Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa
File: 1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa (raw, json)
Hash identifier: n6aAyuQfPwHavwhm028DG/DEDv2en3wM9tRCOWmzyME=
Subject key identifier: D6:BF:24:07:96:7A:CF:F4:4D:C3:81:6E:09:9F:A7:7A:52:BA:36:9C
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019425FDA16407250BDAE5A41056BEFDDB5C
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214706
IP address blocks: 2a12:6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:64:07:25:0b:da:e5:a4:10:56:be:fd:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bf2407967acff44dc3816e099fa77a52ba369c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:63:99:58:3d:e6:f6:f3:d8:90:df:b3:52:
cb:c1:3c:88:f9:01:f4:07:86:b2:56:41:12:fb:33:
ba:ca:2d:fd:6e:4d:a3:9d:d7:f4:69:1f:ce:9a:aa:
97:28:0d:e7:f0:34:7d:3e:d4:0d:7a:40:9e:c8:60:
29:dc:cb:42:dc:cc:74:c1:08:11:0b:e8:a0:67:58:
55:93:8d:ad:9a:e5:9c:00:7f:4e:1a:e3:35:d7:b7:
da:71:72:37:64:5d:7a:84:66:95:b4:a8:ed:fa:c5:
f5:a9:c1:e7:39:9d:2b:c4:16:75:c2:ae:c8:a2:48:
4f:c6:69:f3:2b:32:e1:19:2c:5b:bd:3d:a0:ab:7a:
27:a1:c0:02:de:43:37:cf:68:91:e1:64:51:14:fb:
f1:11:7f:59:dc:02:d3:48:6d:ef:59:c5:99:35:f8:
1c:dd:7f:e5:f8:a8:5a:da:cd:ca:05:5f:6c:3a:02:
5c:6e:68:a4:c3:94:99:57:fc:e1:57:09:a4:f9:b2:
d9:50:1b:9f:a2:f6:a0:05:fd:af:66:a3:08:a8:6e:
78:b0:0a:4e:6d:1e:73:6b:bd:4d:be:6e:19:a1:8b:
f0:ad:39:c4:e7:00:5c:38:ac:d3:0d:b0:b0:43:0b:
dc:06:f5:fd:89:85:86:e3:34:e9:bc:82:c2:99:37:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:24:07:96:7A:CF:F4:4D:C3:81:6E:09:9F:A7:7A:52:BA:36:9C
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/1r8kB5Z6z_RNw4FuCZ-nelK6Npw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:b9:ff:65:32:bc:a7:bb:7f:61:39:40:e0:f4:fa:e2:6e:39:
63:e7:ac:21:91:22:4b:fd:e8:e7:2b:3d:1d:e8:8c:61:be:2c:
01:40:52:ff:31:08:3d:c7:c8:94:ce:5c:99:d4:41:b5:4f:1e:
00:81:ce:f1:e8:27:b0:9b:3d:c8:8e:c5:64:27:29:8e:fc:3a:
b2:e4:75:2c:c1:96:e9:e4:45:b8:fd:50:9e:17:c2:a9:2c:d1:
c1:c6:81:c6:0b:b7:a0:15:b4:2f:76:2c:91:05:c0:f9:98:97:
bf:c1:cb:74:2c:8d:21:93:11:0f:b1:bb:67:b4:0f:2a:8e:c5:
56:a5:65:b4:e7:1a:ba:f4:27:ea:9f:f1:b5:60:2c:65:79:c6:
a8:2e:ca:79:5c:e8:2c:69:4b:59:d5:6a:e4:06:e7:b2:3e:ff:
e7:9e:39:da:c1:65:e4:08:7b:87:9b:d6:b2:48:8d:36:8c:41:
32:1d:47:1a:f9:25:c3:b0:9e:e0:20:94:c3:de:d9:54:5d:2e:
d4:07:39:5f:dd:1a:5b:f6:5b:26:33:73:f7:6c:c6:ac:37:30:
d3:9f:90:09:59:c1:bd:53:42:e3:29:5e:11:90:54:a3:2c:00:
0b:92:0c:f8:f1:76:91:c9:27:12:77:73:69:8e:ac:38:99:46:
28:c1:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:35:22 2025 by rpki-client