Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PW-uOuPChT6j5IMaUoWv-N7iGyI.roa
File: PW-uOuPChT6j5IMaUoWv-N7iGyI.roa (raw, json)
Hash identifier: osvK7h38/AaEPfWe8RFKlV+dhArvVyKcPcPA38kACTE=
Subject key identifier: 3D:6F:AE:3A:E3:C2:85:3E:A3:E4:83:1A:52:85:AF:F8:DE:E2:1B:22
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDD95123C3ACF5F2C2E10DF15EF8A
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PW-uOuPChT6j5IMaUoWv-N7iGyI.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209300
IP address blocks: 2a0e:aa06:490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:dd:95:12:3c:3a:cf:5f:2c:2e:10:df:15:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6fae3ae3c2853ea3e4831a5285aff8dee21b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:39:a9:b6:bf:b4:f6:f1:9a:0b:c3:86:10:
ad:69:07:83:79:5e:ad:51:a4:da:ca:34:8f:db:02:
b5:d3:7d:8b:86:98:4d:ce:e1:f6:46:f8:9f:d6:d9:
98:0a:d0:88:4d:12:30:a7:76:e0:8a:d2:d4:a3:0d:
a9:d4:1b:2c:44:8d:e2:22:f3:49:bf:54:55:17:25:
ef:56:d4:34:6c:0f:4f:a3:b9:b5:37:cb:fa:1e:39:
e1:a1:53:ab:5e:fa:88:07:26:27:a8:fd:45:6d:2e:
fd:75:4f:31:11:d5:01:e4:37:b0:4c:dd:90:fc:d6:
29:a3:9a:cf:4c:92:3f:64:f5:56:7d:25:a8:4d:b0:
36:5c:e1:c3:f1:ee:81:9d:7f:74:c9:66:20:87:9d:
e8:cd:35:f6:77:f6:e5:7c:40:0b:d5:72:1a:b8:c4:
58:82:3f:b2:f0:c3:1b:26:c6:d2:a5:fe:77:80:7f:
b5:79:4b:75:98:5c:34:f8:74:3c:74:70:19:dd:71:
79:71:d2:3e:09:00:86:5f:df:71:02:18:3d:7c:f9:
e6:cb:3b:ee:c7:50:ee:e1:bb:7a:b0:ce:6d:32:83:
14:8e:1d:3b:d2:7c:58:ae:00:53:0e:dc:82:1c:b9:
73:07:97:9a:b3:16:29:82:d7:73:12:32:fa:66:fb:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:AE:3A:E3:C2:85:3E:A3:E4:83:1A:52:85:AF:F8:DE:E2:1B:22
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PW-uOuPChT6j5IMaUoWv-N7iGyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:490::/44
Signature Algorithm: sha256WithRSAEncryption
66:70:ff:c3:9a:b5:68:ac:a5:27:c7:11:17:7f:22:69:61:06:
95:09:e8:7e:4f:73:f9:c0:54:0a:25:ed:99:07:08:47:29:3d:
81:9e:66:9c:8b:d8:31:06:45:18:a6:e2:da:00:5f:5e:2c:95:
b0:b0:b8:0a:0f:dd:ba:f3:fc:d3:bb:8a:7b:e3:32:a7:2c:db:
4a:d0:07:e6:d7:d4:4f:5f:52:ec:4a:af:45:17:9c:d7:4e:ba:
7a:4a:8c:4c:e4:a6:d6:b0:93:a0:ea:31:5b:f1:82:8d:bf:e0:
e0:ae:aa:53:a8:19:f7:7d:eb:c2:54:4e:ab:67:9f:8a:b8:43:
08:97:92:b0:d7:70:e2:c7:dc:c7:2a:f2:9c:9a:8e:7b:3b:52:
e4:95:45:47:0e:27:f2:af:c4:c0:7c:71:36:36:e8:8b:d2:51:
72:21:42:bd:d9:e3:2a:15:7e:ad:b0:ce:d4:50:5f:e6:af:01:
2a:1a:94:3b:a6:dd:38:0a:37:44:77:6a:43:9d:c5:f7:a9:3c:
97:54:1d:d3:ac:0f:41:7e:46:6e:66:2d:6b:e5:45:20:5d:ff:
b9:06:4b:94:22:26:df:0b:35:83:57:3d:ed:0b:ca:b0:e3:a2:
e6:5e:48:aa:9a:97:38:84:67:b0:9c:2a:83:56:db:d5:ad:2b:
29:e2:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client