Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/03S3zqK95PVrNyaECSnyE5pVh7Q.roa
File: 03S3zqK95PVrNyaECSnyE5pVh7Q.roa (raw, json)
Hash identifier: DezLS8zloNX/hxFweOJiF3/9wsft4M8qwxMGa1qKwXs=
Subject key identifier: D3:74:B7:CE:A2:BD:E4:F5:6B:37:26:84:09:29:F2:13:9A:55:87:B4
Certificate issuer: /CN=4af4671bbfe1e38cccff8c9340039963344f23a3
Certificate serial: 018E83F091E5F93675035B4D8924425C0807
Authority key identifier: 4A:F4:67:1B:BF:E1:E3:8C:CC:FF:8C:93:40:03:99:63:34:4F:23:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvRnG7_h44zM_4yTQAOZYzRPI6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/03S3zqK95PVrNyaECSnyE5pVh7Q.roa
Signing time: Thu 28 Mar 2024 07:22:45 +0000
ROA not before: Thu 28 Mar 2024 07:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208241
IP address blocks: 2a11:87c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:f0:91:e5:f9:36:75:03:5b:4d:89:24:42:5c:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4af4671bbfe1e38cccff8c9340039963344f23a3
Validity
Not Before: Mar 28 07:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d374b7cea2bde4f56b3726840929f2139a5587b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:d5:f6:89:01:b2:a1:96:9f:9a:53:f4:01:
36:4d:65:60:6c:bd:34:5d:06:fa:0f:fa:d6:1c:4b:
9b:a4:67:63:21:ce:d8:88:1d:12:20:68:72:e5:75:
d7:60:f9:f0:be:87:5b:35:78:df:05:97:73:0c:3f:
ae:5c:d2:a9:24:61:34:0a:90:d3:30:d6:dd:a2:13:
2e:bc:0c:3f:bd:b1:f4:31:81:60:cf:48:74:48:9e:
da:3d:5b:3a:3e:ab:72:4d:89:e4:3f:12:cc:49:c2:
0d:58:7c:d4:02:7a:42:18:9d:b3:26:8e:ff:ea:d5:
4a:fd:3e:e4:37:cc:a8:90:f8:7a:8f:97:be:f5:31:
84:11:e0:fe:d3:84:81:75:6d:83:ed:a1:c4:ce:bb:
4f:5f:26:f1:c7:e5:70:4f:cb:17:ea:c7:69:3f:d6:
a5:ed:b2:36:ba:65:bc:a1:3f:51:67:9e:e3:5e:53:
84:92:40:ef:c1:ae:76:c0:23:9d:b8:cf:f1:df:77:
73:ff:31:e3:5e:9c:83:e8:9d:7a:79:5f:3d:c4:0d:
9c:75:3f:6f:64:34:9a:8e:38:dc:4b:ed:b6:13:32:
24:64:97:71:87:4b:ae:64:2e:9b:21:b8:f5:b7:8b:
b6:21:3c:8f:6d:7c:21:f4:9b:fa:7b:31:36:54:ee:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:B7:CE:A2:BD:E4:F5:6B:37:26:84:09:29:F2:13:9A:55:87:B4
X509v3 Authority Key Identifier:
keyid:4A:F4:67:1B:BF:E1:E3:8C:CC:FF:8C:93:40:03:99:63:34:4F:23:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvRnG7_h44zM_4yTQAOZYzRPI6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/03S3zqK95PVrNyaECSnyE5pVh7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/35f1cd-a424-41ef-8b3e-3bd2243b030b/1/SvRnG7_h44zM_4yTQAOZYzRPI6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:41:93:51:a6:7d:22:b8:91:5f:3b:85:d1:ba:8a:fd:eb:c6:
50:8d:6a:8b:cd:fb:0e:24:71:cc:e7:90:e7:d8:73:82:cf:15:
94:cc:a8:1e:69:24:a2:6c:2b:8c:46:70:2a:f9:60:38:25:06:
2a:24:2b:66:62:57:65:77:37:19:72:d3:d7:ce:0a:6d:aa:e1:
a3:e0:4a:49:0d:c1:66:b7:aa:dc:35:d6:45:db:b7:08:03:d5:
65:2c:f2:33:74:80:d9:aa:c4:47:0a:4b:aa:52:c5:13:95:05:
30:84:ad:19:f1:55:9d:af:93:62:ca:e2:6f:66:ca:94:ba:56:
3b:61:73:78:ff:0b:80:80:bb:a8:9b:51:98:21:31:08:3c:65:
01:bc:fd:0c:b8:80:4a:6f:5e:55:01:bb:ee:bb:22:1f:0b:c0:
ca:5d:08:7e:e3:17:3d:92:c0:e9:ba:19:24:52:bd:58:4b:27:
1d:3e:93:dd:d8:80:20:7f:5c:4d:ad:b2:02:2d:c0:01:89:d6:
d0:e4:be:82:90:17:45:cd:6e:e0:9f:d7:df:f3:7d:bc:d5:df:
35:5a:2e:bc:a2:ad:70:01:64:ed:2e:8a:47:01:21:5a:a6:e4:
39:d2:b3:10:5d:f4:ba:d0:1b:d2:d5:ac:74:31:80:aa:7a:bb:
1b:6b:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:37 2025 by rpki-client