Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dAgwpgiRE2fhaRYA7R_57WtkW8s.roa
File: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (raw, json)
Hash identifier: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=
Subject key identifier: 74:08:30:A6:08:91:13:67:E1:69:16:00:ED:1F:F9:ED:6B:64:5B:CB
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01942445901C07153FAE8079BECEE3AF9EAF
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dAgwpgiRE2fhaRYA7R_57WtkW8s.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 2a05:4140:19::/48 maxlen: 48
2a05:4140:600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:90:1c:07:15:3f:ae:80:79:be:ce:e3:af:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=740830a608911367e1691600ed1ff9ed6b645bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:4a:c6:2f:f4:c2:7e:6d:48:8e:48:f0:3b:
0d:ec:37:ef:b0:af:cd:f5:a5:69:05:97:cf:12:d6:
7d:21:34:4b:fd:e4:a5:bd:a9:a7:8b:b3:b5:95:22:
5a:2e:65:31:0e:71:08:7b:65:19:42:bf:e3:81:78:
6e:cb:48:34:e7:d0:de:06:62:24:3c:79:46:6e:f2:
a2:39:5a:b1:d5:8a:82:2d:79:87:9c:0c:32:9d:00:
7c:16:d8:3f:6a:04:5e:7f:2c:89:72:d2:bd:ae:ab:
35:e8:04:7e:33:bf:2e:77:7d:fc:f5:33:e4:6b:d7:
39:e8:c2:3c:29:2b:95:b9:0f:43:0e:ce:b0:6b:87:
cf:89:52:5e:a8:12:a4:bb:3f:6e:2d:ce:49:82:e1:
f1:59:9f:8a:35:e0:37:3f:94:27:e5:50:dc:d7:f6:
ad:ba:de:14:1c:0c:99:f7:90:76:75:a6:aa:0a:72:
30:a6:e0:a8:d2:86:68:38:9d:68:20:5e:c4:4b:59:
98:9b:c3:c3:9f:c6:8f:d5:09:5e:4f:bc:35:5e:f0:
be:e5:fc:5d:fb:1d:02:9f:6a:bc:31:c9:42:3e:fe:
6b:e3:0e:c8:3c:76:06:4f:0a:45:3a:8c:5c:5e:05:
44:fe:73:96:f3:97:76:57:00:65:4d:39:13:36:db:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:30:A6:08:91:13:67:E1:69:16:00:ED:1F:F9:ED:6B:64:5B:CB
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dAgwpgiRE2fhaRYA7R_57WtkW8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:19::/48
2a05:4140:600::/40
Signature Algorithm: sha256WithRSAEncryption
37:3d:83:14:84:84:10:99:3d:3a:60:af:d2:0d:47:10:6d:4d:
56:fe:ce:79:1f:43:3b:f1:71:f6:d6:24:53:96:68:95:3f:4f:
ec:c1:04:f8:71:6d:e5:2b:3e:20:b3:27:e9:99:c0:ff:f3:a8:
d8:84:8c:5a:72:96:6a:3e:7b:fb:cd:66:b7:d2:b0:ac:dd:a6:
3c:42:d2:58:31:ae:c7:21:7f:cc:df:fd:0f:56:7c:88:41:d6:
bf:eb:e9:88:30:ef:19:5d:27:23:16:ee:ba:0f:00:ed:1f:96:
94:fe:70:55:ef:25:1f:8a:20:ba:c9:f4:8f:b5:a9:86:5d:ce:
58:a5:c0:72:f9:c7:fc:af:40:ab:53:1f:fd:9f:a7:0f:f6:2b:
4e:ab:31:e7:44:da:e7:d6:d2:20:70:b0:33:2a:cc:45:3a:c5:
9a:d5:ed:83:6b:07:ec:78:44:be:32:4d:6f:4b:23:54:c5:c1:
14:80:e4:5d:a0:56:86:7d:05:25:a3:b3:2c:62:94:0d:cb:6c:
8e:aa:5f:8a:69:19:df:39:e2:15:1b:cc:41:f8:fe:96:5d:23:
d8:c5:c6:45:b7:60:2a:de:4c:0a:75:f5:6c:04:dd:65:0f:0f:
62:10:ae:65:49:d3:18:c3:03:d3:20:68:e7:11:af:9d:9e:88:
8e:bc:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:33 2025 by rpki-client