Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/U5IWhBqG97b4K8O2J5yF8MO11Cg.roa
File: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (raw, json)
Hash identifier: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=
Subject key identifier: 53:92:16:84:1A:86:F7:B6:F8:2B:C3:B6:27:9C:85:F0:C3:B5:D4:28
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 019427470AF89D3AAB49C46983FE3B597F1A
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/U5IWhBqG97b4K8O2J5yF8MO11Cg.roa
Signing time: Thu 02 Jan 2025 13:49:14 +0000
ROA not before: Thu 02 Jan 2025 13:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213252
IP address blocks: 2a0f:6580:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0a:f8:9d:3a:ab:49:c4:69:83:fe:3b:59:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539216841a86f7b6f82bc3b6279c85f0c3b5d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:c4:80:c2:82:9a:65:52:2c:a0:68:ce:56:
97:6e:5b:dc:a3:56:17:69:7c:59:b5:92:2a:64:e4:
2d:b6:c6:57:34:17:8c:70:a0:bd:3f:54:08:d5:ee:
a3:fb:fd:0b:43:0d:01:24:30:bc:cc:d9:58:c9:84:
b6:05:c3:3c:47:70:09:74:01:52:ee:68:e7:11:65:
10:5a:3d:ed:c5:29:05:f3:b9:17:20:4f:ac:7a:2c:
62:fe:61:a7:59:d8:e9:76:7d:56:f1:0e:d0:8f:25:
96:06:48:fa:da:97:13:49:c1:3d:e2:82:72:06:a0:
9c:56:b2:77:b2:5b:3c:eb:b8:ba:91:cc:6b:14:6b:
2e:7d:25:98:3e:92:98:d2:9f:9c:2e:ed:4d:e8:2d:
b1:0c:1e:b7:91:9a:22:fc:90:e3:52:d7:58:8d:92:
80:52:5c:40:52:63:3c:90:cc:b0:69:59:89:19:d0:
0f:42:80:f5:16:c5:a1:1b:9d:c9:71:2d:90:e1:c7:
9a:35:03:05:2b:2b:89:cc:27:b1:4e:64:21:c4:1e:
6e:a8:7b:16:93:2c:43:80:df:89:63:44:b9:3d:49:
c8:51:6e:a1:c4:62:15:4d:19:6a:9a:20:fc:0a:10:
3b:3c:13:af:ec:5b:6c:44:0c:8c:8c:ba:86:3d:7f:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:16:84:1A:86:F7:B6:F8:2B:C3:B6:27:9C:85:F0:C3:B5:D4:28
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/U5IWhBqG97b4K8O2J5yF8MO11Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:100::/48
Signature Algorithm: sha256WithRSAEncryption
a5:77:4e:99:02:3e:47:f6:d4:62:cf:91:5f:ae:94:62:95:b6:
fc:b8:31:a5:cb:17:76:55:f1:82:eb:39:86:b9:05:b0:43:7d:
93:a9:70:03:1b:65:a8:90:81:cd:10:4f:5d:aa:9d:9d:19:24:
43:01:2c:6c:35:f4:e5:fe:d9:7f:5b:84:3a:56:83:bd:75:3d:
6f:db:d6:fc:30:cf:ea:0a:9e:6d:8b:01:03:af:4c:66:a4:b6:
f2:99:0f:44:86:bb:df:bb:b9:46:ff:f4:99:f6:24:2f:0e:89:
5c:79:25:60:3a:16:7d:7b:86:75:3f:a8:88:81:3e:2d:48:ba:
e3:74:c8:50:07:e3:c7:0e:c2:df:a7:83:04:af:b9:0a:fc:2a:
76:62:ec:cd:a3:f2:f5:68:72:c4:af:ba:54:aa:b9:b0:9f:dd:
3f:e1:f0:8c:e9:1d:d4:9d:0b:39:b6:62:32:36:9d:ec:5a:03:
04:db:4a:79:89:73:15:93:71:5a:2e:8a:a3:7a:4a:8f:7b:81:
a1:c3:1e:0a:bb:87:7d:1b:23:b9:13:2c:75:4d:d9:82:41:5c:
c4:75:af:fc:26:04:de:90:3d:b5:d6:d5:af:c6:39:cd:cd:04:
b7:f1:9f:34:b2:5c:a5:55:9c:31:08:8c:09:4c:e0:61:46:9a:
88:5b:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:42 2025 by rpki-client