Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Cm730G_AHSSBzZcSEbVAVS1nZYk.roa
File: Cm730G_AHSSBzZcSEbVAVS1nZYk.roa (raw, json)
Hash identifier: +l4oY660Xw3njFEI5BINOE+dJQFJ4tvjTaTZZwjdme4=
Subject key identifier: 0A:6E:F7:D0:6F:C0:1D:24:81:CD:97:12:11:B5:40:55:2D:67:65:89
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BAEAD1E350F522F19E733B97D6B4
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Cm730G_AHSSBzZcSEbVAVS1nZYk.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36743
IP address blocks: 2a05:b0c7:1800::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ba:ea:d1:e3:50:f5:22:f1:9e:73:3b:97:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a6ef7d06fc01d2481cd971211b540552d676589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:b3:05:77:58:24:e1:ed:fa:34:59:99:bb:
a7:e9:86:d3:87:fa:ff:a2:83:dc:ba:c7:56:bf:09:
ea:df:3b:1e:e8:09:f9:94:f3:79:f5:bf:6e:b0:20:
6f:03:77:5d:a0:9a:b8:e2:a4:af:86:5f:68:46:5f:
cb:7d:e5:94:62:e6:07:f7:55:21:47:3d:69:d1:41:
42:3b:38:f5:10:3d:36:56:eb:08:bb:89:ba:68:e7:
2c:3d:e8:8d:6f:9b:d8:f8:b9:a4:06:e2:5e:45:e4:
99:30:42:3c:57:78:81:2e:27:5c:5d:ea:4a:85:f1:
f6:29:a2:9f:ce:78:a4:af:7c:ce:ee:94:8a:8b:97:
58:3b:2e:b0:14:a6:72:91:14:12:3e:4b:ff:d0:db:
0d:f4:4a:bd:92:dd:b3:33:73:f8:b1:be:55:24:6a:
b6:19:7f:c4:13:d6:4e:a0:a7:38:ab:71:de:8f:f4:
d8:0c:1b:ef:b5:f9:9b:5d:f2:73:1d:71:01:dc:93:
e7:a2:f1:69:40:f5:fa:3a:5d:1d:b2:a7:64:c9:1f:
da:15:10:61:50:31:4e:a1:ad:32:26:79:9f:99:a8:
70:96:67:96:ea:63:94:e7:4e:9f:99:93:3e:77:6e:
d9:30:0a:3a:b9:c0:42:c2:6c:24:c0:88:b0:0c:72:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:F7:D0:6F:C0:1D:24:81:CD:97:12:11:B5:40:55:2D:67:65:89
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Cm730G_AHSSBzZcSEbVAVS1nZYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:1800::/39
Signature Algorithm: sha256WithRSAEncryption
10:ce:aa:22:de:f2:a2:73:d4:ac:b0:c2:27:fa:0e:9c:63:15:
c0:69:52:1e:af:46:b8:46:18:cf:9e:d3:50:61:d4:2c:30:cd:
f1:e0:d1:25:f1:c4:20:06:c6:db:b6:35:ca:17:d0:bc:f6:de:
c4:3e:0e:59:5d:44:92:79:69:40:f1:6b:79:a5:bf:e0:df:54:
09:51:3e:d2:17:67:6c:7c:9e:69:df:94:7a:08:bc:1c:43:9c:
d7:fd:f7:dd:8f:85:6a:f0:78:32:4a:70:4e:e9:a8:7a:3c:e5:
58:7e:80:84:cf:28:f4:62:fe:12:43:99:8e:7e:19:ad:bb:4f:
5f:3c:ad:ae:e8:34:1d:9e:91:4a:5e:8d:c7:55:27:48:15:cd:
0c:82:41:4c:2a:cc:16:22:f1:f2:2d:0f:57:44:6c:f9:c7:29:
41:55:c6:e6:03:6d:f7:dd:3f:8e:1d:0f:89:19:14:a7:04:d8:
fe:a7:f6:50:68:f4:63:45:68:97:ac:b0:02:c9:49:e4:31:2f:
8d:9e:3c:da:01:7d:d2:f0:cb:dd:1d:64:2e:a2:9f:89:34:21:
1d:7d:b8:57:90:9f:88:50:87:f6:33:2f:59:05:45:4e:81:fa:
57:8d:29:91:25:c0:c5:3e:2e:f9:46:e0:ae:3f:a0:2d:3c:5b:
be:28:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:48 2025 by rpki-client