Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/bNG2FrNhC35fcYViXCNzzZvryCs.roa
File: bNG2FrNhC35fcYViXCNzzZvryCs.roa (raw, json)
Hash identifier: hoZxy4Y/MQ4Wfjypq4MgMDn24ZtJe1Sy1rxHd6Mbcyk=
Subject key identifier: 6C:D1:B6:16:B3:61:0B:7E:5F:71:85:62:5C:23:73:CD:9B:EB:C8:2B
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 0193634A65EACF991C02C6A5A9AD2664D5C7
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/bNG2FrNhC35fcYViXCNzzZvryCs.roa
Signing time: Mon 25 Nov 2024 12:27:20 +0000
ROA not before: Mon 25 Nov 2024 12:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0d:cdc0::/32 maxlen: 32
2a0e:eec0::/32 maxlen: 32
2a0e:eec3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:4a:65:ea:cf:99:1c:02:c6:a5:a9:ad:26:64:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Nov 25 12:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd1b616b3610b7e5f7185625c2373cd9bebc82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:c6:73:8f:5e:b9:c8:89:84:e3:08:e4:0f:
cc:27:a8:36:c9:45:8d:bb:6a:0d:a2:76:b9:90:01:
93:94:7b:5b:91:ed:b7:e2:b0:ab:bf:f5:92:34:ac:
4f:b6:12:79:5b:eb:97:a3:8d:d8:92:a1:0e:84:e4:
62:44:f7:c2:f1:bf:c7:5c:5d:a9:93:b8:e8:8c:6c:
b0:16:6d:bf:33:61:1a:76:bd:52:76:e4:63:fe:14:
c6:88:a2:88:8c:24:e9:47:fa:c9:40:59:39:df:b8:
b7:e8:04:34:38:5e:bc:90:58:3d:fc:36:82:fe:f4:
dc:03:72:3e:3e:4c:b1:cc:c4:4e:a1:f6:39:b6:06:
ac:34:c1:74:d6:c5:54:9f:e1:46:0c:f8:da:a4:2e:
37:09:c7:0f:b5:e9:3e:a1:9f:80:ed:58:b6:5c:8f:
c9:5a:1f:2c:77:34:5c:0c:c0:ff:fe:bd:13:7b:97:
59:87:bf:dd:5c:27:25:2b:cf:44:df:b4:4d:42:44:
b8:36:0a:53:b5:3e:f2:31:c4:49:d3:a7:dc:48:dc:
38:bb:c4:7c:a9:b0:fd:c5:0f:29:c3:d1:66:e3:f0:
a3:26:85:be:59:aa:c0:d5:2e:37:47:9a:00:89:c1:
81:ae:da:7a:8a:1a:77:d8:60:72:eb:14:b0:3d:b0:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:B6:16:B3:61:0B:7E:5F:71:85:62:5C:23:73:CD:9B:EB:C8:2B
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/bNG2FrNhC35fcYViXCNzzZvryCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:cdc0::/32
2a0e:eec0::/32
2a0e:eec3::/32
Signature Algorithm: sha256WithRSAEncryption
49:3c:8c:cd:b1:ec:8b:03:31:2e:b4:82:5e:69:b2:4b:6d:dc:
d4:48:b9:c7:e3:af:47:d2:28:48:fa:61:c8:cd:fa:45:74:8c:
ee:7a:46:be:69:37:b5:33:bd:d6:1a:14:40:7b:4c:5d:f4:55:
cd:9c:e2:51:a3:42:1c:4b:a6:23:1d:b2:04:14:ab:96:33:09:
3f:70:5f:7d:76:df:28:5b:c2:1d:e9:0a:d5:c1:48:6d:22:f7:
f7:ab:f1:78:36:76:62:4f:42:55:c2:62:d8:80:12:14:88:89:
db:e9:f1:3c:33:0f:32:09:ac:e7:05:ba:45:ad:f5:24:c8:32:
05:e4:06:e5:fc:bf:20:02:cc:ac:f1:cf:64:29:72:8d:b9:c8:
7f:4e:01:2d:81:34:50:30:ed:6c:1c:24:f8:70:c7:18:0c:ca:
af:87:5b:39:d4:2f:1c:5b:2c:d5:8c:c5:19:97:16:f3:6e:44:
34:39:10:b5:ba:c9:46:ef:4f:99:a7:0a:2c:5b:11:6a:a2:1b:
5b:2d:39:d5:33:90:9a:4e:d0:3c:86:2a:5e:9d:10:1e:b8:d8:
f1:d2:c6:06:53:51:36:99:01:f2:83:67:03:66:7b:c6:1e:02:
de:b4:50:3d:71:2e:05:df:17:26:0f:0b:90:b8:46:d0:a9:de:
2b:bf:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:33 2025 by rpki-client