Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/alXjjyJjACKReiBWFe9q2LojJSA.roa
File: alXjjyJjACKReiBWFe9q2LojJSA.roa (raw, json)
Hash identifier: 0CGeb6hxkkcv5NiB3c+nNxG+nWc/zDf3rldJ9DYLqso=
Subject key identifier: 6A:55:E3:8F:22:63:00:22:91:7A:20:56:15:EF:6A:D8:BA:23:25:20
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C58C041FCF99B1FA5258150D0506D
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/alXjjyJjACKReiBWFe9q2LojJSA.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31483
IP address blocks: 2a02:2698:a002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:c0:41:fc:f9:9b:1f:a5:25:81:50:d0:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a55e38f22630022917a205615ef6ad8ba232520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:37:46:79:08:25:76:a0:f0:4e:12:18:04:
3a:3e:75:15:d7:1c:78:dc:25:11:20:97:6c:93:24:
1c:d9:44:10:a8:a6:02:18:3c:60:53:3f:40:73:18:
ef:59:c1:94:9a:f7:61:c5:b7:c0:c0:6b:18:f5:f8:
02:80:e7:d7:03:09:af:e2:01:fb:57:e0:f3:e3:91:
82:dd:ba:01:39:51:f3:e1:16:33:16:49:86:38:1c:
01:62:ab:14:c5:21:c3:59:c3:6d:5b:03:e3:8a:1a:
aa:2f:5d:18:dc:10:e5:8b:af:31:43:3e:51:4a:5c:
13:4c:9c:5e:9c:d2:99:83:0b:03:a4:6f:9e:3f:f8:
96:7e:77:bb:a8:a2:d9:83:6b:01:e5:21:c2:b0:e4:
f4:cd:d8:0d:ec:2c:af:8c:b2:1e:7b:f4:d4:bf:0e:
83:93:df:bc:70:97:06:4b:68:ae:dc:ea:49:4d:69:
16:42:51:09:72:e1:0d:8f:53:55:39:89:96:c7:ee:
21:b0:63:20:3b:90:0b:a7:58:24:ce:16:a6:5d:80:
9a:01:b2:44:0b:e0:43:cb:8c:91:9b:ee:d7:76:6e:
39:55:2d:80:b1:f2:f0:0f:af:51:9f:91:b2:a3:24:
bc:4c:ed:3c:16:ce:a2:ef:6e:09:aa:f3:e1:97:7e:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:E3:8F:22:63:00:22:91:7A:20:56:15:EF:6A:D8:BA:23:25:20
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/alXjjyJjACKReiBWFe9q2LojJSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:a002::/48
Signature Algorithm: sha256WithRSAEncryption
32:49:87:e4:21:73:7a:37:d1:f7:07:bb:18:d5:c9:af:b0:d6:
5a:05:b7:c6:b7:61:57:90:8b:e6:f2:dd:95:38:67:0b:e1:92:
ee:bb:f2:c8:df:0e:e8:37:49:67:94:bf:c0:6b:b9:f5:b8:7e:
1f:e9:8c:e3:39:9b:ad:e8:4f:80:db:cb:c0:3b:11:d8:11:f0:
9b:7c:3b:18:ed:a0:de:3a:71:3f:89:ca:ad:39:08:42:b4:8e:
59:4b:a6:6e:07:62:51:b6:28:65:41:80:65:1c:13:0c:b4:f9:
0f:06:72:29:52:37:fd:69:6f:12:84:b7:7e:b9:7e:d3:08:bd:
ba:75:0b:90:0b:37:37:7a:bf:6a:d4:8f:f8:cf:26:85:69:c0:
2f:44:05:be:2b:3f:bd:e7:be:97:f1:bc:de:c6:ae:9e:92:c5:
fb:9e:8e:83:6f:78:ce:8d:98:18:aa:07:b3:23:2e:4d:ad:25:
fb:c3:0f:ff:a6:4c:29:63:2e:a8:7b:ae:37:ff:2a:b3:7a:61:
05:81:0a:3f:40:fc:74:6b:b7:e1:8a:06:56:1d:a3:aa:33:ee:
91:ae:7a:16:21:a9:49:1c:d2:86:8d:f8:8b:a3:d2:3e:f2:c1:
c4:d8:14:7a:97:22:4e:be:d9:d9:6d:c1:8a:e7:c4:32:c9:e9:
e6:e7:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:47 2025 by rpki-client