Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-LDQehMaFdp1GT4gjtVSnX898Dk.roa
File: 1-LDQehMaFdp1GT4gjtVSnX898Dk.roa (raw, json)
Hash identifier: 0Y+Yi6pA7u3kB/3aXKr91sqXm3TpfvuLNGYYzs7M0Ts=
Subject key identifier: F8:B0:D0:7A:13:1A:15:DA:75:19:3E:20:8E:D5:52:9D:7F:3D:F0:39
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0196433ECAAE7A3F33D26B4E5777DF910133
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-LDQehMaFdp1GT4gjtVSnX898Dk.roa
Signing time: Thu 17 Apr 2025 10:15:10 +0000
ROA not before: Thu 17 Apr 2025 10:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:5a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:3e:ca:ae:7a:3f:33:d2:6b:4e:57:77:df:91:01:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 17 10:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b0d07a131a15da75193e208ed5529d7f3df039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:5c:26:b0:61:29:89:d3:26:98:0f:07:39:
af:c7:7f:b5:97:4d:10:a7:3d:12:85:da:3e:b6:32:
02:eb:05:a1:bd:76:2f:06:30:3e:f3:a2:3e:9d:db:
37:e9:1a:49:0a:a5:f3:7b:ae:29:a6:49:5e:91:bd:
61:5b:cf:6d:d6:f7:20:c2:09:22:b2:ce:fc:f5:3c:
29:83:95:12:9c:91:a3:6d:0f:9b:a6:d3:35:23:b0:
02:54:ec:44:5f:ac:6d:e4:fb:56:76:7f:0a:b7:48:
a3:71:39:5b:28:14:fa:de:ac:4c:52:8c:37:a8:5f:
62:43:b7:a5:08:9e:83:29:a9:60:f2:fb:3b:09:3b:
91:89:ff:a1:32:99:31:be:72:83:03:15:ee:b9:a4:
32:e5:34:fd:b2:45:cb:30:25:a5:39:ba:cf:76:ae:
e9:c0:fd:94:c6:ab:cd:22:2a:6f:df:5d:b5:1f:b1:
94:c6:d9:f1:47:54:18:a5:fe:41:94:58:92:28:fa:
ad:77:41:e6:71:58:39:32:6b:1d:08:28:01:8c:80:
75:79:c9:2f:f0:ee:42:55:ab:86:fa:c9:48:c3:bc:
59:7a:b9:07:04:9a:2f:fe:08:77:10:9e:c4:d0:7d:
3f:26:94:e6:c4:c3:35:8e:07:ef:64:57:24:90:c5:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:D0:7A:13:1A:15:DA:75:19:3E:20:8E:D5:52:9D:7F:3D:F0:39
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-LDQehMaFdp1GT4gjtVSnX898Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a40::/32
Signature Algorithm: sha256WithRSAEncryption
72:8f:7a:7b:5a:76:70:20:02:1f:dc:67:20:8b:04:c8:a0:93:
2d:73:5d:2e:cc:81:95:b4:71:c8:6d:20:e9:f9:c3:0e:82:11:
3d:d1:a4:7a:f4:af:2c:fa:f9:13:d9:40:9d:eb:b7:9d:04:ef:
15:48:27:1b:78:eb:1c:fe:a5:e7:0c:48:c7:66:49:76:af:e3:
19:ad:78:5b:81:a3:0c:60:e4:81:9a:1d:93:94:d2:b8:a1:76:
46:c8:fd:52:09:ce:8c:b9:a5:5f:da:42:d4:49:fc:3b:42:6b:
04:d0:a2:6d:27:f6:63:53:98:29:7c:fd:73:1b:36:0d:31:cd:
b1:a8:53:2e:ee:77:f2:30:bb:f5:61:0d:28:22:ae:e7:03:69:
a4:09:c7:1f:a8:cd:30:80:1c:77:e8:f2:8e:1b:91:ea:04:5d:
b4:fd:53:a4:42:e2:a6:e4:e5:bf:45:df:d5:6b:a2:00:32:8e:
90:4b:cb:b3:c2:27:23:cb:60:2e:0d:69:8b:6d:99:90:1b:db:
aa:2d:8d:87:c5:b1:bb:47:cf:ae:de:d2:d9:98:8f:56:69:0e:
a0:27:94:1f:3f:56:1d:92:df:7a:03:80:f8:a4:c0:15:8d:8a:
aa:79:05:30:b7:47:02:fb:b4:83:a1:05:48:8f:fe:47:99:1c:
9f:3c:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:32 2025 by rpki-client