Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/il0Z-xW9MuWupg3xKoK8OOqM6vI.roa
File: il0Z-xW9MuWupg3xKoK8OOqM6vI.roa (raw, json)
Hash identifier: 568t2pWFvFlGkw3q0WeJ/X/pOg7idoqMsb9QqHlNyYU=
Subject key identifier: 8A:5D:19:FB:15:BD:32:E5:AE:A6:0D:F1:2A:82:BC:38:EA:8C:EA:F2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB726D2753E9B18CBE192DFBC85477
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/il0Z-xW9MuWupg3xKoK8OOqM6vI.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 2a0a:b382::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:6d:27:53:e9:b1:8c:be:19:2d:fb:c8:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a5d19fb15bd32e5aea60df12a82bc38ea8ceaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:34:3b:e1:25:ea:66:11:f9:9f:96:c7:d4:
9d:19:ed:ca:f4:e4:95:20:c5:3b:3f:05:cc:9f:e8:
ca:9e:cc:6e:f6:48:b6:c2:16:e4:60:51:3b:0b:07:
c1:05:7b:f0:10:5c:5c:13:d7:a9:df:49:7a:1a:3e:
25:ca:31:2d:77:c1:a6:d0:ee:5f:d1:03:d1:8e:12:
81:e2:ea:a5:32:43:75:0d:58:56:77:ba:a3:c9:4f:
3b:80:79:80:30:f3:49:05:6c:14:3e:76:de:79:8c:
f2:ce:87:76:6e:c4:0d:73:1e:88:3a:8a:45:f1:17:
85:c8:04:a6:17:f2:40:06:d4:41:fb:12:28:09:95:
13:5f:3a:a9:d3:98:31:10:b2:c1:58:8d:4d:c9:d7:
40:0c:b9:9f:58:63:ff:d3:25:74:b1:71:45:d1:45:
56:13:e1:e0:6a:17:c3:77:06:6c:ab:0f:1c:4f:33:
d7:61:a0:20:63:80:89:c3:71:e4:52:3e:35:9f:2f:
e4:94:0a:27:d2:68:e8:ab:ed:72:db:0a:2d:9f:71:
d5:d1:0d:71:6b:b2:d4:4e:b9:69:37:8d:07:94:cb:
78:74:c7:42:c8:a7:81:f1:be:87:d1:ba:fb:0e:17:
ce:5b:80:66:1b:df:2f:69:8e:97:0a:3a:11:95:df:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:19:FB:15:BD:32:E5:AE:A6:0D:F1:2A:82:BC:38:EA:8C:EA:F2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/il0Z-xW9MuWupg3xKoK8OOqM6vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:b382::/32
Signature Algorithm: sha256WithRSAEncryption
42:12:1c:4e:91:1f:79:70:fe:c2:cf:0b:2a:6c:10:43:58:bc:
06:c2:14:e5:5d:3e:80:40:89:43:93:44:c3:ea:55:5c:30:a1:
05:ef:0e:1c:af:31:c1:b7:9f:dc:bf:56:47:b9:a3:a7:d4:19:
48:11:5b:16:8f:45:0a:1b:ae:9c:0f:3b:85:0b:00:d4:54:fb:
0d:81:9d:37:7a:b1:bf:91:f8:fc:a9:81:f3:be:b0:9e:cb:fb:
f7:93:58:76:12:82:df:cd:ce:97:24:73:9e:c9:2b:19:27:0f:
d8:89:2d:ca:59:7d:6c:ed:1b:ba:5e:f8:fa:31:78:66:77:b3:
6e:63:78:90:37:d8:0f:d1:72:46:1f:1a:a2:a0:68:dc:12:fc:
6b:f1:f4:97:97:34:63:25:03:c7:36:72:20:8e:77:33:df:d9:
d3:b2:f8:d3:f4:07:ce:e6:90:ff:6f:d0:14:09:42:9d:94:7a:
e4:c6:91:85:ba:37:31:1f:cf:4f:7d:27:5c:01:0a:8f:75:5e:
94:e5:86:e5:c8:67:dc:66:bb:87:40:e9:78:1a:d7:b4:3b:54:
0b:fe:3e:69:99:75:88:fd:ec:45:1a:a8:75:95:df:74:84:de:
d0:fe:15:4c:e2:22:83:a5:09:64:9a:88:96:e2:7c:3f:45:1f:
aa:b1:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:44 2025 by rpki-client