Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/0-pROOQXTsOCMh82qmUXoNFs4FE.roa
File: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (raw, json)
Hash identifier: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=
Subject key identifier: D3:EA:51:38:E4:17:4E:C3:82:32:1F:36:AA:65:17:A0:D1:6C:E0:51
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0194266BAA29F5C845BB97DE71CFA2ACE1E4
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/0-pROOQXTsOCMh82qmUXoNFs4FE.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47496
IP address blocks: 2a0a:4587:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:aa:29:f5:c8:45:bb:97:de:71:cf:a2:ac:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3ea5138e4174ec382321f36aa6517a0d16ce051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:12:4f:a7:a5:24:40:1f:30:80:16:c7:bf:
87:ab:05:91:2a:3f:c6:cd:be:00:3e:6b:7d:c0:e0:
09:cf:50:0f:b6:3e:5d:1e:a3:57:e1:88:65:b9:09:
89:74:a2:32:aa:92:2a:52:4d:f8:c9:84:54:1a:7d:
b8:33:5a:f2:7a:05:a8:ad:c4:29:20:24:e6:57:28:
51:33:9b:3a:b6:9a:a7:28:4c:56:1f:d3:24:14:d3:
9e:ec:b2:3a:a8:30:bb:59:0b:68:ab:a2:2a:83:15:
d6:b9:9a:05:06:28:d0:0b:2a:0a:6a:e8:54:69:b3:
51:5c:aa:1d:c9:bb:b5:89:48:c5:c1:c7:c4:0e:be:
46:09:1b:d7:b8:93:d1:ae:e0:15:85:50:d1:38:bd:
4e:ef:64:59:d2:9a:fb:5e:57:04:45:c3:b6:f4:2e:
b0:76:18:27:4a:32:5b:e7:41:0a:e0:e3:66:ba:bb:
07:ee:95:b0:5e:8e:4e:43:63:63:8d:88:07:82:d1:
3a:0d:2e:2f:fa:03:38:4f:24:12:65:c8:6c:2f:dd:
68:10:2e:d4:c6:65:e3:9c:7e:2f:1a:e7:ff:fc:57:
4b:fe:67:90:25:17:1e:24:17:77:fb:77:1e:50:eb:
3c:25:ef:93:df:fd:4a:a7:47:e6:df:e7:ad:01:1e:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:51:38:E4:17:4E:C3:82:32:1F:36:AA:65:17:A0:D1:6C:E0:51
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/0-pROOQXTsOCMh82qmUXoNFs4FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4587:2040::/48
Signature Algorithm: sha256WithRSAEncryption
ab:11:f9:ba:b9:92:64:d2:82:57:53:aa:cb:b8:2c:00:5d:01:
d9:03:ec:bd:f2:d3:be:28:c0:cf:ef:a2:f1:af:c7:e8:ec:fe:
c7:a5:e8:56:7b:fb:a2:5b:bf:05:c4:b8:ce:9a:c9:7c:19:9c:
25:fa:d1:4f:eb:14:11:07:8e:3b:bc:19:39:51:79:ca:0f:da:
06:42:80:20:50:60:84:21:35:c7:3b:9e:2e:64:bf:d7:96:82:
b4:4c:a9:1e:3c:51:ab:36:f0:60:f2:3f:b1:0b:a6:40:28:c7:
dd:3e:8f:c2:40:f3:4d:16:ee:d2:59:25:fe:52:30:bf:e2:3d:
be:94:9d:ae:64:08:06:66:5b:b4:05:b9:6b:bc:41:c2:d7:08:
96:db:f4:78:c6:42:0c:1d:c1:c5:ad:54:ee:bf:f9:7e:cb:da:
ae:64:ea:17:ae:af:1a:9f:19:0f:fc:01:85:3c:22:8f:3d:98:
cc:57:ab:16:ab:70:9f:95:ee:b6:23:4c:c2:f1:60:09:44:0e:
0e:30:21:3f:b4:ca:c7:50:9c:a5:e3:fa:3f:97:1a:22:35:9a:
26:ea:f3:dd:6e:3e:cb:29:02:9a:04:07:65:ce:ea:4e:29:7a:
c0:7b:07:a1:14:c0:c2:97:9e:1a:8f:d6:55:61:52:1a:57:fa:
5a:97:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:48:44 2025 by rpki-client