Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa
File: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (raw, json)
Hash identifier: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=
Subject key identifier: C8:F5:3A:03:DA:7E:2C:CB:63:37:83:A6:72:69:2F:E0:DA:EC:5E:5A
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 0194258FB03A34D511F0D6C25F919138A401
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:2c3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b0:3a:34:d5:11:f0:d6:c2:5f:91:91:38:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f53a03da7e2ccb633783a672692fe0daec5e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:ba:16:7b:49:5b:98:12:88:7d:7c:6d:5c:
8f:b8:ab:45:a8:cd:1d:f9:02:3d:55:fd:ce:52:6c:
b2:9d:3f:95:be:28:28:a9:a7:11:fe:ba:3e:a0:4f:
7d:b4:a5:6c:b3:29:85:ce:cb:f1:6a:9e:81:83:83:
be:f2:75:0e:bb:d4:19:6e:19:01:81:93:71:44:3b:
6b:16:8f:ff:56:c3:13:77:d5:d0:c2:84:4e:4c:3b:
77:73:1f:52:02:1a:0f:d3:d2:f1:e4:7f:4d:2b:12:
1c:f8:b0:0e:3c:66:60:da:05:5f:bd:f8:a1:c4:d0:
56:1b:a1:ef:f4:0c:2f:f9:d2:fe:77:01:ed:5d:f3:
c8:b0:b2:d9:82:1c:41:7e:8e:01:c3:30:e9:ee:52:
29:e9:5a:75:c8:0e:a0:b5:26:93:29:ec:d9:5b:07:
62:2e:ce:6d:b2:5f:9c:b6:28:8b:c8:54:04:23:98:
e9:5f:e5:c1:1a:a0:32:2d:a1:87:d0:16:53:12:12:
51:a6:18:b5:8e:6f:95:75:8d:e6:97:1f:27:5a:88:
f4:32:e9:a9:85:be:91:c9:99:e6:3f:f4:52:24:44:
14:de:ae:24:ce:aa:b8:ca:44:9f:f3:e9:8c:b8:97:
24:51:dd:99:1f:45:02:f3:d6:37:7d:44:af:d0:86:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:3A:03:DA:7E:2C:CB:63:37:83:A6:72:69:2F:E0:DA:EC:5E:5A
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c3c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:ef:23:55:33:61:1d:74:d0:9e:d0:f6:f7:e9:a5:23:57:0e:
97:f4:88:c2:e7:3f:70:6e:fe:8e:e0:6f:c0:12:21:48:26:44:
b3:c9:e8:6b:5b:29:6a:42:c8:28:52:44:89:65:fe:d0:76:b2:
03:20:c9:b9:12:71:9c:4f:c9:93:16:d3:5d:e0:bd:35:d1:6c:
74:53:65:69:a7:38:f5:88:c2:eb:13:62:9a:7a:1d:1e:e6:c8:
1d:fd:b9:77:16:b4:af:91:11:ae:5b:e3:db:f3:8b:66:94:eb:
6d:96:9e:ad:c9:bb:51:75:11:90:44:7e:f2:a2:6e:41:6d:b7:
f0:65:62:04:08:4a:2a:05:7e:b6:fd:dc:2e:a9:dc:20:33:af:
83:61:f5:55:fc:d3:9b:29:d8:07:e6:f4:e5:14:77:1d:90:bb:
37:61:a1:e0:02:87:f4:fb:43:32:cd:85:c5:71:1f:12:27:0e:
dc:32:a5:c4:27:18:6c:f0:e1:32:04:26:55:13:54:2a:81:57:
90:c5:b3:65:fe:77:a6:60:d6:d9:3a:bd:95:41:1c:73:b8:13:
a4:b1:44:ae:3d:1b:c1:ce:aa:28:e8:99:dd:21:47:da:d6:f1:
89:a0:e0:a4:e6:74:69:29:1b:41:1e:1f:9e:84:17:25:68:67:
bd:30:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:32 2025 by rpki-client