Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/WUnk7TNpoMRbrcKaZRtURt3p4fo.roa
File: WUnk7TNpoMRbrcKaZRtURt3p4fo.roa (raw, json)
Hash identifier: PjPxGwGWGX727ceFQzedXW06Hv7b8nuKhbmV/9bEQCI=
Subject key identifier: 59:49:E4:ED:33:69:A0:C4:5B:AD:C2:9A:65:1B:54:46:DD:E9:E1:FA
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 019538FDA933445EBCE917606340EF8A7089
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/WUnk7TNpoMRbrcKaZRtURt3p4fo.roa
Signing time: Mon 24 Feb 2025 17:25:02 +0000
ROA not before: Mon 24 Feb 2025 17:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29290
IP address blocks: 2a00:f10:141::/48 maxlen: 48
2a0b:8f80:100::/40 maxlen: 48
2a0b:8f80:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:fd:a9:33:44:5e:bc:e9:17:60:63:40:ef:8a:70:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Feb 24 17:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5949e4ed3369a0c45badc29a651b5446dde9e1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:9d:14:88:dd:01:65:b9:ff:8c:6c:46:00:
c2:f9:66:68:26:f0:b7:60:09:3c:11:27:ea:ab:7d:
64:6b:e3:c3:f0:65:a8:4d:bb:cd:9a:8d:03:26:6d:
fa:c8:e4:aa:f4:bc:59:0d:5d:86:60:59:f9:44:71:
9e:33:40:34:c7:58:fc:d0:35:20:27:ff:07:15:19:
4e:e4:4b:88:20:cc:6c:5e:b6:88:38:ac:e1:46:8b:
ae:67:c2:15:bb:e8:c5:55:b2:6b:d0:27:93:9d:a2:
12:e3:fd:0e:4d:a8:41:61:2a:0d:27:6e:07:5e:0f:
85:59:ec:1d:42:65:28:52:02:a2:f6:e9:8b:14:e1:
22:f8:0e:77:d8:23:08:b0:96:37:6d:c5:17:40:be:
34:b6:4f:06:e7:e2:77:e4:1d:32:0d:37:39:6f:a3:
13:66:c9:41:17:de:dc:b3:26:6c:8d:e0:3c:ea:7b:
91:28:64:ff:20:70:46:95:d4:f5:23:bd:c6:2f:d5:
d9:86:b9:80:02:bf:2f:de:ac:bc:6c:80:e6:19:70:
56:25:04:db:46:40:43:11:c2:1f:9a:47:93:41:c2:
ba:41:c1:cb:dc:c6:cf:97:61:b6:37:65:7c:20:87:
b8:16:54:36:e3:3d:18:6e:35:d4:7c:b1:0d:48:72:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:E4:ED:33:69:A0:C4:5B:AD:C2:9A:65:1B:54:46:DD:E9:E1:FA
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/WUnk7TNpoMRbrcKaZRtURt3p4fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f10:141::/48
2a0b:8f80:100::/40
Signature Algorithm: sha256WithRSAEncryption
87:6e:7a:f8:ec:21:ff:5d:c5:29:af:b7:94:9d:f3:4f:7c:8c:
1a:b5:07:00:c4:24:5e:b8:4b:27:6e:4c:4b:c5:f0:2d:c3:c6:
bb:12:25:eb:6f:20:b1:6e:28:72:6a:b3:d6:e6:ed:8c:1f:6d:
5f:5a:bb:ed:21:ae:0d:d8:a7:9e:e3:87:00:02:4e:70:41:87:
8e:bc:12:7f:55:25:a8:39:10:ab:90:9f:8f:08:b1:a6:15:c2:
82:89:2c:d8:63:e5:06:5d:4c:cb:a1:c6:c4:2c:0d:da:ec:d4:
28:09:4d:54:73:6c:91:82:58:b8:04:c6:19:6e:b6:01:ee:65:
1b:43:a4:53:9d:2d:ec:d8:38:9c:ae:38:b8:d4:0f:cf:1a:36:
d0:01:6c:38:b7:19:99:54:95:58:fc:36:1c:95:c4:9c:70:69:
25:05:5f:1c:11:f3:2e:af:dd:1f:ae:50:f4:7c:69:ed:91:71:
6d:c6:1f:31:ab:18:f0:75:46:68:fd:1a:e0:24:00:9e:b4:87:
07:8d:ff:0d:1d:56:39:4d:b1:73:c6:a3:33:5a:e3:87:48:94:
59:50:30:5c:ac:02:07:5e:3f:2f:0e:04:ee:fc:f8:9e:53:0b:
79:53:82:85:d8:12:8b:d9:32:64:75:8d:4d:6e:3e:56:6b:96:
34:fd:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:35 2025 by rpki-client