Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/2v9WLSFviNLhCEs3PI8ghWfG43g.roa
File: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (raw, json)
Hash identifier: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=
Subject key identifier: DA:FF:56:2D:21:6F:88:D2:E1:08:4B:37:3C:8F:20:85:67:C6:E3:78
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 0194266B24F16084B4B3F73D3D51C5561E56
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/2v9WLSFviNLhCEs3PI8ghWfG43g.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 2001:67c:2ffc::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:24:f1:60:84:b4:b3:f7:3d:3d:51:c5:56:1e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daff562d216f88d2e1084b373c8f208567c6e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:54:02:5c:0e:24:c8:fc:e0:5c:da:91:a6:
a6:61:12:0a:95:05:6f:ef:a9:d6:63:c9:6e:ba:c7:
c0:12:a2:ee:e2:d2:4b:41:1b:4c:a6:94:77:3f:e0:
6d:a1:df:dd:4d:dc:56:5e:63:e5:0f:69:f2:08:10:
ec:75:2a:89:fb:04:85:21:9b:28:32:f5:65:65:1d:
81:81:f2:63:31:cd:eb:99:29:d2:3d:b5:e4:4f:a2:
fe:6c:ff:8b:fa:96:45:fc:e1:a8:2b:58:02:f3:81:
49:7c:40:02:4a:16:db:6b:97:be:6d:09:b4:45:9a:
57:f0:19:80:2f:65:ca:b0:75:dd:87:be:9e:34:e8:
2a:29:d5:3e:e7:0b:bd:a7:52:78:1d:35:58:aa:e1:
44:4e:36:9a:3d:2d:fc:f7:2b:97:9f:e0:ca:5c:85:
08:df:01:ca:fa:e6:61:23:a6:7a:9c:79:5c:e4:0a:
81:23:e8:1a:7d:bb:aa:7d:1d:6e:50:9e:9f:6d:ca:
4c:d1:e3:1a:44:c7:d9:d6:06:dd:6d:0c:b4:cb:de:
83:5c:22:b8:14:ab:b5:58:21:18:0a:6f:83:73:81:
3c:a0:4b:cc:f6:03:58:6d:6e:06:02:de:fd:e1:ed:
e8:e5:f1:66:78:7c:83:ee:a7:f6:6b:fb:27:6c:36:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:56:2D:21:6F:88:D2:E1:08:4B:37:3C:8F:20:85:67:C6:E3:78
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/2v9WLSFviNLhCEs3PI8ghWfG43g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ffc::/48
Signature Algorithm: sha256WithRSAEncryption
90:72:6c:af:a4:fe:5e:d1:88:7d:1d:71:cb:60:4e:37:b2:b7:
bb:cb:32:20:ed:5a:5b:c9:12:24:87:c9:c3:af:85:9c:64:86:
49:59:dc:f0:f1:ce:85:fc:03:7b:97:04:68:20:f8:6c:b6:b8:
ca:1c:3d:dc:72:3a:70:0e:9e:3c:71:6a:6c:70:63:ff:88:1f:
9c:52:4a:ef:64:8f:18:76:9d:c4:1d:49:cd:15:15:12:09:b9:
cb:f1:82:57:f6:f6:75:62:cb:4f:26:e9:d0:a8:33:17:d9:32:
6b:f7:b9:11:a3:c9:e0:e8:a8:19:86:e8:a3:34:27:f7:88:3b:
5c:73:af:9f:11:c1:9f:74:9b:59:9f:53:04:af:87:f1:32:2b:
4b:82:98:ef:4d:f5:b9:df:d9:19:27:18:a2:db:43:72:ba:3d:
6f:44:0c:18:3e:3b:97:bc:0c:08:c7:01:83:20:a0:41:28:62:
dc:2e:86:04:fa:e2:73:fe:70:37:a9:7b:75:36:2c:d2:78:5e:
1a:c3:96:e9:34:d3:20:5a:0c:9f:67:fc:34:cd:0d:01:cf:c6:
92:a5:f9:67:1b:6c:b2:41:83:96:ce:3b:d0:fd:e8:e3:41:56:
b3:30:64:4c:56:ad:c0:77:3a:de:8f:46:40:a6:56:5f:8d:94:
a4:57:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:22 2025 by rpki-client