Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/pK-akxxW38kMPF3tOSehLJv18so.roa
File: pK-akxxW38kMPF3tOSehLJv18so.roa (raw, json)
Hash identifier: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=
Subject key identifier: A4:AF:9A:93:1C:56:DF:C9:0C:3C:5D:ED:39:27:A1:2C:9B:F5:F2:CA
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019427486EEE5BB40E1DEB8BFF656B33C624
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/pK-akxxW38kMPF3tOSehLJv18so.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134196
IP address blocks: 2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6e:ee:5b:b4:0e:1d:eb:8b:ff:65:6b:33:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4af9a931c56dfc90c3c5ded3927a12c9bf5f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:72:42:b2:90:09:d5:f7:f5:ba:42:23:31:
1c:f6:cd:14:1b:bc:51:70:13:38:3e:a2:0e:78:4a:
d9:32:05:50:80:12:f9:b7:72:c6:b1:44:8a:ff:95:
ac:ea:4a:a0:f7:42:da:db:3d:62:90:2e:49:c5:08:
d3:cc:09:15:fb:80:b8:d5:ac:fb:64:28:e4:69:11:
f1:99:af:95:cc:63:68:19:70:29:2f:12:61:67:ae:
de:ca:86:71:51:1d:64:55:96:d1:15:fd:39:86:25:
a6:47:c8:09:b6:3c:d5:58:d7:3e:17:31:ae:31:9d:
2e:08:43:3c:88:aa:2c:f6:8d:e3:f7:26:92:fb:fd:
5a:84:a6:e3:32:25:6e:37:54:f8:8f:8e:70:08:24:
17:ca:7d:a6:e8:7a:99:cf:3d:5d:2e:cc:46:28:2d:
e4:63:60:11:0f:9e:1e:be:57:bc:80:44:67:81:d2:
ef:40:72:0f:2a:5f:92:02:a8:a5:4d:ce:c2:96:b2:
cc:ae:62:be:3f:12:72:30:e7:cd:ed:c8:15:a7:68:
5f:28:8d:60:82:f6:5e:05:79:ac:81:93:5a:db:d4:
a1:aa:cf:13:c6:73:69:e5:c3:69:95:06:e8:85:db:
08:6a:1e:b0:1f:52:14:72:94:8f:54:e2:93:99:7c:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:9A:93:1C:56:DF:C9:0C:3C:5D:ED:39:27:A1:2C:9B:F5:F2:CA
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/pK-akxxW38kMPF3tOSehLJv18so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
19:03:82:7f:8d:90:04:16:df:66:91:23:5d:78:b5:20:1a:b6:
04:54:81:3e:06:4c:d9:0f:fa:81:40:5f:4a:4b:dc:e1:65:63:
3d:dc:15:03:8f:d6:59:d2:16:9b:1a:9e:1d:57:0b:94:5f:50:
9b:1c:df:d0:76:74:37:3e:09:0e:0d:a6:4a:81:d4:9d:b8:7b:
b2:e2:bb:a0:9a:fe:b9:f1:e0:e8:70:3f:f6:72:1b:48:5b:5a:
98:67:c8:73:15:14:9b:c1:35:09:f3:10:92:b6:5e:51:15:39:
8d:cf:a4:72:db:33:3c:53:e1:15:8e:c5:b9:80:2b:1b:ca:58:
44:20:fe:7c:0d:8d:1f:24:8e:a0:5b:55:94:d4:81:db:d5:31:
37:04:ab:6d:73:90:75:50:50:3d:c8:bd:80:19:50:8d:6f:bd:
96:d1:36:42:65:2e:bd:24:d4:ec:14:32:27:59:b4:f9:0c:31:
fa:f4:46:db:90:83:ce:79:92:07:ce:c6:71:6c:ba:88:52:6d:
35:80:e5:02:1e:cf:6f:c0:91:9f:88:e0:d5:79:ff:ce:e6:ed:
25:d5:43:b2:0f:0d:5a:74:70:09:44:18:41:1b:00:5b:7e:cf:
ba:99:34:ff:b0:93:79:4e:15:d0:50:ad:15:f1:61:44:fa:51:
47:46:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:10 2025 by rpki-client