Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P0gYcS4KauUkNga1BwnoKsvRaO4.roa
File: P0gYcS4KauUkNga1BwnoKsvRaO4.roa (raw, json)
Hash identifier: 8EDgZk9ZM8e+gLN5G/jy/qBuYR4gV9QFjyAXBBbaAZw=
Subject key identifier: 3F:48:18:71:2E:0A:6A:E5:24:36:06:B5:07:09:E8:2A:CB:D1:68:EE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445358869FC9A765FD8955257D55881
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P0gYcS4KauUkNga1BwnoKsvRaO4.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:aac5::/32 maxlen: 32
2a14:7b80::/32 maxlen: 32
2a14:7b81::/32 maxlen: 32
2a14:7b82::/32 maxlen: 32
2a14:7b83::/32 maxlen: 32
2a14:7b84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:35:88:69:fc:9a:76:5f:d8:95:52:57:d5:58:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f4818712e0a6ae5243606b50709e82acbd168ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:7c:eb:d6:7f:7d:78:32:c7:02:5b:a9:99:
17:d3:c0:05:bb:df:bd:b7:db:ea:71:6b:a5:33:ab:
6e:59:b0:aa:64:34:3c:66:34:39:31:4f:8f:55:35:
18:d7:e0:ec:27:eb:b2:88:0e:60:d9:1c:42:f0:c7:
16:80:77:f2:3e:c4:d6:31:51:bb:3f:03:9e:07:5c:
e7:84:38:97:16:b8:b0:ef:c5:33:51:f9:a4:96:5c:
9c:7d:3d:ee:9f:a8:8d:7d:58:53:56:f8:16:8a:66:
9d:e5:85:30:38:ad:08:da:ed:8d:5a:cf:63:9e:02:
19:41:b3:11:14:5e:5a:69:40:04:56:9f:e4:39:be:
57:ee:0b:70:a9:18:73:22:6b:06:b8:0d:a8:b9:cd:
ee:24:68:2d:54:63:59:77:95:12:d7:04:1d:d4:63:
e9:97:e3:35:ac:10:42:8d:69:4f:1b:1c:b7:b4:46:
c7:14:55:cf:8b:12:8d:18:f9:60:ea:2d:1b:57:65:
32:c4:3d:03:40:d2:8d:8c:13:fa:79:95:76:e2:bd:
4e:a9:5c:1e:57:aa:29:14:05:ef:cc:70:f0:0b:a7:
98:1a:01:ed:43:5f:5e:ff:de:e1:f0:e6:4a:c6:e2:
81:a7:24:64:11:77:38:36:ed:dc:45:96:af:0c:3d:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:18:71:2E:0A:6A:E5:24:36:06:B5:07:09:E8:2A:CB:D1:68:EE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P0gYcS4KauUkNga1BwnoKsvRaO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:aac5::/32
2a14:7b80::-2a14:7b84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:84:35:b2:ec:18:59:af:71:12:c9:65:52:17:16:17:27:74:
26:0d:b5:d4:21:06:7d:62:3e:d0:93:7b:0f:b2:97:76:06:80:
cc:47:7f:4d:c3:c7:1e:51:d9:04:5e:3b:54:51:d4:f8:f1:c4:
01:be:c8:02:7d:e1:81:d8:40:6a:47:42:63:1e:ad:69:67:27:
4f:90:99:40:9c:97:d7:dd:2d:ed:bb:de:86:bf:d2:d3:e5:70:
67:c0:a6:5e:a7:d3:8d:2b:78:ea:d1:75:a5:8d:de:7d:13:36:
39:18:d5:41:57:81:b1:49:c6:b6:8c:4c:67:7d:16:d1:12:50:
53:cc:a4:52:87:12:a3:38:b2:61:bb:ed:5a:40:b6:1e:aa:c3:
46:ae:1c:6c:82:09:c6:1c:41:c5:53:00:8f:3e:36:13:6c:e7:
5f:19:55:c6:25:50:26:26:63:70:89:82:54:99:0f:e5:2c:ad:
27:c5:b7:78:a5:82:cf:88:c7:38:60:fb:66:7f:4d:c1:8f:5b:
af:02:a0:58:3b:af:73:d4:d2:95:e8:d7:8a:d4:dc:b4:69:81:
88:51:f6:d4:df:4d:9f:37:14:08:8f:02:d6:7b:b8:a1:9e:e3:
ef:c1:72:00:47:ae:05:1d:d6:3b:64:22:0b:0a:45:55:58:76:
f1:d3:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:22 2025 by rpki-client