Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa
File: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (raw, json)
Hash identifier: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=
Subject key identifier: 49:CE:19:CC:CC:91:0D:1D:20:BC:E2:7F:CC:D0:36:83:85:71:AF:AF
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D40188F81A315A97023B1E8A2D64D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 2a0d:2146:8660::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:40:18:8f:81:a3:15:a9:70:23:b1:e8:a2:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ce19cccc910d1d20bce27fccd036838571afaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:ed:f6:11:7a:f0:fc:28:fb:34:38:4d:6c:
0f:b8:45:92:db:08:96:39:e9:6d:aa:bc:c0:9f:58:
05:29:bb:54:79:9c:80:8d:26:5f:e3:9f:1b:f2:c3:
dd:47:de:3b:ba:34:e1:65:b3:79:55:a2:1a:80:98:
49:e7:85:9d:e8:4c:10:3c:49:f8:34:24:6f:6c:43:
8f:fe:6f:dc:04:22:f3:9f:8f:a1:e0:99:6a:8a:20:
e2:91:b0:78:d6:da:28:a6:aa:4c:18:26:22:fa:7e:
22:8f:ef:fd:92:60:1c:0f:b4:c8:f5:1c:ed:97:ff:
20:08:54:84:d4:23:b4:30:42:0a:67:f4:82:e6:cd:
71:8c:8c:d6:95:7e:d5:75:e5:2a:e7:7b:48:bb:5f:
ce:63:b6:ce:e1:3d:6a:a7:f2:ab:a4:73:72:e7:80:
34:b6:3e:1f:a5:17:ca:f1:ce:84:d3:80:25:70:4b:
08:18:14:31:0a:dc:4e:0f:7d:61:5c:42:dc:18:fc:
1a:da:e3:14:b0:b6:bb:dc:31:12:b6:83:4f:d7:87:
3f:8c:43:ef:45:69:fa:7d:39:23:5a:94:0a:6d:bc:
5b:1c:5b:f3:b1:61:bc:d9:67:a3:48:f8:ec:5b:3e:
01:87:2e:3f:93:60:2b:3a:ec:ec:cd:56:87:9e:3d:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:19:CC:CC:91:0D:1D:20:BC:E2:7F:CC:D0:36:83:85:71:AF:AF
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8660::/48
Signature Algorithm: sha256WithRSAEncryption
6a:6a:0a:ad:ca:c2:2b:01:43:92:80:1f:a0:ae:d2:4e:bc:72:
6c:33:01:3c:33:df:c8:e8:68:32:95:fe:7d:1b:bc:96:e1:c9:
28:e0:ec:c1:28:1c:f5:04:e4:7b:88:91:31:a7:e3:28:f1:0c:
ab:9e:4e:e6:81:6a:b6:d6:7a:49:47:dd:d4:0e:db:2e:94:b5:
8e:2e:cd:19:70:14:87:5f:00:06:3b:70:13:0b:a3:ea:54:35:
31:39:b0:0d:48:62:f3:c4:92:a5:f9:d1:c9:5d:99:63:27:59:
13:ee:73:f1:48:bf:d4:f6:31:98:83:01:d8:33:25:23:fc:ac:
77:e4:7c:3c:e6:c0:dd:b6:70:2b:4c:5f:f1:04:f2:93:d6:b3:
01:5f:b2:3b:7b:8c:eb:8f:bf:fc:42:7e:dd:8c:f2:38:13:c9:
77:89:4d:00:c9:9a:4e:80:18:a7:bf:68:b4:49:1d:f9:15:59:
3e:11:b5:83:0d:75:bc:c3:2e:ad:84:ac:36:10:cf:b6:95:67:
47:88:76:1e:1f:9c:7e:98:f5:08:36:02:5a:29:ff:4c:0b:4c:
c4:d5:40:fb:dc:d7:08:ad:77:5a:cf:c4:4c:ee:90:1a:4f:17:
fa:76:57:26:09:c7:70:36:13:44:5e:9f:45:f8:2d:17:ca:2d:
31:a9:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:08 2025 by rpki-client