Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa
File: ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa (raw, json)
Hash identifier: QV8yo4Y7S4RMw1tYaqfomW+XF6w6Y5Rkf38FTGtBaCc=
Subject key identifier: 8D:AE:25:F7:29:9F:E6:FA:20:03:36:3F:73:5A:59:F6:BD:89:42:5D
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C6272406D5828BA4FB5B8A767AE7
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205432
IP address blocks: 2a05:b0c6::/31 maxlen: 31
2a05:b0c6::/32 maxlen: 32
2a05:b0c6:400::/40 maxlen: 40
2a05:b0c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c6:27:24:06:d5:82:8b:a4:fb:5b:8a:76:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dae25f7299fe6fa2003363f735a59f6bd89425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:9b:fc:03:10:69:24:4e:8f:24:00:24:9d:
4e:50:37:9c:de:8a:17:d2:77:65:9e:cb:3b:c8:23:
1b:1f:6d:8a:cb:c7:fe:23:32:e8:2f:be:06:e5:14:
66:94:36:2b:4e:07:6b:cd:a3:66:49:7a:5c:48:61:
c8:dd:36:aa:a4:d2:a8:04:3f:85:a0:3b:85:6e:c7:
87:8e:55:ae:ed:71:ed:43:ad:56:10:9d:45:c7:cb:
53:0b:66:78:e6:16:27:9b:a1:10:11:91:65:70:3f:
95:56:25:65:35:ed:6d:06:a9:a6:4c:24:a5:b3:16:
b0:00:98:97:a3:a3:ea:61:b7:15:09:1c:f5:2e:31:
64:26:39:3e:53:be:22:53:84:70:76:ed:e6:25:48:
79:1a:1c:85:3a:b5:df:b9:08:a9:d0:88:77:9f:32:
ac:7c:b3:a8:d6:19:4f:f0:0c:2d:68:c9:27:a7:f1:
c3:71:37:d7:94:b1:98:e8:88:04:20:b6:6a:d4:06:
09:cc:c5:fb:e5:de:a1:e0:28:70:0f:d3:9c:12:ba:
c2:18:fb:9a:5f:47:af:17:a0:fa:3a:93:5b:f2:54:
88:32:e2:f6:be:e1:a9:1d:4b:71:62:8f:52:e3:39:
33:b1:0b:45:0e:78:21:d1:53:a7:d7:95:fd:c7:77:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:25:F7:29:9F:E6:FA:20:03:36:3F:73:5A:59:F6:BD:89:42:5D
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6::/31
Signature Algorithm: sha256WithRSAEncryption
07:01:10:13:52:3a:43:40:b7:ca:74:38:f8:10:c1:da:d7:8f:
44:16:4d:4a:e7:19:bd:b0:e4:bf:bc:33:8a:d6:86:69:a9:3b:
d2:2f:a5:00:b1:ab:ca:33:75:47:59:ac:2c:73:19:34:58:cd:
d1:e8:eb:7e:89:f7:1b:f6:d7:e6:be:60:04:a1:5c:7b:e0:1a:
d1:85:8e:8c:84:ee:79:f1:ec:b7:42:1c:19:e5:b2:5e:bc:85:
3d:75:c0:f0:14:bd:30:4a:56:dc:28:68:69:80:58:35:20:8c:
02:5c:32:27:50:bc:77:67:84:b7:df:c1:30:da:af:de:9d:43:
fe:23:2f:73:17:69:59:9b:70:35:bc:e2:e3:b3:75:a9:3f:5b:
63:db:f3:b4:bd:54:b4:70:49:9d:79:85:e8:61:d3:9b:ba:3f:
9f:7e:51:da:4d:49:f1:dc:41:95:a8:c2:c8:44:6d:cb:83:67:
76:1e:ce:be:ba:7c:f4:ea:da:2a:b9:c3:5d:2e:36:0a:09:65:
ae:fe:0d:30:b1:7f:84:bb:1d:24:8c:7c:6b:eb:71:c7:ee:9d:
8c:da:c4:1d:eb:d4:8f:9b:08:8e:8a:69:5d:79:24:a1:3c:8d:
f4:c1:97:26:33:b1:87:75:6e:ab:42:99:a0:16:0a:d0:38:92:
53:fc:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:18 2025 by rpki-client