Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa
File: Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa (raw, json)
Hash identifier: FSVc/S0WQeqtLnqBGn/Yt92ELKwsfGtg1h8aCQ4iu0g=
Subject key identifier: 22:2F:7D:54:11:51:BD:F7:BA:16:42:4C:DD:E1:15:35:50:9E:97:76
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB751BED4489F25FCB5482F7C28070
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47728
IP address blocks: 2a0d:c107::/32 maxlen: 32
2a0d:c107::/48 maxlen: 48
2a0d:c107:1::/48 maxlen: 48
2a0d:c107:2::/48 maxlen: 48
2a0d:c107:3::/48 maxlen: 48
2a0d:c107:4::/48 maxlen: 48
2a0d:c107:5::/48 maxlen: 48
2a0d:c107:6::/48 maxlen: 48
2a0d:c107:7::/48 maxlen: 48
2a0d:c107:8::/48 maxlen: 48
2a0d:c107:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:75:1b:ed:44:89:f2:5f:cb:54:82:f7:c2:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222f7d541151bdf7ba16424cdde11535509e9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:f0:ae:e5:6a:e8:ed:d5:9f:9b:55:c5:94:
93:7a:b4:3d:37:af:55:0f:4b:39:b9:c7:28:2a:70:
f8:33:86:bd:1b:93:68:1b:fa:76:59:3f:03:b5:74:
4f:e7:4f:ac:43:c7:be:1b:93:ca:dc:99:66:1b:42:
75:a5:da:d9:6c:26:04:fb:07:3a:23:a3:f7:d2:5b:
8a:fc:32:d8:d8:d1:f5:03:8f:98:9f:af:73:63:fe:
d0:ea:f8:85:d2:b8:10:de:15:d6:95:92:e8:65:73:
f7:c4:3a:2f:2d:63:84:68:46:e2:bd:2b:f9:9f:02:
86:70:95:44:7c:f5:c0:cc:38:b4:28:b9:4e:a6:d4:
da:16:fe:e0:52:3c:7b:49:38:a1:39:97:5f:40:78:
49:5f:05:33:0f:e5:32:1c:5c:bf:e8:cd:11:0b:ed:
ca:0d:c1:d5:7c:1f:21:ea:79:fe:95:19:18:29:ec:
39:00:6a:c0:c0:08:47:00:65:c3:b8:0e:95:7b:2c:
ac:bd:cf:d4:42:37:99:19:d8:e1:92:d0:a1:71:c6:
42:8c:a3:87:16:ab:d7:da:a9:06:c0:4d:12:ef:aa:
c7:17:aa:ed:d9:8a:ad:8f:3c:80:fe:32:6f:a5:9c:
45:ab:58:1c:44:07:41:68:39:18:06:d4:b7:fe:a5:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:7D:54:11:51:BD:F7:BA:16:42:4C:DD:E1:15:35:50:9E:97:76
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c107::/32
Signature Algorithm: sha256WithRSAEncryption
71:f4:42:3f:05:eb:b9:dc:52:75:5a:19:a1:8a:f3:04:8d:8e:
2a:b1:b8:ab:c6:ef:a1:0b:70:39:b5:e5:b0:1f:21:b5:d6:ff:
f3:69:29:a8:21:e7:92:a4:d5:df:34:34:39:aa:4b:00:eb:d5:
d6:f2:f8:24:a2:8b:ce:81:61:4c:4f:8d:55:66:28:12:d8:72:
03:14:0d:6d:78:ab:50:9b:12:42:01:bd:32:a4:aa:bd:c7:07:
c8:11:56:e4:66:58:c5:8c:55:ef:1b:fe:79:23:23:98:0b:2b:
01:1c:1b:ef:79:2d:6e:dc:83:a4:c3:df:b1:66:d9:7a:a7:d8:
43:3a:f6:63:29:75:96:11:f9:d1:e1:4b:af:c0:84:3d:17:be:
f2:07:5a:ad:83:b0:c5:c0:42:ff:93:36:0a:74:f3:97:47:e7:
4d:9c:df:58:9e:79:64:79:50:f5:d5:e4:1e:46:56:70:d2:0c:
ec:93:04:e1:07:6d:55:41:46:e7:fe:8f:f1:ca:e9:85:c6:97:
1a:6b:31:be:d7:e4:2d:cd:54:eb:40:9a:a8:04:1e:d3:e4:27:
af:7d:0f:49:de:95:22:e3:8c:da:5a:7f:cd:6b:f6:ac:4c:b9:
f5:63:db:88:6d:dd:35:3d:1d:05:3f:45:4d:3f:7d:35:b0:00:
38:4c:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:19 2025 by rpki-client