Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/q5lGbXM0Zf4GwXePIQSe8ut8TaY.roa
File: q5lGbXM0Zf4GwXePIQSe8ut8TaY.roa (raw, json)
Hash identifier: uOnc60Isn0mZfVy1un1T8+5tulaDTcTUKP48Tf5OYCA=
Subject key identifier: AB:99:46:6D:73:34:65:FE:06:C1:77:8F:21:04:9E:F2:EB:7C:4D:A6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED6EA37AB3A5579E79F8BFFE3B2CE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/q5lGbXM0Zf4GwXePIQSe8ut8TaY.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 2a0e:aa01::/32 maxlen: 32
2a0e:aa01:bad0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d6:ea:37:ab:3a:55:79:e7:9f:8b:ff:e3:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab99466d733465fe06c1778f21049ef2eb7c4da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:a3:04:e5:4a:d1:37:c5:81:cc:62:f2:3a:
66:08:2a:55:87:d7:3e:c8:9f:eb:14:02:5e:1d:4d:
35:b4:0c:ec:8a:ef:2b:b1:ec:09:19:b3:38:5b:e4:
d9:5e:f5:dc:cc:cd:b9:24:7f:b8:56:28:a3:cc:04:
41:68:92:4d:fe:db:50:2f:bb:61:96:61:49:f5:a2:
eb:7a:e2:b5:5c:a1:f6:4a:5c:a8:47:de:d3:81:d1:
ac:07:b5:6c:a1:09:0e:30:b1:eb:00:ac:72:43:de:
7c:b1:75:f3:5d:01:2b:e1:47:73:26:e9:bd:48:01:
62:2a:02:e2:5d:60:f5:f8:74:dd:41:d0:1d:51:4d:
99:8c:16:04:96:07:e1:f0:7e:fb:14:4f:a1:c4:47:
60:a7:7c:8a:06:fe:d0:fc:3e:52:da:0f:dc:47:7d:
a2:8b:fd:f7:1d:fc:36:e8:a7:34:f8:a9:51:1f:32:
1a:ff:53:65:df:96:e6:9b:18:43:8d:19:29:47:ba:
7d:5f:55:b5:a6:8f:ec:6b:76:c4:06:f1:2f:ef:54:
4e:3c:36:ea:f8:90:d2:30:f1:69:81:a7:41:21:bc:
30:30:d6:c0:06:fe:b1:8f:b7:6b:52:ec:f5:63:26:
51:c7:f5:54:9f:79:ec:5a:91:8f:4a:7f:1b:ac:b5:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:46:6D:73:34:65:FE:06:C1:77:8F:21:04:9E:F2:EB:7C:4D:A6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/q5lGbXM0Zf4GwXePIQSe8ut8TaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01::/32
Signature Algorithm: sha256WithRSAEncryption
c4:6f:de:1a:00:c6:25:d9:95:5a:67:15:34:0b:32:5d:d7:49:
2a:96:de:f2:cd:0f:67:37:54:ea:83:5d:ce:2b:30:e7:e7:c3:
ea:e0:b8:a2:4b:04:da:9d:be:d8:b1:97:0c:e8:60:81:70:52:
fa:e6:c9:62:ef:33:e5:7e:ce:10:0e:82:6b:77:3e:2b:eb:01:
fe:4a:30:9d:cc:7f:26:55:63:70:db:11:0e:6c:2e:93:5e:2e:
c9:86:de:c4:cd:11:c7:15:30:0d:67:57:18:2b:5a:e1:c0:89:
c8:16:3d:dc:7a:74:c4:53:05:b4:83:89:73:96:fe:36:bf:27:
0c:d8:f8:0d:2a:25:52:a3:ac:97:0a:20:2b:6e:1d:3e:f4:3e:
2e:42:b1:78:80:8f:fa:d3:29:bb:e7:61:b0:d4:e9:36:4a:25:
81:81:c0:0d:ee:50:e2:7c:b1:01:c2:9c:73:9e:ad:0c:f1:95:
ac:b7:22:30:16:92:e8:0e:08:a5:ec:15:b2:bc:56:c7:ee:31:
4a:8b:83:8e:5b:fd:5c:c0:b2:cb:23:b5:40:e3:03:7c:0a:a8:
15:87:ac:9d:08:8f:35:a6:ca:ab:40:79:0c:ca:d6:4a:09:bd:
59:b7:9e:2e:24:37:3e:c7:42:8d:e8:91:53:2c:77:d8:74:fa:
fe:ee:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:12 2025 by rpki-client