Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/dukzfVMcltyysZZBvIjQGrHZPLo.roa
File: dukzfVMcltyysZZBvIjQGrHZPLo.roa (raw, json)
Hash identifier: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=
Subject key identifier: 76:E9:33:7D:53:1C:96:DC:B2:B1:96:41:BC:88:D0:1A:B1:D9:3C:BA
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0194236983927825F42CED198A9EC625F490
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/dukzfVMcltyysZZBvIjQGrHZPLo.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13068
IP address blocks: 2a01:190:1505::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:83:92:78:25:f4:2c:ed:19:8a:9e:c6:25:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76e9337d531c96dcb2b19641bc88d01ab1d93cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:b4:4d:97:02:d0:80:72:81:18:6e:90:a9:
86:e0:28:e5:78:d3:df:d5:d3:27:9e:d7:c7:5d:9d:
b3:57:1d:c0:6e:96:1f:82:81:ae:6c:31:92:bf:d0:
56:85:0a:a2:71:97:e1:95:d5:06:8f:cf:80:9d:6d:
7f:b5:fb:2c:ce:93:67:53:b3:3e:58:78:ed:2c:b4:
05:5d:f0:97:6a:0d:f4:f2:f2:a2:c8:cd:bd:d5:4e:
e9:44:59:e1:ff:12:7e:cb:59:b0:19:32:25:c4:7c:
fc:ef:53:bb:a4:de:0c:a3:5e:e1:cd:50:7f:da:5a:
a2:ae:f8:be:88:b6:97:6c:be:39:f5:b1:22:5d:89:
ee:1c:60:62:6f:41:4f:3b:6c:7a:ef:46:f2:08:b3:
48:e1:82:df:52:c7:6c:f3:40:8f:61:f8:d1:57:e3:
28:7c:54:89:f8:4f:9d:6a:11:ee:d8:71:e5:7d:7e:
43:84:b7:e4:c4:90:7e:68:d9:a1:4a:6b:e2:57:94:
6b:15:03:97:a7:50:f3:71:19:70:dd:a8:80:9b:cf:
02:bd:26:8e:ec:40:62:2b:a2:ea:10:80:12:b0:b1:
2d:2b:8c:c8:15:67:ae:f0:3e:9a:46:b4:dd:88:cd:
aa:2b:f7:78:f9:dd:6d:4e:2b:74:a3:d4:c8:91:3a:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:33:7D:53:1C:96:DC:B2:B1:96:41:BC:88:D0:1A:B1:D9:3C:BA
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/dukzfVMcltyysZZBvIjQGrHZPLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1505::/48
Signature Algorithm: sha256WithRSAEncryption
ea:e1:05:88:25:88:3a:fb:1e:4b:07:1e:e1:62:2e:e9:a9:69:
59:c1:a2:f4:90:82:60:a1:67:15:b1:e2:10:4a:09:c8:a7:bc:
15:3e:50:3a:f8:ae:d1:dd:5d:fa:d5:9b:41:61:2d:7a:db:b8:
7e:b7:5d:bc:29:ba:47:d3:05:b3:7f:6e:2a:13:3c:fb:d2:bb:
fe:49:08:a5:0f:42:c7:63:7c:59:f7:58:6f:98:9e:be:22:ef:
06:61:b0:56:8c:5e:b9:dd:e3:8b:ee:6d:d9:f7:c9:1b:2e:70:
4e:d6:6d:76:f0:1f:e9:84:65:0b:94:68:17:41:ba:ee:7a:80:
31:5e:d5:0e:17:9b:7d:88:19:86:08:e1:3d:2d:3b:cf:30:5b:
57:b9:5c:a9:b5:d5:15:9c:1f:7f:4d:81:dc:37:70:c9:a6:a9:
11:36:d0:eb:d0:ef:f5:c7:a9:43:9c:b0:f7:18:08:2d:aa:c0:
25:70:2c:d3:1b:4f:d6:49:c3:4c:6d:25:c7:73:86:3e:96:68:
7e:f2:47:89:d5:81:65:35:46:39:33:d0:2e:cd:20:d0:da:5a:
df:f4:a9:cf:f5:45:3c:c2:93:4e:39:cb:7f:04:2f:03:45:be:
d1:74:d9:ae:80:e3:85:73:51:d0:45:83:17:6a:e1:6f:33:af:
73:6f:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:45 2025 by rpki-client