Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_S6k1c_YZyTXV-QbiGNh2eJ9qek.roa
File: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (raw, json)
Hash identifier: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=
Subject key identifier: FD:2E:A4:D5:CF:D8:67:24:D7:57:E4:1B:88:63:61:D9:E2:7D:A9:E9
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B650455197AEF69DA542E4DD93D3A7
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_S6k1c_YZyTXV-QbiGNh2eJ9qek.roa
Signing time: Thu 02 Jan 2025 15:50:46 +0000
ROA not before: Thu 02 Jan 2025 15:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397513
IP address blocks: 2a01:488:bb0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:50:45:51:97:ae:f6:9d:a5:42:e4:dd:93:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd2ea4d5cfd86724d757e41b886361d9e27da9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:3a:40:40:23:da:ce:ab:ef:73:f4:68:44:
04:23:f0:57:df:ce:ee:23:35:7a:15:13:af:93:ed:
8a:34:fc:a2:b9:eb:c1:81:66:dd:15:52:bb:4f:aa:
5f:6b:59:4f:ec:21:83:ef:66:38:9b:90:5e:42:10:
4f:4e:cb:4c:e4:ea:34:07:1b:3e:40:9b:93:0e:0b:
9a:41:e7:72:05:3b:59:94:25:a1:9b:12:3b:1e:fd:
f4:7f:6c:f2:7e:1e:23:1e:3c:76:32:35:42:8a:01:
a3:bb:7b:d6:61:a5:b3:c2:39:33:9a:e4:4d:2a:dd:
6b:88:8b:04:cd:06:c2:de:02:07:7e:97:f1:cb:73:
fb:2e:c7:64:bc:e8:7a:ca:13:88:04:3f:ca:f0:2d:
a1:ee:4b:26:25:0e:76:86:a2:81:fb:4f:0f:f0:4d:
58:93:24:61:ca:44:13:a2:ce:20:75:89:99:1f:0f:
e4:fc:e3:6b:19:52:c2:2a:4c:4b:19:51:e3:00:18:
7d:42:86:08:ba:0d:87:46:d8:f6:7e:d8:0c:94:4a:
86:af:4a:c1:79:c8:de:b1:9c:38:00:a5:e4:09:df:
0e:57:f2:55:28:0c:51:43:d1:66:ff:c1:44:49:46:
5c:19:dd:ce:8d:ec:04:35:5d:ae:b9:86:a7:fc:11:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:A4:D5:CF:D8:67:24:D7:57:E4:1B:88:63:61:D9:E2:7D:A9:E9
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_S6k1c_YZyTXV-QbiGNh2eJ9qek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb0e::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b6:87:ae:17:d5:a4:22:7b:04:88:48:9a:df:0d:b0:4b:16:
dd:ea:4e:e1:c2:9b:f4:e7:86:d5:5b:61:81:18:5e:57:1d:9f:
48:5e:35:52:d6:39:ae:42:6c:db:4a:7f:69:74:36:80:22:4e:
51:ad:3f:76:83:34:58:db:2c:75:d7:d6:fb:b9:e7:43:87:63:
3a:3c:21:ad:5c:1f:f3:fa:0c:e7:b6:a8:ad:15:68:40:e7:41:
e6:7d:1b:a5:be:0d:46:6b:ea:4c:91:7f:73:fd:ae:54:d1:fd:
d4:8e:49:ec:b1:44:e2:d7:d0:d2:3b:88:00:d1:63:8a:86:de:
3d:5f:ee:93:b0:2f:b1:b0:a2:88:be:68:52:db:44:e5:25:7a:
df:19:e4:e7:9f:4a:87:02:2b:7d:34:ff:a8:51:1e:5d:86:a7:
b1:3c:f3:d5:f9:c4:c7:48:87:05:e9:44:80:54:52:39:b8:5d:
59:00:63:1b:3f:0e:18:f9:36:10:53:54:d6:15:78:01:a9:74:
8c:36:02:61:3c:0c:c1:9b:a6:0e:d4:38:38:1b:8b:34:ac:a3:
71:15:fe:1d:88:81:af:6f:5c:24:64:57:4b:28:69:41:3d:10:
99:dc:06:7e:5d:5b:82:a8:3d:e7:b8:77:1f:21:f0:bc:f3:00:
d6:b7:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:12 2025 by rpki-client