Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gQWFEkun2ccvVh53BL0LLh5mo3I.roa
File: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (raw, json)
Hash identifier: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=
Subject key identifier: 81:05:85:12:4B:A7:D9:C7:2F:56:1E:77:04:BD:0B:2E:1E:66:A3:72
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019427B5DD1C478131BEEF98893A782767F5
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gQWFEkun2ccvVh53BL0LLh5mo3I.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214868
IP address blocks: 2a09:be41::/32 maxlen: 48
2a09:be42::/32 maxlen: 48
2a09:be43::/32 maxlen: 48
2a09:be44::/32 maxlen: 48
2a09:be45::/32 maxlen: 48
2a09:be46::/32 maxlen: 48
2a09:be47::/32 maxlen: 48
2a12:49c0::/29 maxlen: 48
2a12:49c0::/32 maxlen: 48
2a12:49c1::/32 maxlen: 48
2a12:49c2::/32 maxlen: 48
2a12:49c3::/32 maxlen: 48
2a12:49c4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dd:1c:47:81:31:be:ef:98:89:3a:78:27:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=810585124ba7d9c72f561e7704bd0b2e1e66a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:52:02:02:dc:ef:dc:a8:95:d9:3b:95:ee:
f8:6b:74:d1:3b:5a:4c:71:24:23:8e:d9:0f:e8:45:
27:ad:f7:55:df:98:53:e9:7f:c8:6f:fc:42:12:77:
50:8c:20:7f:6c:26:3e:75:38:e2:25:94:23:5c:a7:
64:11:c6:f0:fa:ed:5d:4c:b2:a2:33:44:c9:48:5c:
97:26:d3:d4:02:9a:1f:f3:5b:0b:ef:1a:81:5c:66:
47:06:90:35:ff:34:77:83:8b:56:92:f9:6a:00:17:
34:f4:d4:7a:26:3d:db:2f:dc:21:4c:fc:1c:d8:c4:
c9:13:cb:23:ff:27:37:0c:0f:9d:50:e6:13:56:96:
66:46:87:95:49:6d:32:76:04:3e:87:33:36:6d:db:
7a:f2:9d:5b:fd:a6:a5:34:3f:7a:06:54:b9:00:19:
61:f9:3e:3d:b4:e1:f7:93:60:e5:fb:76:a2:3c:a1:
8a:e4:2f:3b:c5:2f:5e:a3:89:71:4d:40:a9:21:98:
66:8d:0b:48:0b:ff:6e:9a:e3:ef:19:e8:2c:5e:1c:
77:86:fb:1c:9d:12:52:70:68:2e:e8:31:3b:cf:67:
26:d1:fd:85:34:55:fc:69:2d:b5:45:15:49:65:4c:
ad:0a:e7:a3:ea:c8:52:10:f0:c1:6e:5b:dc:5f:9d:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:85:12:4B:A7:D9:C7:2F:56:1E:77:04:BD:0B:2E:1E:66:A3:72
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/gQWFEkun2ccvVh53BL0LLh5mo3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:34:70:3b:f1:86:8f:01:8b:7c:ad:8d:9c:87:2f:3d:70:5f:
4f:91:31:2c:f2:93:4d:0b:c1:1e:8a:c6:0f:9e:52:6e:a3:65:
e5:7e:c6:39:a6:d6:bd:ea:53:18:72:4f:93:67:4e:c7:29:31:
2a:a1:b1:74:91:90:a4:b5:19:55:cc:81:bb:e1:1f:3d:07:ce:
a1:6d:87:d5:ce:6d:7a:c6:c1:84:9a:e7:3c:38:02:e5:75:f0:
ec:04:f7:45:2b:8d:4e:bf:a2:56:7a:67:1e:92:fb:c7:2c:e8:
db:c9:79:37:f8:11:12:fd:ed:d6:91:e2:9c:82:69:3f:62:f3:
9c:50:38:d5:82:55:c7:b9:8c:22:9a:70:9f:e9:b5:00:fa:15:
e8:76:48:41:81:d8:36:04:31:ae:9d:11:03:f5:06:71:6a:7f:
1c:c5:8a:1f:77:0b:99:9e:7e:77:15:6f:8b:6a:ed:d6:ff:e4:
63:22:52:72:3a:58:38:63:d3:98:e7:60:8e:11:20:c0:ae:12:
c6:18:3c:99:5a:3d:4f:1e:e0:66:2b:3b:71:d1:41:70:b2:6a:
37:9d:60:2e:e2:e4:f2:17:05:1a:88:b8:54:f2:c5:bc:29:a7:
2a:62:b2:16:8f:8a:ee:8d:70:32:1e:f8:06:ca:d0:f4:b9:ed:
b6:56:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:28 2025 by rpki-client