Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/auPheZJQUgOuYBMBsx7mdlfGN4I.roa
File: auPheZJQUgOuYBMBsx7mdlfGN4I.roa (raw, json)
Hash identifier: HhngSDxfYFTzwLbGvsVDREhC0D9mQqqTFf2kbTwgUk0=
Subject key identifier: 6A:E3:E1:79:92:50:52:03:AE:60:13:01:B3:1E:E6:76:57:C6:37:82
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244596711E0EDCC71039A392C8CFDF76
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/auPheZJQUgOuYBMBsx7mdlfGN4I.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140::/29 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:9::/48 maxlen: 48
2a05:4140:10::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:28::/48 maxlen: 48
2a05:4140:29::/48 maxlen: 48
2a05:4140:30::/48 maxlen: 48
2a05:4140:31::/48 maxlen: 48
2a05:4140:32::/48 maxlen: 48
2a05:4140:33::/48 maxlen: 48
2a05:4140:34::/48 maxlen: 48
2a05:4140:35::/48 maxlen: 64
2a05:4140:36::/48 maxlen: 48
2a05:4140:37::/48 maxlen: 48
2a05:4140:48::/48 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:190::/48 maxlen: 48
2a05:4140:300::/40 maxlen: 40
2a05:4140:400::/40 maxlen: 48
2a05:4145::/32 maxlen: 32
2a05:4147::/32 maxlen: 32
2a11:e100::/29 maxlen: 48
2a11:e103::/32 maxlen: 32
2a11:e107::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:96:71:1e:0e:dc:c7:10:39:a3:92:c8:cf:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ae3e17992505203ae601301b31ee67657c63782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:14:61:dd:2a:d8:82:08:c9:7a:15:74:cf:
b7:aa:98:51:5c:d7:ff:23:64:ea:14:b1:71:a7:51:
e4:0c:9a:05:1f:2e:aa:9a:90:ca:63:e1:f3:2a:33:
1c:7f:e3:ba:93:0e:10:19:ff:25:b3:58:ef:fd:e1:
a9:a5:0d:28:93:4d:01:14:c9:bb:17:68:e3:57:b9:
27:7e:ec:f1:f0:01:94:42:e7:07:fe:ac:ce:c6:d2:
7f:a0:5b:6c:b1:58:85:92:90:29:36:5e:af:c3:6b:
19:51:60:5e:d0:8c:f3:c0:d6:94:99:3e:93:51:5f:
34:9f:46:4c:88:17:eb:c6:74:13:f8:c6:c7:49:f2:
4b:ac:e4:0a:77:4d:c9:5a:3b:2a:a5:d3:15:b7:18:
36:96:89:63:25:0a:39:da:84:cd:24:96:95:5b:ad:
89:be:47:0d:a9:af:3b:7b:e6:f4:c9:20:76:7c:dc:
81:35:20:1c:d1:12:17:ff:13:58:70:39:eb:42:2a:
55:4e:e6:74:6f:71:02:dc:b4:35:dc:82:69:e7:00:
c2:c1:72:22:1b:96:43:89:f2:59:c0:ca:bd:71:21:
89:e0:2b:7c:92:a6:dc:b5:4c:0b:1f:94:2d:78:a1:
0f:ff:da:f0:19:46:76:f7:1c:51:97:ad:7b:8f:9c:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:E1:79:92:50:52:03:AE:60:13:01:B3:1E:E6:76:57:C6:37:82
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/auPheZJQUgOuYBMBsx7mdlfGN4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140::/29
2a11:e100::/29
Signature Algorithm: sha256WithRSAEncryption
1c:14:9f:0f:07:9b:ba:60:b6:24:7f:fb:72:ec:92:37:d5:64:
aa:76:0a:bf:be:a5:8a:98:84:f8:5b:e7:6d:a4:9b:5d:cc:97:
91:b2:4c:8b:db:5c:96:7f:d5:71:57:ab:71:15:53:c0:cc:ca:
8c:2e:03:e6:ca:a3:39:06:52:73:4a:a2:e9:de:be:29:e1:07:
06:88:05:10:42:b0:b1:ee:3f:da:af:75:f5:cb:70:29:8a:a9:
0f:64:05:20:03:45:5a:67:a5:20:4c:65:02:44:4c:a4:64:13:
92:59:b3:24:13:99:db:32:7f:1f:90:57:08:03:00:fd:cd:96:
fe:1d:f5:fb:68:76:ec:f1:45:5e:c2:14:ed:5c:60:b3:dd:ef:
a9:b7:31:78:c4:cf:f2:e7:45:54:e8:9d:d4:2d:c7:01:f2:32:
17:86:28:fb:16:8b:19:e8:07:40:4e:64:91:0b:66:fc:ad:f4:
3e:cd:43:bc:09:63:30:53:1c:65:a6:2d:f0:66:a4:a2:e5:08:
bf:2c:99:f7:4d:1d:21:dd:aa:8b:56:85:77:02:22:a8:ea:1a:
4a:db:5d:60:b7:a6:b0:4f:6a:35:8f:8e:31:35:4d:77:2a:c5:
ef:ea:cf:03:38:c4:68:58:8e:99:41:8d:40:59:59:66:74:b9:
d5:cc:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:05 2025 by rpki-client