Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/_lH53cwAPX77e9Sqq3u5-kfz51w.roa
File: _lH53cwAPX77e9Sqq3u5-kfz51w.roa (raw, json)
Hash identifier: fvhaRNnLQ4g0NJLXboTbQyNsrmmr8y6K6UEojCq3riE=
Subject key identifier: FE:51:F9:DD:CC:00:3D:7E:FB:7B:D4:AA:AB:7B:B9:FA:47:F3:E7:5C
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 01857246EFCA1BE4123E18516DD684B16B08
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/_lH53cwAPX77e9Sqq3u5-kfz51w.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 2a09:6280:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ef:ca:1b:e4:12:3e:18:51:6d:d6:84:b1:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe51f9ddcc003d7efb7bd4aaab7bb9fa47f3e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:e4:8e:59:64:06:8b:0c:de:53:33:22:41:
b3:61:6b:f9:90:c6:9c:32:82:35:95:1b:da:63:79:
4b:28:77:a0:ac:66:82:bb:1b:67:7d:59:92:58:9e:
72:06:4a:27:cd:e5:66:75:e3:5e:dc:2c:00:15:37:
30:f4:f3:e1:d0:06:10:bf:01:ff:34:e2:01:ed:e9:
99:50:0c:ae:73:e1:bf:de:da:d1:a3:cf:17:84:08:
77:9f:58:5e:bf:5d:aa:fc:6c:e8:34:80:b8:17:41:
3e:1c:88:f2:c4:f3:6a:49:b4:d1:61:e2:2d:b5:b6:
01:4a:3f:da:73:e8:ed:53:0a:c5:2f:fe:b7:b2:4f:
21:c5:38:e5:7a:0a:c0:1a:d1:68:41:69:af:01:1f:
1b:a0:00:7d:55:c0:e5:c9:0d:13:d6:bc:37:f2:78:
34:2d:14:30:cd:1d:c3:5d:3f:b0:42:d2:06:6b:4f:
cf:cb:11:11:80:bb:3e:90:c9:62:21:c1:66:32:f2:
fa:8c:39:58:6c:a1:1e:68:3d:6c:f6:1d:f2:dc:f3:
0d:be:c2:ad:82:30:2d:61:d1:ec:a4:0b:d3:7b:95:
38:3d:8d:68:6d:87:ce:11:be:71:7d:ec:b9:52:3d:
48:c1:92:b4:fc:04:73:37:e9:f8:5d:89:65:b2:01:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:F9:DD:CC:00:3D:7E:FB:7B:D4:AA:AB:7B:B9:FA:47:F3:E7:5C
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/_lH53cwAPX77e9Sqq3u5-kfz51w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:4::/48
Signature Algorithm: sha256WithRSAEncryption
c3:6c:d8:75:de:79:21:48:d5:d5:c8:06:3f:8a:d2:9f:dc:e4:
5a:8a:e0:ba:85:ab:1a:0e:c7:40:13:ec:53:aa:05:ba:4c:91:
b3:0a:da:69:b9:00:19:5b:06:be:66:78:fb:1d:c9:a0:bb:59:
09:30:88:3d:00:f6:a2:1c:5d:0a:ac:38:50:69:f1:d1:42:64:
f1:d3:3f:09:36:1f:82:8d:44:f8:ce:45:da:b0:7f:a1:16:94:
a1:45:7c:0c:c9:82:91:26:13:ac:5b:8b:7d:67:f5:3a:2d:13:
36:c6:a5:7f:ee:9a:0c:4e:ff:bc:2b:6e:64:8a:31:fc:3c:93:
33:7e:bf:c1:4b:ac:67:67:12:bc:5f:de:e9:17:ae:a4:00:76:
c0:01:22:a3:5e:09:b2:b4:a6:d7:6e:62:14:72:7e:a0:75:ba:
d9:19:56:3b:0d:7c:1f:6a:32:60:73:70:d5:bc:9e:4a:b3:40:
e5:07:82:43:96:e8:d8:94:cf:89:df:29:50:8f:1c:ed:98:36:
0f:f3:25:a0:be:e1:b5:35:55:9b:02:9f:31:9a:57:c9:0b:22:
4c:01:c3:3f:9d:c6:6f:b9:06:0e:b6:c0:54:99:c2:46:58:a3:
f8:cd:f5:34:b1:5c:25:1c:05:44:a7:6f:d5:f1:46:c3:06:8f:
3a:f4:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:50 2025 by rpki-client