Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tKye8dVNCEc8AAjNm_49ZxD4xcQ.roa
File: tKye8dVNCEc8AAjNm_49ZxD4xcQ.roa (raw, json)
Hash identifier: FmlKJzRpC0Gga0Iq26ZE7Z+7yBQvmSyQ9BfJhqKQcfE=
Subject key identifier: B4:AC:9E:F1:D5:4D:08:47:3C:00:08:CD:9B:FE:3D:67:10:F8:C5:C4
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED7F87B3E8DD7ECE8990ED8D2D491
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tKye8dVNCEc8AAjNm_49ZxD4xcQ.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207454
IP address blocks: 2a0e:aa06:480::/44 maxlen: 48
2a0e:aa07:e00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d7:f8:7b:3e:8d:d7:ec:e8:99:0e:d8:d2:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ac9ef1d54d08473c0008cd9bfe3d6710f8c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:29:cf:b5:a0:e8:5c:7f:1f:20:ac:96:b1:
1b:32:6e:da:c2:fe:30:c6:71:88:22:c7:fe:b2:58:
00:d4:32:de:fa:5c:55:a6:bc:72:15:0b:d6:b7:40:
57:ee:8d:7f:96:a4:ee:9e:aa:88:f6:c3:6a:5e:2f:
f8:86:f7:10:14:2e:ca:48:46:65:ac:19:35:1f:74:
6f:15:ba:42:d2:7c:08:46:83:8c:1e:ae:4f:63:c7:
16:f6:7e:1e:16:87:dc:3a:92:48:09:6e:61:f3:89:
8f:a9:95:d0:83:5b:e4:2b:8d:ba:42:52:6b:4c:fb:
fb:3a:a0:f7:43:91:56:16:95:94:f7:ae:64:90:15:
0b:e5:90:5f:70:95:39:4b:03:67:fa:c3:1f:79:61:
1d:a3:8e:d0:2f:81:76:3e:94:33:b7:5d:db:f9:d2:
c9:0d:ca:17:c9:63:d7:c2:96:12:87:38:33:13:48:
4e:b8:d2:d1:91:82:33:32:ec:ba:8d:cd:34:48:70:
a1:94:fc:f3:32:aa:ea:83:b0:94:f3:14:1f:a5:87:
da:54:58:65:c9:cd:aa:7e:e0:00:23:3b:3c:49:1d:
a1:5f:0a:91:d8:62:01:96:84:b1:f1:7c:d8:5f:45:
38:40:07:ce:d0:a0:98:e2:ff:aa:4e:b2:5d:66:26:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:9E:F1:D5:4D:08:47:3C:00:08:CD:9B:FE:3D:67:10:F8:C5:C4
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tKye8dVNCEc8AAjNm_49ZxD4xcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:480::/44
2a0e:aa07:e00a::/48
Signature Algorithm: sha256WithRSAEncryption
b6:9d:96:50:b1:34:ba:82:81:01:58:2b:db:90:94:7e:cc:25:
e1:3f:82:f8:8b:95:e9:ba:53:4c:09:ff:5e:1a:c1:20:19:0c:
62:68:f1:11:4c:a0:17:f8:d3:68:b7:62:92:e6:08:85:cb:37:
c5:5a:18:49:43:e1:d6:47:72:b9:b2:c3:2e:8e:c1:d0:a7:56:
f1:6b:5d:9f:51:92:8d:de:a2:90:8a:ca:cf:fc:6f:fd:49:f0:
e5:90:f0:f6:74:7d:4f:0e:01:0c:b9:c3:b7:17:87:f4:90:f0:
fe:2a:b0:27:b6:94:56:50:e2:df:93:b0:f8:51:71:71:48:17:
4d:93:e9:3f:4a:50:9a:15:c3:b3:71:55:6a:9c:07:36:f2:e2:
c7:1c:b4:7f:7f:15:3c:0f:43:9c:93:b4:af:86:c2:1a:c3:77:
8b:ca:cc:62:6c:09:be:48:7b:6d:ed:f5:71:f1:3c:b8:db:e2:
96:86:7e:92:07:dd:ff:8f:df:4a:d4:f6:0d:7c:a5:a0:ed:0d:
a6:57:65:7b:dd:1d:77:1d:6f:77:08:b2:38:7a:5b:fd:c9:e6:
59:44:f6:c1:29:d8:ec:ee:ee:68:da:62:cd:14:2d:1f:c3:92:
fc:73:77:8e:29:32:a7:a5:de:e0:1b:2b:f5:85:3b:c0:cf:22:
3c:88:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:50 2025 by rpki-client