Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cdmQ2_ODlCp8h7SlTaorYnidAuk.roa
File: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (raw, json)
Hash identifier: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=
Subject key identifier: 71:D9:90:DB:F3:83:94:2A:7C:87:B4:A5:4D:AA:2B:62:78:9D:02:E9
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF3F8326EDC4ECEBB36A79FC7C3AC
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cdmQ2_ODlCp8h7SlTaorYnidAuk.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 2a00:1eb8:c006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:f8:32:6e:dc:4e:ce:bb:36:a7:9f:c7:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d990dbf383942a7c87b4a54daa2b62789d02e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:89:42:57:b5:16:71:6b:7d:e6:0d:2c:7f:
df:92:e8:6f:cf:09:44:53:f6:61:9e:db:1d:20:90:
30:ee:26:74:6c:58:25:c1:8d:50:fe:ba:4f:20:43:
a5:0b:89:a0:bc:ed:50:a7:6d:7e:4e:4b:61:c3:5c:
5c:e4:64:72:35:21:b1:5c:b8:ae:e0:a7:52:28:4b:
68:70:a0:b8:66:29:64:9b:90:34:07:03:85:cc:ad:
74:f5:88:6d:a4:84:35:0d:24:a6:5c:41:19:eb:1e:
df:db:1c:d1:00:6b:ad:4d:ef:5f:74:68:ec:48:50:
b5:02:17:33:26:e9:ae:d4:10:0c:1d:51:ec:b4:d7:
45:2a:a7:13:75:fd:34:ce:6f:e8:c2:d4:9b:dc:16:
9c:c7:4b:63:97:8b:fc:de:66:10:6e:21:95:22:8b:
b5:5f:a4:7d:36:ad:8e:f3:85:4a:6c:86:3b:56:bb:
ce:25:01:d6:37:83:33:bc:40:db:d7:a6:0b:1d:ca:
fb:a5:7e:63:02:91:60:16:1b:36:87:b7:6f:b6:af:
ed:3e:33:b8:32:7a:14:ad:6b:ed:e7:60:08:fe:84:
74:66:17:b5:79:b8:45:9e:dc:ea:6e:ca:f0:be:4f:
8d:b2:33:3a:14:84:66:49:ea:70:26:42:62:ea:f3:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:90:DB:F3:83:94:2A:7C:87:B4:A5:4D:AA:2B:62:78:9D:02:E9
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/cdmQ2_ODlCp8h7SlTaorYnidAuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1eb8:c006::/48
Signature Algorithm: sha256WithRSAEncryption
15:df:56:24:b9:64:5f:2e:f1:2a:55:d7:1b:4c:7e:3e:d0:7d:
b1:67:f5:12:75:2e:c3:b1:68:37:34:f0:6c:57:9b:8d:75:cf:
08:9b:c0:ac:4c:fc:4c:87:8b:f2:02:39:65:10:76:c3:63:d1:
88:a7:b3:da:e6:e3:94:02:2a:6b:58:8e:d2:0c:fc:3e:eb:49:
08:85:a4:87:99:fb:b9:a7:7d:32:b6:3f:48:02:c6:a9:3b:1f:
4e:00:f5:a6:e5:c9:ad:25:64:45:51:e8:b4:a6:32:b9:68:f0:
cb:19:7e:99:fa:0b:48:3d:ff:15:df:40:f3:21:5f:aa:a1:72:
1c:e2:13:29:92:bf:52:ca:10:67:99:bf:4a:03:4c:79:2e:94:
66:08:d7:cc:f6:be:90:1f:6a:c0:5e:87:8f:ec:de:d5:85:6c:
59:b4:95:3e:d9:b6:7d:6d:5f:3c:13:c5:78:66:d6:31:a0:83:
65:f0:4f:7e:87:5c:d7:b9:b2:5b:9e:9a:bc:f6:f0:a8:e3:54:
6e:33:26:2b:0f:7c:f8:d4:bf:d1:76:bb:27:9a:4e:92:c6:87:
ef:ab:71:2f:2c:d7:84:91:e3:4a:50:a8:6a:0b:18:4d:e0:3b:
cf:b3:bd:1c:6c:c3:cb:69:44:f4:d1:50:a5:12:99:0b:67:b1:
13:96:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:04 2025 by rpki-client