Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K78ycKqD1bVQ0MITtbI9iE_5cR4.roa
File: K78ycKqD1bVQ0MITtbI9iE_5cR4.roa (raw, json)
Hash identifier: RGjaznqWwDNVEcALkaKSwwRIPIpJYRrVLvqn4rDbeTQ=
Subject key identifier: 2B:BF:32:70:AA:83:D5:B5:50:D0:C2:13:B5:B2:3D:88:4F:F9:71:1E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDADB2B16792BF4F4F32A46D0DBF7
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K78ycKqD1bVQ0MITtbI9iE_5cR4.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208602
IP address blocks: 2a0e:aa01:aa00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:da:db:2b:16:79:2b:f4:f4:f3:2a:46:d0:db:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbf3270aa83d5b550d0c213b5b23d884ff9711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:cb:de:bd:85:54:27:91:5a:d9:c3:a0:87:
ef:fe:1f:32:ef:17:58:94:d8:e2:56:ad:4c:3f:61:
02:79:be:14:61:09:f8:df:94:1b:1f:9a:69:e1:e0:
4b:2f:47:a4:15:83:ac:a3:9f:42:c2:ef:ca:55:06:
37:70:19:0b:cc:b7:9c:51:c8:81:4e:8f:9d:33:42:
35:28:b1:5e:13:bb:be:1d:50:29:20:57:b8:00:9b:
0b:c6:47:1f:3c:c1:fa:7c:51:2b:fa:83:e6:52:83:
ff:ce:97:0c:98:d0:be:82:4f:fd:92:14:d4:17:e2:
57:53:2d:6a:d1:4d:a7:59:76:b1:53:87:04:aa:fb:
ab:47:30:52:eb:83:b2:d6:11:4f:5d:c0:ef:45:ff:
55:d5:18:ab:5f:e8:07:2a:e4:ae:a6:97:3f:b1:7d:
a7:2c:8c:98:5b:95:76:09:f6:f5:f2:34:27:26:79:
28:7a:53:00:5f:4e:1e:9c:1c:59:47:18:63:7b:78:
c6:d4:25:a3:71:73:be:5e:ac:a9:f8:d0:a0:bd:ec:
70:53:81:06:b1:b4:62:b7:e9:da:89:93:94:68:f3:
a9:b4:63:73:38:b5:b0:4f:bd:84:75:f5:4c:93:51:
36:f1:52:77:70:6e:93:c4:28:81:61:d9:0f:f3:79:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:32:70:AA:83:D5:B5:50:D0:C2:13:B5:B2:3D:88:4F:F9:71:1E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K78ycKqD1bVQ0MITtbI9iE_5cR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
61:24:ce:1f:f3:c5:29:6c:52:a7:cb:39:13:4a:67:2b:be:15:
59:68:df:df:0b:3d:c4:d5:a0:a4:ef:ca:eb:ff:35:40:0a:62:
57:e5:a0:e9:34:01:63:80:e8:7f:32:a1:b0:9d:89:41:c8:7b:
f6:66:a1:fa:ed:34:41:99:e3:d8:7c:c6:91:c6:bf:d6:e3:70:
07:2f:5c:be:43:37:e0:17:0e:76:a8:53:2c:d1:d9:c1:ab:16:
cc:f7:5a:9a:ea:7d:d6:66:e2:49:03:9a:95:f7:59:ab:2f:c9:
26:a0:2f:ff:8e:d0:95:65:9f:9c:c4:7e:b2:d6:13:e1:ea:79:
c5:f5:de:6b:28:88:36:93:cd:01:e5:7c:36:32:5c:e4:be:0e:
78:5a:90:33:83:90:7e:a4:d5:a1:a2:c3:25:50:9b:3b:19:61:
0e:3e:21:88:d8:59:eb:14:0c:36:68:7f:59:82:35:8e:42:40:
d4:2b:66:ab:76:19:fe:17:e1:3a:6d:e5:38:87:98:db:5e:a3:
26:7d:76:1b:18:b6:1b:3d:d8:15:01:26:80:b6:68:17:db:bd:
26:d1:65:d5:1e:ea:0b:5c:b8:a6:1b:a0:34:c8:fa:eb:97:2e:
4e:e6:73:3a:a0:71:06:cc:ec:8a:b5:0d:e9:cb:bf:8a:06:7c:
40:cf:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client