Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/T_cZrw-UGTlWP2ULxdLpSKX6goI.roa
File: T_cZrw-UGTlWP2ULxdLpSKX6goI.roa (raw, json)
Hash identifier: rSBTg3iLeaSdoGoI3npdkmaNIUU3TACDuXErAC7qRNw=
Subject key identifier: 4F:F7:19:AF:0F:94:19:39:56:3F:65:0B:C5:D2:E9:48:A5:FA:82:82
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427463810919C2CAE33733CD7247598E0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/T_cZrw-UGTlWP2ULxdLpSKX6goI.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213262
IP address blocks: 2a0d:2580::/40 maxlen: 48
2a0d:2580::/48 maxlen: 48
2a0d:2580:1000::/36 maxlen: 48
2a0d:2580:a000::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:38:10:91:9c:2c:ae:33:73:3c:d7:24:75:98:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ff719af0f941939563f650bc5d2e948a5fa8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:18:24:bf:4f:13:9a:de:e4:51:4e:9d:3c:
53:7b:31:b3:2b:46:41:1c:7b:cb:01:a4:85:92:b7:
cf:a3:3a:75:8f:df:35:fd:e9:3e:cf:e9:e3:a4:26:
a2:aa:2d:07:db:be:3f:8f:74:96:08:af:f9:69:86:
80:65:01:92:53:55:fe:e2:a0:f2:1b:57:64:92:3a:
d6:30:88:c6:14:08:98:99:db:2d:f0:da:99:f6:97:
8b:ad:c4:81:e7:df:b7:d4:ff:10:2e:ff:f9:ae:fb:
35:79:61:40:db:e0:07:62:df:01:e2:b7:b8:94:fa:
66:d6:47:10:a2:34:c8:3c:8b:54:32:c7:53:b4:1d:
d8:a2:1e:85:08:87:27:62:10:1e:33:7b:82:48:f0:
13:92:24:55:69:cd:f8:65:71:1f:11:55:82:67:95:
21:54:fc:4b:e8:bd:d4:a1:08:9c:ef:4a:ce:a5:f8:
44:fb:ae:df:5d:08:b0:f3:24:60:ed:7a:66:89:01:
bd:d0:03:a6:19:19:b2:86:ba:0d:bd:b3:a5:a3:5a:
62:5a:42:b4:05:e0:e1:80:a5:b2:e6:3a:ae:4a:f6:
7a:01:29:9e:d8:19:12:d3:86:d7:3d:5e:82:36:c7:
83:ee:53:c9:2a:2a:17:3e:1b:41:d8:8c:86:ed:ed:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:19:AF:0F:94:19:39:56:3F:65:0B:C5:D2:E9:48:A5:FA:82:82
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/T_cZrw-UGTlWP2ULxdLpSKX6goI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2580::/40
2a0d:2580:1000::/36
2a0d:2580:a000::/37
Signature Algorithm: sha256WithRSAEncryption
25:42:9b:49:cc:c3:d2:e6:6f:23:96:62:58:38:89:7a:a4:81:
7f:77:36:44:66:e3:9a:41:ad:8f:80:78:f8:ac:8a:31:fa:d9:
18:b3:d5:a2:7c:2e:43:e0:e7:99:32:f7:1c:d5:d1:17:90:33:
e2:04:2f:d8:79:2f:2d:be:77:0f:7e:4a:ce:0b:88:83:1a:c4:
3d:c6:80:07:03:00:12:ee:fe:a6:53:3b:d4:ef:1e:05:ae:2a:
fc:b8:db:5d:ea:0b:a1:51:2a:f9:f5:f6:17:2c:a8:90:68:7f:
18:3e:9c:54:98:5a:45:a0:67:48:fa:59:8b:ab:e0:79:a2:0f:
bf:3c:b0:f9:e0:25:aa:75:8e:20:48:dd:5a:97:8f:bc:e8:cf:
17:81:9f:ab:0c:56:37:75:4b:3c:5b:b6:1b:1b:93:c2:60:1a:
fa:dc:03:52:b1:6f:6e:5d:1c:5c:5e:77:47:42:44:6b:7e:84:
93:a0:f7:df:cf:0a:8c:f5:1a:3c:fc:4e:5f:f3:78:53:f2:16:
b1:ac:68:b1:a3:20:41:6f:20:50:e6:8d:27:b9:a7:f0:86:a2:
7a:f4:37:39:f4:2b:52:db:be:9d:06:cd:10:69:fe:51:45:11:
22:36:33:3a:dd:2a:9a:de:70:85:96:4e:a8:0b:e1:c3:68:25:
eb:79:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:50 2025 by rpki-client