Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/j92-yXjxHmn0m56OJ0Lvc-_MH3Y.roa
File: j92-yXjxHmn0m56OJ0Lvc-_MH3Y.roa (raw, json)
Hash identifier: drhl/ieqsGok5Tkks7PpC9O8+8UQVfkrtGth9miQ+4M=
Subject key identifier: 8F:DD:BE:C9:78:F1:1E:69:F4:9B:9E:8E:27:42:EF:73:EF:CC:1F:76
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01942827D6AD40D3171C29C0A0BCD31E0852
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/j92-yXjxHmn0m56OJ0Lvc-_MH3Y.roa
Signing time: Thu 02 Jan 2025 17:54:47 +0000
ROA not before: Thu 02 Jan 2025 17:54:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80:2::/48 maxlen: 48
2a09:2b80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d6:ad:40:d3:17:1c:29:c0:a0:bc:d3:1e:08:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jan 2 17:54:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fddbec978f11e69f49b9e8e2742ef73efcc1f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:a7:94:dc:77:cc:d4:aa:99:c3:10:21:06:
70:53:6a:d0:7b:bd:be:d0:4a:d9:f5:e1:01:f9:e7:
19:08:27:2e:da:04:f0:09:40:7f:1d:34:c7:80:03:
6f:f1:87:24:d2:6e:a2:3b:92:be:9d:41:b9:f8:d9:
a3:3a:10:6d:7d:23:c3:ca:5b:01:3a:d5:3e:3a:88:
5c:d1:0d:4f:48:73:fa:88:f8:99:33:59:d7:1e:ba:
27:a4:47:56:e7:b2:3f:22:42:58:58:22:c8:78:33:
fb:8e:45:18:48:9a:58:13:4b:25:e0:ad:38:54:91:
5f:92:fb:90:f7:35:6c:a9:e9:24:0a:cd:82:3d:4a:
c2:40:85:22:2b:ef:c1:75:e3:4d:35:fa:20:6b:c4:
65:dd:87:8d:9e:3e:1d:b6:d6:9e:6b:e8:a6:1f:c6:
5c:f2:42:47:cd:bc:61:97:e4:0b:c2:c5:6a:93:ea:
a8:88:d9:35:af:2a:15:25:0c:d3:bc:ed:e4:58:c2:
8b:d7:c2:48:af:f9:01:ff:34:16:2c:61:73:c3:94:
02:73:fe:76:8b:b4:c5:16:3f:80:fe:47:c3:8f:0d:
61:a0:69:81:7f:26:a0:98:9f:f0:89:31:2a:27:79:
08:5a:c9:84:85:77:54:f1:f7:00:86:f3:19:64:db:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:BE:C9:78:F1:1E:69:F4:9B:9E:8E:27:42:EF:73:EF:CC:1F:76
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/j92-yXjxHmn0m56OJ0Lvc-_MH3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:2::/47
Signature Algorithm: sha256WithRSAEncryption
97:f3:c8:08:1d:17:7e:0f:94:d4:d8:e4:ef:d2:32:0c:e7:c0:
45:79:ae:7a:cf:81:ff:c4:3c:b0:f6:63:9c:89:a5:1e:32:b5:
17:fe:89:60:c1:6c:53:15:ae:bd:e4:87:b6:d3:c6:8c:da:cc:
7a:7e:24:f7:8d:17:f2:9a:12:86:05:a4:96:2a:14:e8:0a:8d:
55:3a:3a:43:f1:9a:b7:7e:96:5a:18:a9:44:63:99:1e:b3:f3:
40:32:b6:42:6e:2f:30:36:fa:79:b0:85:ea:e4:e0:2c:82:2c:
5f:82:a3:ca:7c:9b:7b:ab:a2:49:8e:1c:df:d2:3a:22:b8:cb:
59:f5:29:93:ad:fc:f4:17:66:4a:26:5e:a2:1d:e4:f9:3d:37:
25:d3:91:c3:8d:f4:fb:40:b9:ad:bc:4c:78:f4:63:00:2c:ea:
04:41:7d:61:e7:97:cd:28:77:2c:ec:65:4a:52:6b:bc:21:1a:
30:1b:ce:3c:69:d7:5b:86:eb:bc:96:89:52:51:d6:06:0a:75:
72:6f:f3:60:be:cb:87:bd:89:3b:57:41:eb:e8:f9:97:bc:46:
17:38:e4:26:29:cb:85:21:14:89:e1:1c:6a:06:1d:14:ce:1e:
ce:59:dc:f9:0a:04:be:58:70:93:17:67:c7:b6:81:76:ca:d6:
1e:46:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:33 2025 by rpki-client