Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/IdUNE8Bk_Z7fSVdofZG6DoB4RP8.roa
File: IdUNE8Bk_Z7fSVdofZG6DoB4RP8.roa (raw, json)
Hash identifier: jMy00f5o6BL984KvySv5lFGwkghnlgZ8ewo6LqiJ5iA=
Subject key identifier: 21:D5:0D:13:C0:64:FD:9E:DF:49:57:68:7D:91:BA:0E:80:78:44:FF
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422202D95EAED9ED7AC6180E829F8900E
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/IdUNE8Bk_Z7fSVdofZG6DoB4RP8.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202939
IP address blocks: 2a0e:8f02:f04e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2d:95:ea:ed:9e:d7:ac:61:80:e8:29:f8:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d50d13c064fd9edf4957687d91ba0e807844ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:5a:30:85:82:05:5f:63:55:b8:ab:41:4a:
3f:73:13:3c:ed:c4:dc:97:ad:6c:7c:16:63:ce:69:
ef:f7:28:e1:ea:4b:cc:41:15:67:7c:6d:e5:c8:cb:
1c:21:20:50:f8:58:09:9c:13:d6:16:e8:64:06:0f:
a8:03:0c:b4:1a:49:3a:0c:d9:ff:43:98:06:f5:9b:
5a:ab:67:93:a3:9d:98:8b:c1:1b:b0:4c:44:40:aa:
03:5c:35:c4:53:87:98:e1:5d:4d:60:0a:42:35:b1:
0b:c7:5e:f9:26:58:cf:5b:76:a1:a5:37:04:00:49:
fe:46:e5:0a:5e:68:b9:8a:c6:e7:35:61:4a:32:c9:
18:67:9d:28:2d:e1:de:89:e7:25:7a:38:e7:a6:21:
a4:b5:0f:b2:63:06:4a:66:75:98:19:a3:55:df:55:
6a:36:99:dc:db:81:c8:4a:e5:49:c3:ae:5c:f5:30:
1e:5a:e0:97:8d:1b:66:37:3c:9c:95:f0:cc:01:99:
cb:3b:7b:a8:a1:8b:58:be:81:6b:d9:4f:08:61:4f:
33:a8:5f:de:d4:cf:84:0e:cf:06:84:a1:85:4c:60:
e5:0e:98:1a:f1:71:a6:27:34:1b:35:67:72:66:22:
e0:fb:bd:b9:aa:4e:b6:ba:45:87:37:42:a4:86:ec:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:0D:13:C0:64:FD:9E:DF:49:57:68:7D:91:BA:0E:80:78:44:FF
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/IdUNE8Bk_Z7fSVdofZG6DoB4RP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04e::/48
Signature Algorithm: sha256WithRSAEncryption
68:4c:48:b1:07:5f:10:1f:82:0e:f6:71:97:35:8c:be:24:6d:
28:75:e0:a0:76:5a:39:5c:13:a4:08:c4:e9:23:ea:9d:d8:41:
c6:b8:9b:53:4a:3f:93:ee:de:17:5e:f6:bb:11:a9:37:58:8d:
05:7d:2b:18:a9:84:8f:13:33:ec:c8:29:f2:a8:42:94:d8:3a:
9f:a8:7e:24:26:dd:86:79:01:d0:43:08:29:f0:44:0e:db:8a:
f6:c9:e5:61:95:de:49:8c:1f:96:b7:45:79:9c:3b:93:68:79:
0e:7b:46:12:68:3f:56:95:0e:37:69:3d:00:70:ae:07:f9:fd:
3b:44:94:f0:da:58:43:30:fc:64:88:2b:d2:54:27:cd:3a:e6:
9c:9f:79:13:c5:08:7b:d2:cd:11:7d:2f:ae:10:5c:73:18:8b:
e5:21:6d:cc:f2:0b:af:c2:dc:60:f9:d8:ce:ad:28:a7:e1:9f:
c4:b3:3e:2e:cc:d6:91:f4:a0:a5:d8:3f:04:5d:30:f7:0a:f5:
20:de:08:3a:7e:66:95:95:2a:db:7d:6a:fe:ab:b9:dc:db:c5:
fb:15:73:40:61:16:ef:8e:3b:dd:e4:31:9b:98:7a:69:69:9e:
c9:4b:61:22:df:6e:fd:75:ba:1c:1b:46:ac:88:92:2f:ef:2a:
38:fb:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:37 2025 by rpki-client