Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/JgzpPohbfVvMIcKTpIBaDGYyTbE.roa
File: JgzpPohbfVvMIcKTpIBaDGYyTbE.roa (raw, json)
Hash identifier: G+qmeF9FhBKU4LJ3ZbSw7iLKTabN9a1acVHHKbI2D6M=
Subject key identifier: 26:0C:E9:3E:88:5B:7D:5B:CC:21:C2:93:A4:80:5A:0C:66:32:4D:B1
Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial: 0194258ECEE67D0D45C514E089AA8C8D1791
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/JgzpPohbfVvMIcKTpIBaDGYyTbE.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9512
IP address blocks: 2a00:fd80:aaaa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ce:e6:7d:0d:45:c5:14:e0:89:aa:8c:8d:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=260ce93e885b7d5bcc21c293a4805a0c66324db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:2c:8b:81:a3:55:80:e8:ad:6e:6f:c4:70:
b5:8c:1f:d4:22:a1:b5:86:47:e3:0e:be:96:1e:fd:
e8:72:82:69:a3:38:9b:9d:ba:ff:0b:7c:88:28:ca:
1f:3d:dc:25:13:57:6b:ab:a8:21:5e:29:43:8a:68:
c0:61:0e:30:91:74:7f:83:cc:08:63:e1:e6:ea:49:
95:33:2d:a3:02:4d:61:c9:d1:54:8d:c1:14:74:35:
dd:18:f7:67:30:00:71:11:0a:d2:5e:c9:c8:0e:e5:
2f:dd:69:9d:db:77:f8:a8:09:aa:25:d4:1d:b1:52:
1c:96:f8:3a:7f:1b:3f:35:8b:50:61:64:0f:fb:5f:
66:7c:a0:6e:5c:81:4f:21:50:8b:1d:52:59:b6:95:
b6:2d:c8:c7:a5:02:6b:5a:76:74:3e:79:5f:59:41:
00:dc:50:1f:9d:dd:79:b7:ca:18:36:1c:0d:c3:fa:
2a:4e:a4:c3:28:8e:2b:f9:c4:30:9e:ed:c4:86:86:
82:c5:1c:22:f9:01:5b:ba:7b:29:ee:05:ba:d0:bf:
cb:19:f1:66:ff:b4:0c:f2:cf:88:d6:a2:59:92:ae:
af:b9:8b:ea:eb:3f:fc:02:30:53:90:17:d4:c4:76:
a5:ff:c4:1e:27:0d:60:5b:58:59:ea:c5:cc:74:dd:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:E9:3E:88:5B:7D:5B:CC:21:C2:93:A4:80:5A:0C:66:32:4D:B1
X509v3 Authority Key Identifier:
keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/JgzpPohbfVvMIcKTpIBaDGYyTbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fd80:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d0:74:5c:f2:64:4e:e4:a2:f2:78:8d:c7:1a:83:2a:b2:74:
b6:e0:36:3b:ce:84:56:1b:32:8c:46:33:1b:91:78:90:1c:65:
b0:7f:da:e5:a3:af:30:a8:8b:82:04:6b:69:0d:54:10:7c:2d:
66:ed:0f:e7:02:06:b6:df:67:5e:8b:be:c5:28:a6:a9:90:a1:
d7:1c:f3:f7:aa:b8:82:bd:a9:55:92:1c:0d:7f:4a:7a:b6:9c:
1b:5a:e7:ab:68:ea:d5:73:38:59:39:69:4d:4a:ef:c9:73:71:
5d:e9:bb:99:3f:5a:b1:4b:88:06:67:e3:cb:db:5c:7b:79:53:
a3:51:cb:d5:fa:37:f5:a6:d2:7f:8f:4a:e6:25:c6:f0:4b:2c:
ae:71:57:0b:04:2e:9a:f1:81:4f:52:b9:b8:77:28:65:71:cc:
56:bc:a9:9b:a1:83:fc:fe:71:03:84:20:7a:87:f1:8a:9a:b2:
26:a0:b2:26:18:95:24:97:19:5a:a0:9d:a9:54:e5:ab:63:9c:
a9:4f:e7:c7:f8:e6:f5:ea:15:ef:c5:ed:75:81:e3:6e:e8:28:
00:4a:1a:21:26:3d:a2:8d:90:1f:7b:91:e0:88:7a:30:33:65:
20:d0:2a:ab:ac:9f:ce:0d:1b:05:00:4f:c8:37:aa:85:8f:c6:
45:62:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:10:16 2025 by rpki-client