Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/lNQAITIC5PmIJYf58oFmM4_t7ZI.roa
File: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (raw, json)
Hash identifier: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=
Subject key identifier: 94:D4:00:21:32:02:E4:F9:88:25:87:F9:F2:81:66:33:8F:ED:ED:92
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DB99F08E6587D1A0A692BCD8F5362
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/lNQAITIC5PmIJYf58oFmM4_t7ZI.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a01:e281:f4::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b9:9f:08:e6:58:7d:1a:0a:69:2b:cd:8f:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94d400213202e4f9882587f9f28166338feded92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:4e:ca:08:d0:8a:90:7e:c6:e0:35:9c:83:
90:bc:46:3d:e8:60:88:70:92:14:52:89:2c:21:79:
10:10:3d:a2:8a:7b:c6:90:49:49:b9:4a:9a:0b:55:
5b:ff:6a:fe:5b:8d:53:4d:c1:62:45:2e:d9:33:d6:
ad:7e:66:d1:6b:f7:7c:9d:3b:eb:8d:bf:23:1f:90:
55:cd:36:9b:3c:da:f2:a4:91:67:70:2a:fc:a0:55:
1c:0e:18:13:5a:22:e0:82:03:cb:05:ca:43:d9:20:
3b:93:65:10:f8:bc:82:c8:c7:5a:d6:7e:8b:57:6f:
28:8d:ce:9d:40:8b:48:3e:99:f2:bd:8a:5b:23:39:
19:67:ea:29:03:56:52:1f:37:a9:70:79:0e:2f:cc:
02:c1:7b:57:cd:04:de:0e:b6:3b:49:c3:34:e7:04:
c9:f2:87:4b:31:da:41:8f:73:21:9d:a4:d9:23:70:
de:65:c7:87:8e:54:29:29:3b:74:39:9a:b0:be:49:
17:fd:20:10:ce:4e:e3:9f:ec:6f:f5:c7:82:d5:0e:
6a:60:b4:9c:9d:c1:25:82:de:c1:46:6c:91:fe:8c:
20:53:ba:8b:e3:12:b4:3f:64:54:f6:3a:1c:fc:73:
a0:54:bf:bd:22:74:4a:e0:a6:4c:9e:fe:52:71:17:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D4:00:21:32:02:E4:F9:88:25:87:F9:F2:81:66:33:8F:ED:ED:92
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/lNQAITIC5PmIJYf58oFmM4_t7ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:f4::/48
Signature Algorithm: sha256WithRSAEncryption
05:ab:6e:36:b9:c9:5d:db:fc:0e:18:28:53:7b:2d:97:de:30:
9a:d5:42:1d:84:5f:ee:dd:ab:c6:a7:54:f6:92:6d:5b:83:7e:
57:7c:93:a4:bc:1c:cb:a9:db:6a:8c:f4:8e:46:1c:58:27:e6:
c6:08:2c:6f:c0:e4:75:7e:9e:11:51:7d:41:3a:c0:6b:f6:b9:
b4:7c:93:9e:cd:50:75:0f:89:70:f5:95:59:91:27:6b:27:43:
b3:fd:f9:f4:ab:03:88:16:a9:6e:22:44:89:10:d0:ad:c9:3a:
cb:d1:a8:b9:4c:45:3e:30:f7:a7:92:4b:62:b2:90:1a:35:1f:
04:3a:e9:d6:77:78:bf:96:b8:78:7a:88:41:91:f8:e0:fb:be:
19:80:1d:0b:d0:5e:ff:ee:12:07:fd:81:90:42:b2:b3:01:79:
7f:7f:36:9a:a7:cc:98:10:3b:e0:4d:64:e6:9b:49:1e:ab:15:
7c:1a:6a:71:f6:96:82:48:98:ed:e5:bc:2e:b3:a6:c2:66:0c:
3e:27:08:82:7a:94:19:f3:82:4f:73:c3:3f:34:bb:51:ac:c3:
26:07:52:a8:12:ff:9d:7b:e9:0f:6d:81:d4:72:e7:d8:55:d8:
11:71:71:2f:a5:69:0f:c2:5e:4c:35:4f:41:8e:7e:b7:8b:f0:
c1:fa:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:22 2025 by rpki-client