Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/S2Sn5eFsRm1Iu0a2fDNJ6-6L1kA.roa
File: S2Sn5eFsRm1Iu0a2fDNJ6-6L1kA.roa (raw, json)
Hash identifier: rXUZ26eHk6HdmiQSWXxrDOpj8LNoaGPYGZN6cEQpOkE=
Subject key identifier: 4B:64:A7:E5:E1:6C:46:6D:48:BB:46:B6:7C:33:49:EB:EE:8B:D6:40
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0193ACDE7F9D065DD8A69C2473270FC67404
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/S2Sn5eFsRm1Iu0a2fDNJ6-6L1kA.roa
Signing time: Mon 09 Dec 2024 19:21:22 +0000
ROA not before: Mon 09 Dec 2024 19:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:f180::/32 maxlen: 32
2a11:f181::/32 maxlen: 32
2a12:1cc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:de:7f:9d:06:5d:d8:a6:9c:24:73:27:0f:c6:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Dec 9 19:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b64a7e5e16c466d48bb46b67c3349ebee8bd640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:fa:48:71:a9:52:d8:99:40:5c:72:53:a6:
e2:86:b5:89:61:eb:6b:67:8c:e9:29:99:62:d0:65:
da:ad:f8:95:ce:09:a0:11:6e:b4:a2:95:be:e3:d6:
9e:b8:bd:17:52:b4:0c:92:43:b7:30:78:db:5f:c5:
d7:a0:0d:5f:33:f9:36:75:2e:25:62:76:e1:f8:72:
88:05:01:ec:db:40:75:35:3f:fb:bc:59:71:b8:d0:
1f:c5:72:9c:6f:9c:58:6a:b4:5b:d7:db:68:63:fe:
59:d3:8d:92:43:5c:38:3c:85:35:b4:a6:ea:bd:69:
e9:cc:30:00:ad:ff:16:4b:e5:5c:8f:81:25:2a:df:
ee:30:95:82:fe:d3:b2:72:21:b8:36:ed:29:1b:04:
25:3d:dd:55:fa:9b:9f:d4:c6:8c:13:90:08:dd:8a:
fe:e7:f8:55:34:d5:f7:7a:46:7c:55:87:43:95:4b:
ec:42:d9:44:0a:14:c8:26:98:90:d8:47:a7:7e:9c:
9e:a9:d8:6e:80:2d:de:6a:10:01:a1:65:f8:a5:13:
00:86:c3:38:2a:85:8d:1f:d9:91:11:0a:1d:b4:60:
9f:16:48:1a:f3:0c:f4:0a:d4:ca:5f:4a:33:7c:da:
73:73:87:b9:44:d3:2d:66:95:a1:ee:5d:a0:c0:e4:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:A7:E5:E1:6C:46:6D:48:BB:46:B6:7C:33:49:EB:EE:8B:D6:40
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/S2Sn5eFsRm1Iu0a2fDNJ6-6L1kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f180::/31
2a12:1cc1::/32
Signature Algorithm: sha256WithRSAEncryption
6a:75:de:85:5c:db:59:ac:32:83:2e:52:b2:a4:b6:f6:9f:07:
ec:ae:07:28:5b:83:c9:74:1f:d4:18:05:ee:b1:a1:42:32:cd:
20:51:26:6b:64:cb:7f:35:33:86:10:bf:99:db:4f:9c:35:73:
2d:1d:62:ec:1d:7e:11:09:f1:fa:4b:d3:48:5a:4b:ca:2a:2f:
88:f3:a3:4b:ae:c5:66:4b:bb:b3:19:71:a5:49:8f:ff:c2:ea:
fd:57:87:62:df:a9:dd:39:3a:35:79:bd:19:3b:fe:2f:a6:a7:
c8:b7:f0:a3:7b:15:bd:0b:ab:b4:67:49:f0:11:8f:dc:a4:3b:
65:f5:b4:09:ba:b1:03:ef:1c:50:63:37:af:8f:26:72:10:e0:
6d:3d:b9:70:23:23:6e:d0:e1:1f:87:29:9a:0f:bf:4b:5f:43:
7b:41:42:8e:9b:e9:e2:d8:c5:df:72:ed:92:2a:4c:5f:71:11:
fe:71:ce:d1:5b:d1:69:53:c3:59:9b:d4:45:d6:8e:67:d2:c1:
34:bc:66:42:6f:21:7a:d4:45:40:ea:1e:19:11:2f:02:77:ec:
5a:c6:1f:d1:8a:47:e0:8b:b7:b3:84:b8:86:ec:9a:ec:8f:15:
1e:6e:bb:0a:4b:2a:d2:27:54:97:88:c5:77:06:6d:94:51:f4:
2e:f5:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:28 2025 by rpki-client