Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa
File: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (raw, json)
Hash identifier: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=
Subject key identifier: 75:95:FE:2A:F8:25:F6:8E:81:7E:00:C6:02:45:94:2A:BE:B3:E9:2A
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019420D63A851E83C6210922C2A09A87A6E7
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23738
IP address blocks: 2a0f:d800::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:85:1e:83:c6:21:09:22:c2:a0:9a:87:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7595fe2af825f68e817e00c60245942abeb3e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:f3:30:56:71:d6:85:03:93:90:44:ba:28:
ae:8d:e3:17:af:43:33:d5:8e:ad:f7:4f:68:79:31:
e2:9e:a8:14:98:4b:94:a2:f4:6b:40:99:8c:f5:39:
6d:d9:7d:67:09:97:f4:73:aa:e0:94:eb:cd:de:c3:
47:2d:a6:d7:7b:e9:d3:51:ff:d5:f7:f6:7a:37:f1:
85:54:bd:14:06:56:22:ff:be:a9:b5:2a:c6:f3:c4:
b3:8c:92:8c:a5:73:47:2a:95:ad:3f:a0:f6:03:07:
a6:79:b9:23:23:6c:54:62:4b:fd:5b:14:f2:a7:40:
80:a7:a0:36:e6:9e:22:61:91:6f:f3:f3:a2:53:e9:
5b:f2:a5:53:22:c4:3d:81:64:e4:5e:f4:77:60:a0:
1a:58:0a:7c:b7:91:fc:39:f3:80:9c:d6:7d:b7:9a:
b5:47:07:40:7d:70:22:1b:bd:70:5c:f9:68:a6:36:
92:ab:98:29:2c:69:90:b9:5d:fb:a5:be:35:00:85:
b8:88:52:00:cc:ed:72:3b:ea:75:b3:44:90:83:31:
f6:b9:ed:6f:bb:98:55:31:33:c3:42:a1:92:f1:91:
bc:e0:e3:3a:e5:cc:dd:fb:3f:fa:f2:11:9d:b5:77:
40:70:c9:38:fc:4b:db:e9:e6:4d:c2:6f:57:76:9c:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:FE:2A:F8:25:F6:8E:81:7E:00:C6:02:45:94:2A:BE:B3:E9:2A
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d800::/29
Signature Algorithm: sha256WithRSAEncryption
4f:da:c4:e8:64:37:58:4d:12:a3:62:ff:ff:48:27:df:6e:74:
a7:dd:55:d8:e9:4d:c8:7d:63:12:eb:4e:20:b4:f6:ff:f5:bf:
c4:c5:9f:af:7e:52:8c:73:3b:27:1f:a9:40:7d:19:4a:ef:fe:
f3:f5:33:4d:f8:7a:98:cc:d9:9c:27:da:23:9e:ae:80:34:97:
5c:8d:9f:f3:88:e6:0c:bf:7f:a5:60:22:09:e6:3d:04:7e:f5:
7f:42:4a:9d:8d:30:f6:08:e2:8b:6e:1d:c7:a4:62:ce:70:66:
a8:bf:8b:2b:4e:33:11:b8:58:0a:eb:3e:29:72:78:37:85:c6:
6c:00:c4:c3:d1:74:25:9a:cb:32:90:1e:c2:5a:46:fc:98:5d:
6f:4a:42:0e:32:6b:b9:5a:07:78:89:0b:c2:93:43:98:a5:93:
0f:67:97:a3:fb:5a:b8:a4:cd:5e:7d:98:49:dd:62:6f:f4:ab:
29:b6:44:30:23:62:52:c2:c7:70:f8:b6:f4:d3:e1:17:e2:b5:
ae:ee:78:77:52:a9:11:a9:60:f4:58:83:9a:4f:47:e8:a1:40:
7a:af:92:31:15:a2:ce:5d:f9:27:74:91:62:61:5d:85:66:96:
f9:30:08:e1:e7:cf:e7:e5:54:2f:43:a9:9b:cf:e8:97:93:35:
f9:5d:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:01:53 2025 by rpki-client