376uKVDEsbfyWeb-TaHPDEYp6S8.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198516
IP address blocks: 2a0e:aa06:4e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cd:9a:c9:52:9c:e4:5c:28:8f:fc:c0:95:43:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfbeae2950c4b1b7f259e6fe4da1cf0c4629e92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:69:cf:8f:f1:ae:eb:2b:50:35:43:d5:3d:
6f:e6:3b:74:6d:55:d9:52:b0:ea:21:2f:76:ad:49:
6f:95:2b:21:9f:c1:cd:b3:19:88:f8:4f:19:7c:f8:
75:7f:41:18:b4:80:8b:05:d2:70:a0:99:e2:af:36:
60:b1:5f:f7:69:59:54:a7:a1:d3:dc:07:64:36:3e:
03:ac:40:4f:51:e7:6b:83:c4:37:9b:a3:4c:d5:67:
0e:01:07:14:04:ea:1c:ea:25:e2:d2:71:cf:57:0c:
5b:26:0c:fc:e4:d7:1c:bf:ab:40:54:f2:c6:da:6c:
38:5f:c3:da:27:d9:fe:39:e0:59:ff:47:9f:19:7b:
ec:64:5a:e4:e8:78:e1:cf:eb:f8:83:7f:17:b9:98:
0b:75:bd:50:5d:a2:84:a6:d7:19:14:8e:5a:df:ab:
d8:04:0f:f2:c6:0f:93:fd:e0:95:93:42:83:6a:41:
08:0d:9e:f2:04:54:58:80:09:e2:80:b4:c9:d2:2d:
7c:99:c6:49:45:60:93:70:0c:e6:44:51:7a:38:73:
5d:57:97:40:0a:13:3a:49:38:73:aa:80:a7:aa:0f:
37:4f:54:fd:a9:ce:9e:98:66:7a:8a:dd:17:fd:7c:
33:c5:ef:ea:25:ef:cb:5d:dd:54:a3:e7:8c:35:83:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:AE:29:50:C4:B1:B7:F2:59:E6:FE:4D:A1:CF:0C:46:29:E9:2F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/376uKVDEsbfyWeb-TaHPDEYp6S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:e8:bb:41:81:22:dd:64:d4:08:1e:c6:70:4b:cc:fe:a7:07:
38:82:b8:b4:40:c6:d4:ce:a9:49:cc:18:4e:71:02:9c:10:5d:
b0:bc:b8:73:d0:a7:73:f8:ae:c8:c2:20:a7:b8:09:d9:e7:8a:
e7:c0:e1:7e:69:f4:62:bd:4e:8b:0c:7e:b3:23:a5:d3:24:b6:
30:ba:1e:b4:18:8f:de:52:3b:81:b1:82:c9:3b:04:9d:ee:68:
0b:dc:93:cf:cb:7c:4f:93:6c:6a:b4:e9:3e:6a:68:07:77:a2:
52:bd:bb:c4:a4:86:85:b1:ac:56:cc:b5:11:43:33:46:10:ce:
46:83:96:9e:02:fa:b7:01:3a:47:b6:fa:f3:4b:51:98:d2:fd:
2e:fc:e4:0c:71:2f:14:b4:a8:b5:e4:76:46:91:5e:c2:46:64:
06:b5:0d:8d:f7:f3:27:b7:26:96:92:9f:6f:61:ec:5b:db:04:
89:7b:91:43:0e:81:3b:b5:12:fd:19:16:ba:7b:b1:60:ed:56:
df:a3:43:2c:ba:1a:86:5c:92:b4:a1:2a:47:fa:42:bd:4e:e8:
c2:45:9f:5b:01:fe:48:37:03:7b:b6:33:b8:41:01:8a:f7:57:
f4:c0:7d:80:75:a1:4c:83:6a:7b:4c:c5:10:e0:3c:5d:37:e1:
29:11:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:13 2025 by rpki-client