Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/i_knfWj7WyM3Zdh6X9OD-oebaEw.roa
File: i_knfWj7WyM3Zdh6X9OD-oebaEw.roa (raw, json)
Hash identifier: AiNIarmGK49tfZ78pUI3LkfHaW5QG4DIgExxLkEIf60=
Subject key identifier: 8B:F9:27:7D:68:FB:5B:23:37:65:D8:7A:5F:D3:83:FA:87:9B:68:4C
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018CCA990EB5380255047696022F511F6BCC
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/i_knfWj7WyM3Zdh6X9OD-oebaEw.roa
Signing time: Tue 02 Jan 2024 14:34:37 +0000
ROA not before: Tue 02 Jan 2024 14:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 2a09:6280:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:0e:b5:38:02:55:04:76:96:02:2f:51:1f:6b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 14:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bf9277d68fb5b233765d87a5fd383fa879b684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:86:f4:f6:ed:88:b7:bf:af:7e:11:df:b6:
ef:73:02:75:63:d6:a5:ce:fb:19:fb:f9:f7:38:8a:
74:a3:e8:bb:d9:22:f5:1d:6a:92:e6:95:81:61:13:
c8:34:ea:92:3d:cc:f0:bb:f7:98:e6:e4:c6:8f:f3:
47:06:79:f2:9f:6a:8c:39:85:f6:6f:3b:3e:bb:d0:
d7:34:cc:3e:92:a8:aa:8d:60:9b:1d:6f:8d:71:26:
d7:53:3d:10:73:c9:b1:28:73:de:f0:1c:92:7e:25:
ed:75:06:92:a6:99:fc:40:cf:ee:50:cb:f4:0f:9b:
90:4e:9e:e7:7c:9c:70:33:2d:84:72:f4:9a:bc:74:
f1:53:7d:77:bd:ff:b2:fe:4e:a3:99:9d:a6:ff:2f:
cc:73:7c:f3:7c:70:6c:b2:cd:1f:8a:8a:0c:d8:c6:
af:bd:ed:a7:f9:f8:f4:b3:e6:78:fd:f5:6a:ed:eb:
19:12:52:4f:c9:0d:b1:ab:d5:86:7d:0d:4e:46:28:
7f:fb:cd:3d:6e:c8:96:59:40:a8:1a:bf:56:25:ef:
b4:76:30:47:25:43:fd:44:f5:b0:80:53:7f:17:d1:
6d:ec:a4:b1:bb:78:8a:6c:69:b9:e7:d1:d4:a8:4d:
4f:c6:be:04:69:0d:ee:6a:34:5d:13:3c:d2:9c:69:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F9:27:7D:68:FB:5B:23:37:65:D8:7A:5F:D3:83:FA:87:9B:68:4C
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/i_knfWj7WyM3Zdh6X9OD-oebaEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:4::/48
Signature Algorithm: sha256WithRSAEncryption
c0:f5:34:03:51:02:d9:08:6f:76:0f:6d:29:8b:00:0b:7e:17:
49:fd:55:11:28:46:59:00:91:ea:90:3d:6d:42:da:ff:a5:0a:
f8:c3:3f:37:ad:37:ce:37:b5:99:ed:b0:b5:d5:51:e6:ab:b7:
33:70:b9:eb:ae:b7:99:10:0a:1f:c6:db:19:ad:10:64:17:b0:
89:b5:5e:f6:be:bd:e8:f2:10:08:31:e3:5d:96:ea:70:b5:ae:
14:6e:dd:df:5a:dc:62:0f:12:22:84:e6:f5:25:70:f7:a5:02:
12:07:8e:ae:4c:80:e1:e3:cd:72:3d:f8:45:d5:dc:52:aa:f1:
2c:7f:58:b9:b0:ab:55:4b:71:54:4d:06:85:56:13:0e:5f:75:
8f:16:4d:5e:c9:2f:c6:ba:c6:4a:63:3a:d5:50:53:4a:cb:b9:
79:3c:1d:9f:ba:e3:22:aa:15:07:f9:22:8a:1c:50:d9:6e:4f:
16:a0:0b:3c:79:c8:86:55:fe:67:4f:d7:67:34:e2:dc:a6:da:
b5:0f:68:16:99:99:97:9c:5a:c0:e4:d2:c2:be:6d:a9:ff:10:
05:d7:a1:c2:f4:47:4c:cf:37:d8:c1:6b:f4:22:d0:df:55:6a:
70:82:d5:87:cc:bc:be:40:9e:37:87:6e:76:bd:51:5e:86:58:
ec:c8:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:25:01 2025 by rpki-client