Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa
File: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (raw, json)
Hash identifier: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=
Subject key identifier: 48:BC:4C:65:8D:D9:79:52:25:64:24:6C:0F:9F:86:FF:97:EE:57:E2
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55E75E8FA6A8B671D6C71898C0671
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207708
IP address blocks: 2a10:4646:160::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5e:75:e8:fa:6a:8b:67:1d:6c:71:89:8c:06:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48bc4c658dd979522564246c0f9f86ff97ee57e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:13:11:eb:ee:71:e1:a5:b1:e8:fa:67:c9:
22:e3:d7:f4:b4:fd:85:1a:94:e9:10:9a:c5:37:cc:
cd:4f:01:75:1e:eb:59:18:e9:f8:2e:18:1c:35:62:
8f:a8:8a:ba:e9:2b:21:6b:ff:6b:a6:07:e1:9f:8f:
35:2b:e7:c9:b9:5f:20:e0:1a:a3:6c:8e:ab:69:d7:
c5:72:bf:d6:49:10:7c:61:83:de:5e:fd:45:ec:1a:
d5:f2:a5:45:99:4b:71:96:ff:4f:c5:ec:8c:6a:e2:
ee:1d:a0:d6:08:69:e9:8a:b3:69:18:21:56:5d:ff:
1a:83:79:4b:dc:cd:10:b9:9e:56:a7:dd:0f:8c:9b:
50:82:a2:54:a7:c6:6a:e1:d6:45:11:d3:2c:91:99:
5c:57:9e:91:68:89:08:4b:2e:26:b3:c4:3d:c6:5b:
b8:c9:6c:fe:02:14:2b:58:bb:35:0d:1a:d1:62:4c:
9a:90:73:c2:77:fc:42:5c:93:e9:3c:07:d7:37:33:
24:b8:14:03:2f:0d:e0:6a:21:f1:de:c4:dd:4e:84:
14:ab:c9:28:cb:79:da:56:f4:a7:5e:ff:12:32:8d:
87:45:1f:70:aa:ae:84:65:07:a6:a1:e5:32:ca:92:
f2:d5:75:5f:b3:a9:74:17:ba:dc:fa:2e:6a:97:99:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:4C:65:8D:D9:79:52:25:64:24:6C:0F:9F:86:FF:97:EE:57:E2
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:160::/48
Signature Algorithm: sha256WithRSAEncryption
2a:8d:d0:3f:db:73:39:02:e5:9e:82:03:9d:ed:c6:dc:46:0c:
c0:0e:0b:a8:ab:89:91:80:ae:06:01:a2:3b:44:ad:f2:6d:46:
ae:c2:23:c7:85:87:df:38:fc:75:28:45:f4:e2:e7:d6:7f:3f:
a2:d8:36:7f:9b:16:63:ac:65:e3:8e:e0:9f:8e:94:19:43:45:
a9:fe:43:68:6a:54:f4:9b:15:f8:cd:d8:9e:a3:c2:f7:ab:73:
6c:96:c3:93:8d:b8:24:5e:db:f3:96:a3:1a:33:59:49:01:84:
bd:be:73:61:8a:32:ee:b5:a5:9e:0b:4c:70:23:7f:de:f2:cb:
8e:1a:02:46:bb:29:9d:f9:84:fd:0d:1b:ab:a2:bd:3d:0e:17:
bf:15:36:20:c4:4d:9e:ef:d8:b3:65:4c:29:ce:de:4f:9e:25:
49:43:bf:91:aa:5a:ff:1f:06:44:de:fc:81:60:1b:70:7f:0e:
1d:0f:bb:17:31:f5:8b:58:59:e4:07:55:1a:b5:e2:00:45:83:
fd:3c:46:67:7e:b5:8b:68:06:bd:08:66:cf:ff:12:b4:7d:97:
78:d4:02:54:bf:4c:a7:44:ea:9d:2b:c7:e3:30:8c:dd:0f:a3:
c0:48:4a:01:09:86:9c:97:e9:90:a2:ae:10:0b:85:22:8c:a6:
63:ea:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:00:29 2025 by rpki-client