Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa
File: JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa (raw, json)
Hash identifier: /te3H+VUTBpgy9VKLErG5yc6ITk4ZNAsCt35Sq14AnE=
Subject key identifier: 24:3D:6F:CB:2C:B0:04:7A:BF:E8:27:B0:F9:9C:09:4A:B6:78:84:59
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A57B3F36C31EBEE7EEE854DC0560
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214962
IP address blocks: 2a13:a5c7:2000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a5:7b:3f:36:c3:1e:be:e7:ee:e8:54:dc:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243d6fcb2cb0047abfe827b0f99c094ab6788459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:77:4c:66:41:8b:71:3b:15:da:89:57:bc:
bc:dd:8d:aa:85:de:b3:15:c1:14:1d:13:af:01:a1:
34:da:71:ae:32:01:10:7a:e9:24:65:75:af:61:b8:
9b:35:ff:61:20:37:42:d3:b5:78:f7:f6:26:4b:b6:
f0:86:60:76:dc:4a:3b:9a:8b:56:34:f9:18:f1:97:
f2:af:73:8a:fc:ae:63:15:4d:d0:8f:8b:af:fc:ec:
e8:75:27:60:25:90:46:1b:18:f1:52:ee:fb:e5:e1:
51:67:b5:8f:6d:02:41:3c:37:4d:53:a1:fd:6d:9b:
da:db:8d:1b:d8:32:75:08:0c:3c:44:8d:82:10:cd:
a2:84:65:71:f2:d9:1e:29:11:a8:30:bd:90:3f:4f:
c2:82:5c:b9:53:12:cd:75:f2:8f:18:1f:b4:53:b7:
1e:23:81:ec:b9:f4:7d:84:e2:b3:1b:ba:58:94:60:
46:ed:e8:b7:e0:6c:fb:e1:ed:74:ed:8e:21:a2:af:
5b:2a:c8:12:59:d3:2f:66:9c:fe:91:40:50:72:66:
4f:e9:76:da:b6:9d:f9:3d:fe:71:24:ba:5d:a5:5b:
91:b0:94:88:94:47:34:af:9b:a2:63:47:d0:61:30:
01:be:09:47:7b:5e:8c:06:82:61:f9:b5:b6:58:4d:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:6F:CB:2C:B0:04:7A:BF:E8:27:B0:F9:9C:09:4A:B6:78:84:59
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JD1vyyywBHq_6Cew-ZwJSrZ4hFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
66:63:63:a3:ce:3c:cb:b7:71:5d:e6:4c:5a:c4:a7:02:ec:e7:
32:14:d7:07:31:42:c1:14:c2:f8:c8:18:da:a9:81:ff:0e:98:
25:70:83:ba:fc:5b:f6:14:61:70:24:bb:97:48:8b:8b:f8:0f:
95:1f:07:a9:23:e8:59:ce:35:3f:b5:fc:ff:9a:28:89:84:98:
ba:27:14:06:0b:c2:b7:29:7e:0b:bb:1f:51:e7:0f:a5:41:63:
aa:00:57:13:da:84:5f:8b:d6:05:7e:45:b2:df:90:90:8f:93:
77:c6:00:01:92:3c:4a:50:b5:3c:1a:54:e4:59:48:ed:07:62:
79:ce:36:cf:44:3f:d7:20:fc:cc:cd:de:cf:22:2f:74:95:32:
7c:84:f2:dd:1c:1d:2b:c7:09:41:1e:9c:62:85:ab:08:86:c5:
14:8b:72:49:27:11:d3:50:67:af:17:aa:a5:77:56:b5:05:83:
cb:8e:02:d2:2b:9b:b4:59:47:18:0f:05:15:79:c4:56:4e:a0:
4c:c6:40:76:89:7b:64:0f:b1:07:ad:46:78:85:db:c9:38:91:
07:28:04:9c:50:aa:56:cf:1c:7c:9e:ec:6b:ec:7d:28:42:68:
d4:c9:9b:0c:d2:22:ee:03:e3:d6:1c:68:0e:e6:46:a8:66:fc:
4c:aa:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:04 2025 by rpki-client