Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa
File: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (raw, json)
Hash identifier: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=
Subject key identifier: 0C:AA:5D:D0:55:A8:49:AF:49:3A:19:D3:49:47:8E:00:71:28:8C:54
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 0194266C37687B1E62D805340B753C1921C9
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60927
IP address blocks: 2a0b:b600:3c01::/48 maxlen: 48
2a0b:b601::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:68:7b:1e:62:d8:05:34:0b:75:3c:19:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0caa5dd055a849af493a19d349478e0071288c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:de:b2:56:08:09:f6:b3:37:99:42:3b:96:
9a:18:a6:9e:0d:fd:fc:c0:cb:17:0a:b6:4d:23:a8:
3a:08:72:4d:a6:51:e6:81:ed:9c:65:fd:91:60:07:
22:f8:34:04:12:37:ab:06:7b:b0:69:7b:2e:94:77:
4f:32:d9:fa:ed:e9:1e:4e:fb:08:6c:a8:7f:35:fc:
de:3c:a4:4a:55:f6:32:aa:67:ed:03:3e:60:c0:d6:
f7:18:5f:1d:f0:17:fd:81:f4:1f:e3:b2:3a:e5:27:
5c:79:6b:89:fb:71:2a:02:c3:02:28:46:a4:68:f3:
90:f4:a8:ab:91:f2:48:d7:16:a0:45:d7:bf:29:56:
90:80:1d:0d:75:22:45:d6:ce:bb:23:15:b6:33:86:
5f:27:36:11:50:62:57:fd:ea:ee:2b:2b:d0:97:db:
8b:ff:66:f2:ed:dc:52:64:0b:0c:07:72:5a:f0:38:
15:f4:c5:3b:d5:e8:22:db:09:8f:b1:50:b7:44:e6:
1b:ee:bf:15:d0:e9:1a:27:9b:d8:c4:3b:27:02:74:
5a:03:83:7c:f6:28:1b:59:67:24:5e:ea:80:07:86:
2d:d3:67:da:60:7b:77:41:b8:2c:bc:5f:ac:6a:85:
dc:b8:a1:a1:0f:b6:84:bd:be:c6:ac:9a:ab:b6:41:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:5D:D0:55:A8:49:AF:49:3A:19:D3:49:47:8E:00:71:28:8C:54
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:3c01::/48
2a0b:b601::/48
Signature Algorithm: sha256WithRSAEncryption
82:ba:70:f2:e4:4c:d6:53:bf:4b:e1:15:e3:2f:89:9b:2b:c0:
f2:90:99:db:32:a7:0b:71:f2:4f:0e:3f:cb:fa:b7:68:80:e4:
f9:97:7a:d8:c9:f2:73:07:68:ab:be:1a:ff:b3:5a:d3:9e:44:
5b:51:32:29:68:0b:84:93:e4:2d:d6:cd:d9:c8:f7:42:49:9c:
70:46:ad:7f:06:bd:86:46:75:cc:35:86:48:5d:d4:62:a1:9a:
ab:67:b0:b3:f1:48:92:a9:cc:45:b1:d6:97:72:0a:74:0e:a9:
b2:ba:99:17:3a:d1:23:dc:a0:55:d0:9d:98:73:e8:fd:09:c0:
a9:ba:57:44:f9:1e:da:d9:73:82:26:97:1b:29:14:47:0b:33:
f9:a0:1c:5c:b0:74:98:c4:50:d7:de:f9:73:e3:ce:e2:5a:46:
1b:96:6e:7e:c5:a7:87:af:42:11:9d:58:8a:2b:97:ca:6c:44:
5e:cb:70:ee:b8:fe:fb:6a:dd:16:cb:b2:e7:b7:c5:5b:95:f3:
73:7d:0a:1c:99:c4:f9:a5:52:fc:06:45:30:7a:13:27:37:ba:
f3:e2:0f:d1:2d:7b:6c:1f:7c:6c:a8:8e:3e:f7:06:e5:1b:1a:
61:f9:16:cd:4f:c8:8a:07:aa:57:c9:f0:23:fc:d7:b2:e3:24:
14:bc:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:51:54 2025 by rpki-client