Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/AbAEVxebdm5G6D1PAcaC5LnGsN8.roa
File: AbAEVxebdm5G6D1PAcaC5LnGsN8.roa (raw, json)
Hash identifier: Dq6Ap6xJijHogpVYcHLyNczvNtcQKKUMlCLwYT3XZ8M=
Subject key identifier: 01:B0:04:57:17:9B:76:6E:46:E8:3D:4F:01:C6:82:E4:B9:C6:B0:DF
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C5AA5E175701F11E9D3779D5A3EEC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/AbAEVxebdm5G6D1PAcaC5LnGsN8.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39435
IP address blocks: 2a02:2698:c00::/38 maxlen: 48
2a02:2698:1000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:a5:e1:75:70:1f:11:e9:d3:77:9d:5a:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b00457179b766e46e83d4f01c682e4b9c6b0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:a0:89:55:a1:1d:65:de:64:e4:05:f4:12:
48:ba:7d:13:af:d4:7d:7f:ff:66:72:cf:b0:b4:ab:
4b:4b:f4:e5:cb:f1:f2:73:39:e2:32:dc:ca:78:e1:
cb:61:a3:cc:cf:fa:19:52:dc:71:ea:d1:6e:5d:eb:
12:65:99:95:ab:cb:c0:8d:46:f8:b9:24:6f:46:38:
e1:c2:ec:fb:de:80:30:9f:37:63:8b:50:d8:79:4d:
a7:7d:01:6a:d9:a0:59:66:e5:ce:c5:df:f3:d8:25:
c2:2f:ac:6b:42:a4:87:4f:38:c8:92:07:5c:18:a2:
77:3d:96:be:fb:d0:6b:1f:14:2b:47:6c:4f:96:ae:
d6:73:39:b0:6d:61:81:83:57:49:3e:7b:c1:a7:f2:
34:e8:39:e5:c5:b6:37:8a:af:6e:c4:57:6c:cd:b1:
b6:9f:20:6e:d5:3a:b3:20:48:1c:6b:33:a7:7b:4d:
cb:0d:98:5a:11:d5:a8:2d:9f:dd:a7:bd:9b:65:a0:
d3:99:f2:0e:4a:2a:1a:c6:07:3a:64:c1:e7:f0:f2:
51:ba:de:83:05:78:ae:b9:fa:76:70:88:3d:77:08:
68:c1:85:fc:c8:cc:e4:03:26:53:96:75:80:42:43:
84:8a:3d:b2:62:dd:40:f9:b9:e6:7d:52:29:4d:2a:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:04:57:17:9B:76:6E:46:E8:3D:4F:01:C6:82:E4:B9:C6:B0:DF
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/AbAEVxebdm5G6D1PAcaC5LnGsN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:c00::-2a02:2698:13ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:ea:fa:89:a4:8a:ee:3d:04:8a:08:a6:81:05:3d:77:0e:f8:
f3:f8:19:b0:d5:f4:0f:6d:fe:ee:45:c3:47:e1:cc:52:e6:90:
24:f7:c2:eb:10:c2:b2:53:c1:29:be:7c:db:06:f2:db:0b:3c:
90:c4:2d:de:00:40:53:25:c2:7c:aa:97:6f:35:11:83:d3:df:
a6:e4:9b:2c:14:81:1f:53:d3:3a:32:0f:c2:98:da:0d:ac:0f:
3c:37:2e:d4:db:c1:a7:93:b8:53:d5:48:a4:a8:c6:b5:e7:3c:
2a:a2:2d:4b:93:51:71:44:a9:cd:38:da:48:74:87:8c:4e:40:
21:fd:00:57:4a:ae:c2:88:91:bf:ce:15:af:07:a3:3a:8c:6e:
a2:61:58:67:e0:1f:69:0c:63:56:67:c6:51:54:fd:99:39:71:
6c:e4:f0:49:ee:dd:32:8e:da:77:11:b8:4e:59:4a:c4:28:96:
97:d7:1e:c3:b3:38:23:fe:cd:47:da:57:4b:7c:fb:88:cc:11:
7d:d9:0e:78:20:18:f7:d6:34:1e:1c:c9:26:db:ce:58:9e:4e:
ff:33:da:e9:e1:5f:08:f2:26:8d:33:40:c0:c8:d5:d6:d5:6e:
bb:0a:5f:2c:13:7b:66:8e:50:c8:9c:29:9c:b1:1a:eb:9a:06:
10:30:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:50 2025 by rpki-client