Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BEtB7uig7C__cKu81CI2_9LMKH4.roa
File: BEtB7uig7C__cKu81CI2_9LMKH4.roa (raw, json)
Hash identifier: qyOmUROL6SQZVJ1mdi6yNjQj0MU3VtSOrXhq5B/39ns=
Subject key identifier: 04:4B:41:EE:E8:A0:EC:2F:FF:70:AB:BC:D4:22:36:FF:D2:CC:28:7E
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 019571944FB00303357A16D44B503FFAE31D
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BEtB7uig7C__cKu81CI2_9LMKH4.roa
Signing time: Fri 07 Mar 2025 17:08:19 +0000
ROA not before: Fri 07 Mar 2025 17:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0d:b9c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:94:4f:b0:03:03:35:7a:16:d4:4b:50:3f:fa:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Mar 7 17:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044b41eee8a0ec2fff70abbcd42236ffd2cc287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:31:6a:c6:73:50:ec:a1:1d:64:cb:31:c2:
52:32:87:95:3c:95:b2:2a:e6:dc:5c:58:3e:7f:9b:
f2:ec:b9:fd:b0:de:9e:f0:11:42:1c:79:de:c1:02:
fd:d6:87:05:ec:1e:15:e0:1e:88:e5:75:fb:9b:f5:
bd:ad:a9:33:99:27:1c:c1:77:41:49:e4:8b:26:5d:
59:a1:18:84:89:67:1a:40:8f:74:63:49:d5:da:62:
76:9b:42:f3:1e:9a:37:e6:35:41:40:16:58:b9:63:
77:70:d8:97:95:66:ea:93:d1:b6:83:01:f4:51:25:
ed:d5:5b:d2:1c:1c:85:03:7c:ad:18:a9:c9:b8:c7:
bb:8c:24:ee:02:b6:4a:99:43:5e:28:aa:60:35:98:
6e:28:04:5d:84:9d:1a:81:5b:a0:f7:7f:33:1a:51:
90:8d:6b:bb:38:84:7a:8a:c8:5b:15:f8:87:f4:9b:
08:d9:09:03:dc:35:87:14:86:d3:3d:01:af:d9:0c:
3f:2a:4d:9c:af:63:4a:2c:ce:8e:c6:05:ac:fa:83:
7d:68:ec:a4:6b:35:de:3c:0f:61:56:35:ac:89:e6:
01:52:c2:f7:c8:21:19:87:88:f6:0d:36:d3:f4:a0:
7d:35:8c:1c:7a:fd:51:c2:49:9b:d2:ee:3e:26:0f:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:41:EE:E8:A0:EC:2F:FF:70:AB:BC:D4:22:36:FF:D2:CC:28:7E
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/BEtB7uig7C__cKu81CI2_9LMKH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b9c6::/32
Signature Algorithm: sha256WithRSAEncryption
21:82:ef:2c:25:c3:57:36:f1:dd:4f:09:1f:b3:45:6b:ae:34:
d5:6d:0b:39:d4:d0:3a:1b:f3:42:a0:55:79:1c:09:5d:40:5a:
d7:1b:18:73:91:fe:94:89:a6:66:df:9e:40:28:b1:30:42:3c:
0c:20:3e:39:e6:87:12:19:dc:75:97:69:44:20:38:27:49:d5:
7a:ae:48:1e:12:25:f8:d4:ae:c2:5c:13:da:85:a3:9b:df:92:
95:b1:fc:99:83:b9:87:39:de:f8:16:9f:25:c5:06:ff:00:71:
d9:63:4f:38:37:f6:eb:71:99:25:d8:d2:69:8c:6a:c3:fe:30:
bd:af:e6:32:ec:df:2f:95:c8:9c:6a:40:a4:ea:b2:a8:ee:08:
93:a1:38:a9:6a:a1:c2:6e:c3:6c:41:a3:2c:d4:39:ec:91:fc:
64:26:19:d4:cf:90:d9:73:81:04:61:0f:60:c5:55:0c:7c:48:
7c:35:33:0e:71:37:80:8b:b9:cf:8d:47:3f:83:a5:02:57:ee:
de:ab:fe:38:b6:90:3f:6c:cc:d7:0d:39:92:cc:e7:9a:d3:c8:
9b:98:c8:2d:09:d5:fd:f6:e3:1c:af:4c:84:bc:3c:ed:11:8f:
20:61:9b:22:a9:cf:8f:84:57:1d:06:1a:d6:7d:97:b0:2e:8b:
05:eb:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:15 2025 by rpki-client