Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/2dwbqqJHBI-1C6FxO3hRcUYRJAM.roa
File: 2dwbqqJHBI-1C6FxO3hRcUYRJAM.roa (raw, json)
Hash identifier: of7D/UKtXwiX2uqFD0HoNZ9y0SNNfazhseCGwy9jBPI=
Subject key identifier: D9:DC:1B:AA:A2:47:04:8F:B5:0B:A1:71:3B:78:51:71:46:11:24:03
Certificate issuer: /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial: 01856E266CEF218B06F720D18D4CD3A2D2C5
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/2dwbqqJHBI-1C6FxO3hRcUYRJAM.roa
Signing time: Sun 01 Jan 2023 16:24:50 +0000
ROA not before: Sun 01 Jan 2023 16:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34466
IP address blocks: 2a0e:cd00:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6c:ef:21:8b:06:f7:20:d1:8d:4c:d3:a2:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
Validity
Not Before: Jan 1 16:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9dc1baaa247048fb50ba1713b78517146112403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:80:db:41:18:d1:9e:3c:d3:d7:79:82:8b:
8c:ec:69:46:89:ca:eb:92:3a:04:5a:5f:13:76:43:
fe:88:96:f9:a8:a4:d7:f2:4a:67:63:e7:f2:be:96:
d3:86:74:8c:5e:af:bf:cf:11:f5:e8:83:ba:f0:3d:
91:48:5d:19:e1:f6:63:91:2b:44:76:11:97:e5:09:
95:13:26:8e:96:18:20:08:f2:75:2d:a4:34:0d:84:
f1:8a:85:e6:85:c9:ae:11:88:fa:24:3b:e4:c0:68:
74:88:23:45:44:96:04:1a:95:14:4a:79:08:12:09:
f4:1c:14:55:b3:76:96:6d:f7:8f:67:51:14:b9:50:
47:76:3a:21:54:23:47:70:73:2e:86:20:f8:e8:ff:
21:2b:b7:c4:92:43:32:10:cb:cf:fb:9e:30:28:32:
3d:1f:c0:fe:50:b1:b9:1c:62:75:32:fa:64:6d:3a:
52:d2:c5:2a:a9:ba:02:70:1a:71:c2:8f:12:03:86:
ed:50:bc:d5:1d:a8:80:b5:b6:22:30:df:af:72:3f:
94:f4:e5:12:9b:8e:97:05:96:67:46:01:2c:03:d4:
c6:1a:76:45:59:e5:da:31:15:22:40:13:fa:94:f5:
60:fd:40:d1:8c:0e:88:8c:13:d2:e4:68:3c:96:71:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:1B:AA:A2:47:04:8F:B5:0B:A1:71:3B:78:51:71:46:11:24:03
X509v3 Authority Key Identifier:
keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/2dwbqqJHBI-1C6FxO3hRcUYRJAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cd00:400::/40
Signature Algorithm: sha256WithRSAEncryption
2f:fd:23:ff:fd:ca:f0:1b:e6:82:ab:13:f1:83:d2:80:60:7b:
16:60:38:2a:5a:8b:0d:c6:70:04:cb:54:24:2f:ef:55:49:df:
0f:d6:12:c9:fb:cb:0a:88:c6:3c:79:7e:40:34:aa:40:92:80:
7f:23:5b:b8:54:6b:bc:89:0f:74:17:84:49:4f:c9:37:0d:03:
12:f6:0d:85:60:64:fa:22:e0:da:b0:69:8e:f9:00:a9:18:f7:
2b:6a:21:70:19:28:6b:d4:af:9c:b2:28:fb:ca:36:4c:57:97:
0e:41:fc:57:63:a6:eb:6d:45:8e:9f:a7:40:7b:91:89:55:c5:
0a:dd:a2:82:65:80:7d:73:87:42:d7:bd:54:2f:53:e7:c3:c2:
2a:8b:92:5c:bd:f3:ca:3c:00:92:a4:2f:0a:17:d0:fd:2b:a6:
55:5d:e5:9b:4b:b7:37:ab:42:a8:3a:a5:f4:c0:33:aa:fb:33:
d9:25:36:71:02:df:74:94:b6:40:95:91:9c:e4:51:fe:1b:46:
b1:4d:ff:49:a5:49:d6:5e:00:c1:c6:7d:1a:79:ab:fd:57:3a:
6c:f5:7a:4c:64:0d:13:7b:e6:85:86:ec:cd:90:e0:a5:27:cd:
a5:62:1a:fe:ad:78:44:28:e0:a6:6d:29:d4:ce:b7:35:cd:1a:
ff:5a:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:53 2025 by rpki-client