Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa
File: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (raw, json)
Hash identifier: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=
Subject key identifier: 09:29:67:2B:28:88:BC:FB:0E:60:B8:27:01:EE:82:48:CE:59:01:F4
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DC98EFBE746088D7266EF66A66C9
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199518
IP address blocks: 2a0a:280:2300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dc:98:ef:be:74:60:88:d7:26:6e:f6:6a:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0929672b2888bcfb0e60b82701ee8248ce5901f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:57:e8:69:74:61:40:63:fa:c4:1f:23:71:
36:73:ee:fb:8a:27:84:a0:89:7b:8d:27:1a:7b:33:
37:8f:e6:07:8e:de:f9:96:7d:c6:68:81:17:42:a7:
93:0f:6b:de:2c:13:5b:4e:80:e7:6b:66:89:b1:77:
3e:c8:cf:7d:b3:03:4e:70:15:a8:7a:68:09:73:24:
a3:15:85:83:f4:9a:c4:7e:66:9a:9f:d8:23:ea:1d:
9a:46:4f:1c:c1:81:00:61:e0:44:89:1e:62:3e:96:
7c:91:03:8d:52:1c:a1:11:b3:22:8d:a2:fa:55:7c:
0c:29:97:0c:68:05:04:98:71:ec:1b:23:57:35:9e:
27:10:b3:f6:0b:dc:03:4b:3d:54:86:27:c9:37:56:
a5:9e:cd:87:68:c4:7f:c4:7d:b7:24:bf:86:c3:48:
93:7c:4a:62:0d:cf:99:ca:36:45:8f:fa:7c:32:2d:
9a:68:ef:2a:68:9f:ba:34:23:a9:2c:97:77:b3:97:
f1:2c:87:87:35:5d:5e:2c:c0:d7:e5:55:47:49:51:
44:cf:c9:75:5d:12:72:eb:4a:53:4c:73:f0:73:c2:
af:dd:84:af:2f:46:fb:43:7c:8e:06:71:3f:7f:f0:
b9:14:9e:2b:a6:1e:88:a8:1c:a9:69:39:10:ad:67:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:67:2B:28:88:BC:FB:0E:60:B8:27:01:EE:82:48:CE:59:01:F4
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2300::/40
Signature Algorithm: sha256WithRSAEncryption
5c:ee:a6:68:ac:41:44:ed:6c:da:c4:76:77:41:4b:78:b5:9a:
90:d7:7b:0f:d6:55:79:7c:db:37:d6:33:5d:a0:32:a8:cc:bd:
83:06:9b:ec:78:ae:36:c5:70:72:4b:59:48:79:2f:b5:18:5a:
0b:0b:ff:da:7e:6c:1a:bc:db:a5:bc:a3:be:db:51:c1:b7:2e:
53:79:08:6b:99:e1:eb:19:81:1e:f0:29:a8:8a:e4:93:42:06:
0c:ac:d3:62:47:29:05:83:e3:7d:b7:02:0c:7a:bb:9b:82:34:
be:7c:a2:d7:98:5e:c9:02:68:5b:e9:bd:60:99:fe:af:21:3d:
cd:7f:28:f0:c0:8c:aa:c0:c7:09:e7:7e:1f:82:a2:ba:bd:7d:
4f:7e:da:4d:58:1e:90:b5:a2:5c:b2:cc:23:65:52:13:ba:47:
19:61:e3:ab:74:53:ed:59:cc:a7:2d:70:67:9e:98:e7:5a:f8:
a8:9f:68:13:78:83:0c:aa:9f:0b:0f:bb:35:f0:aa:9d:bc:3b:
d1:0a:2f:11:7c:0e:23:73:e7:25:15:0a:07:5f:f7:b6:e2:42:
9f:fc:2c:16:fb:ba:6c:b3:f3:3e:4e:5e:fb:33:15:b6:ec:c6:
32:08:ae:a8:33:26:80:e8:29:84:a3:23:c4:94:49:fd:dd:7d:
e7:9e:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:10 2025 by rpki-client