Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa
File: jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa (raw, json)
Hash identifier: pyieLE18ftE6LzfZes4vYUtIgC7LyMgyCYlfRnjefBQ=
Subject key identifier: 8C:6A:A9:BE:9E:22:6C:0F:AA:79:93:A2:02:A7:B6:70:41:CB:7F:CC
Certificate issuer: /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial: 018FCE02047662DD004E3883DFA2B3BD7F58
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa
Signing time: Fri 31 May 2024 09:36:29 +0000
ROA not before: Fri 31 May 2024 09:36:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16003
IP address blocks: 2a09:7380::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:02:04:76:62:dd:00:4e:38:83:df:a2:b3:bd:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Validity
Not Before: May 31 09:36:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6aa9be9e226c0faa7993a202a7b67041cb7fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:6f:38:00:38:fc:fa:fa:ff:6c:f1:5a:5d:
68:22:4e:64:9c:ad:99:84:c8:1c:91:a7:03:4b:fa:
14:0c:6a:b7:56:e0:ae:69:43:9b:f9:a6:c7:79:51:
a6:47:42:52:ca:f5:b8:91:00:22:a4:65:9f:76:bd:
b4:ed:5e:41:7b:4a:3f:c6:db:22:2b:f2:bc:47:ea:
9c:83:63:56:31:99:d8:8d:8d:25:17:af:0b:a8:b7:
0a:fa:c3:1a:97:7e:1f:fd:c4:cd:94:38:4a:c4:66:
7f:9d:1f:7e:83:97:38:9d:00:89:d3:5f:7f:7c:90:
72:79:89:e9:51:22:c1:12:c0:38:16:08:d5:82:d0:
81:ac:ee:07:b4:2a:20:2e:0c:30:c9:1b:55:36:4d:
1b:67:95:58:2b:e6:cf:2c:ad:79:f9:f5:e7:da:bb:
96:39:39:4d:02:e2:5e:ec:2b:ab:4e:37:0e:9a:2f:
9e:08:70:45:e4:7c:14:ff:23:2e:02:bd:2b:ac:e8:
ee:05:76:ef:7e:7c:7e:45:c8:9c:80:8a:00:71:50:
81:a4:53:ae:41:f8:51:23:ed:0d:8d:54:16:b5:cc:
e7:d5:f5:96:5c:99:79:ef:30:39:31:4f:d9:e2:7b:
f4:fb:54:cb:8a:6f:1f:22:70:6b:d4:cf:82:eb:e0:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:A9:BE:9E:22:6C:0F:AA:79:93:A2:02:A7:B6:70:41:CB:7F:CC
X509v3 Authority Key Identifier:
keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7380::/29
Signature Algorithm: sha256WithRSAEncryption
95:af:84:96:82:5d:e6:62:58:7a:1c:7e:16:13:37:22:aa:23:
b3:06:af:6f:f8:0f:0c:07:3d:d6:e9:c3:5e:ec:9d:4c:3d:c0:
39:de:46:03:30:a0:02:ab:27:bb:6e:90:25:a1:d2:9d:05:d4:
df:e6:b5:ef:97:38:62:8a:88:71:be:ca:96:8c:6f:e8:12:6e:
b1:bc:a9:13:e3:62:27:6c:d1:7d:27:eb:cf:f2:5a:a8:fa:31:
16:02:28:8a:22:9b:e0:b6:60:69:01:63:eb:ea:17:15:f4:3f:
ac:b2:b5:95:c7:df:1c:02:96:48:37:f1:21:38:ed:51:f3:5e:
e0:8b:4c:5b:01:33:6d:d0:06:9e:b5:d8:0f:cb:eb:2b:71:7b:
d0:1e:cd:88:bb:16:18:86:27:56:79:59:08:6d:21:ec:67:22:
c1:f8:28:06:d7:ee:17:3e:d1:71:dc:ba:6e:f3:62:40:ef:62:
29:ee:5e:a2:aa:96:eb:73:1a:18:e0:83:87:d6:df:29:6a:64:
c9:2b:72:74:2d:d9:e9:bc:c6:d2:ba:d6:74:e5:b1:99:d5:2b:
ef:a0:65:7f:85:28:e4:88:bf:2c:33:63:33:b6:47:fc:60:1a:
e4:29:8e:bc:1e:11:5d:06:ce:9e:8d:7f:17:05:92:6c:12:19:
8a:fc:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:32 2025 by rpki-client