Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/Fd7jj4UgNX8KUEunLGyTOECk2zM.roa
File: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (raw, json)
Hash identifier: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=
Subject key identifier: 15:DE:E3:8F:85:20:35:7F:0A:50:4B:A7:2C:6C:93:38:40:A4:DB:33
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 019423D7C76CD06523E33A607A472A60A392
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/Fd7jj4UgNX8KUEunLGyTOECk2zM.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131199
IP address blocks: 2a0c:36c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c7:6c:d0:65:23:e3:3a:60:7a:47:2a:60:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15dee38f8520357f0a504ba72c6c933840a4db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:8b:21:55:71:f6:fb:33:5b:7b:8e:1a:0c:
c6:22:c1:47:a9:b8:bd:24:01:c5:b4:20:0d:11:25:
fd:58:ab:46:0b:b0:68:16:27:ac:00:d7:9d:b9:08:
02:b0:2c:85:66:b0:31:e6:e3:b8:75:39:9c:d6:b6:
c5:fb:fa:2d:e3:02:a6:8f:de:4d:97:82:bf:65:34:
e1:85:92:ed:77:4f:c1:55:d8:f7:9a:3c:dd:34:57:
e1:74:9c:30:a2:55:70:46:78:28:76:5d:a7:da:bb:
4f:5a:34:98:d4:b2:88:80:e9:f1:94:31:79:70:ab:
c4:12:7b:27:6a:88:4c:72:fa:15:81:3a:66:dd:9b:
c9:ae:c7:cb:63:d2:fc:e7:60:77:4a:ae:d9:87:90:
69:c2:53:23:a3:8c:d2:35:59:40:fc:49:d7:ef:8a:
90:1a:5b:f5:af:57:66:95:af:7a:20:58:8f:bd:7f:
18:45:fc:ff:10:36:94:43:90:04:9b:00:0a:f7:50:
11:aa:53:69:76:99:66:e4:5f:3e:35:ef:7a:e6:88:
ca:c4:d4:60:0f:50:0f:cc:4f:b2:43:09:28:4f:d2:
ec:77:65:42:65:d4:89:80:46:8a:35:f4:4c:fc:a7:
26:d0:cf:d2:8f:3d:a2:f7:14:6a:12:96:e9:9e:77:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:E3:8F:85:20:35:7F:0A:50:4B:A7:2C:6C:93:38:40:A4:DB:33
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/Fd7jj4UgNX8KUEunLGyTOECk2zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:36c1::/32
Signature Algorithm: sha256WithRSAEncryption
31:3d:76:ff:bc:8a:40:9e:25:4f:76:43:43:af:46:9d:98:dd:
54:03:c6:c7:9c:87:77:1f:e2:d7:ea:1e:39:b1:b0:ba:a1:f9:
30:5f:c4:be:e0:1e:00:b7:9f:98:94:62:85:51:7a:1e:23:3b:
11:8c:73:74:88:e0:5c:93:d2:8d:f9:5d:86:c1:5c:52:39:da:
8a:e4:70:e4:10:45:ea:d2:f2:e1:b7:47:d3:b4:f1:76:d6:1b:
37:54:38:37:56:82:d9:ef:2c:50:e8:86:74:2c:a8:59:83:62:
1e:10:8d:e2:9f:53:c1:aa:b2:f8:e1:55:29:d8:9a:96:19:6c:
71:77:59:d1:1d:a1:d0:87:59:08:01:85:ca:64:d5:5b:f3:01:
48:5d:fc:af:2e:04:a8:b6:1d:c2:d5:c0:42:56:67:d2:0f:5a:
93:f3:04:fb:36:a0:7a:18:c8:87:8d:50:7c:04:5b:2d:d8:ee:
fe:a8:e6:23:95:b6:17:c9:ce:b6:0a:58:73:d7:66:e1:7b:95:
03:f3:ea:f2:45:26:23:f8:51:d8:9b:d7:85:43:bf:9c:c8:8d:
aa:6d:18:c7:94:e0:59:95:9e:37:34:f3:32:f1:92:17:7f:e0:
fd:85:2a:2a:92:52:53:3c:d7:76:6f:be:56:88:0b:70:22:b7:
6b:e9:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:52 2025 by rpki-client