Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sP8wz4A6ER2HR5gGpW7TYMUdbso.roa
File: sP8wz4A6ER2HR5gGpW7TYMUdbso.roa (raw, json)
Hash identifier: Fr4twWu/gPUBA6iArCW2JxhqREwmqp3YbiHoCvg5S0Y=
Subject key identifier: B0:FF:30:CF:80:3A:11:1D:87:47:98:06:A5:6E:D3:60:C5:1D:6E:CA
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE8581A6A44D02650662840C36FCB
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sP8wz4A6ER2HR5gGpW7TYMUdbso.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211877
IP address blocks: 2a0e:aa07:e04b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e8:58:1a:6a:44:d0:26:50:66:28:40:c3:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ff30cf803a111d87479806a56ed360c51d6eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:57:60:aa:dc:53:3f:50:ac:fc:f8:23:d7:
66:2a:8d:09:c5:15:84:1e:a6:ab:9d:0b:14:fe:8a:
cf:53:17:65:10:76:66:7d:3f:25:e4:be:0a:66:30:
73:70:42:e2:71:23:71:0c:89:15:8e:c6:ef:36:06:
99:68:5e:09:1b:09:df:6f:49:5e:eb:19:76:5f:63:
04:7e:55:55:c7:6a:f9:58:11:99:6c:f6:47:73:c0:
32:e4:c4:5f:72:4b:b1:90:2f:69:55:b6:91:71:2c:
a9:2f:6a:23:36:9b:2e:f3:d4:1c:7c:bb:1e:64:62:
25:1e:40:4f:59:8e:08:4c:cc:de:f2:d6:bb:9f:36:
f5:f7:a4:88:4c:8b:55:8e:3f:1f:24:09:f9:ab:c4:
21:99:6c:31:77:1e:85:72:c0:d2:a9:be:63:69:1c:
29:75:8c:ad:25:82:53:93:02:46:18:75:a9:47:7b:
2a:5f:0b:67:04:07:7e:0a:e0:a4:73:54:68:d8:a3:
41:62:ee:10:7e:01:f3:a4:d4:26:44:69:74:2d:6b:
c4:a7:95:0d:e9:21:f7:79:f0:32:33:d3:90:6c:d1:
ad:65:6b:3a:7c:62:de:cd:48:56:e4:5a:f6:1d:99:
ef:14:f3:2f:4f:45:fa:0b:9d:1e:96:5b:43:c4:59:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:30:CF:80:3A:11:1D:87:47:98:06:A5:6E:D3:60:C5:1D:6E:CA
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sP8wz4A6ER2HR5gGpW7TYMUdbso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04b::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2f:2e:cf:f2:d7:89:3c:db:ba:50:cd:ef:89:f1:15:62:f3:
5b:eb:e9:4b:c6:ae:f8:d2:26:f9:d5:68:f5:c6:85:4c:e7:d4:
c0:ce:56:bd:8d:a4:4a:bc:7e:2c:a6:43:1c:a1:32:e3:59:0c:
e3:e5:6c:70:65:25:18:04:c1:5f:22:cd:13:c1:42:09:b1:10:
72:ab:b5:36:4e:7d:0b:93:5e:d1:eb:ed:dc:3f:77:94:98:c8:
03:d0:45:1b:d4:3e:9d:61:8a:a7:3d:91:ec:9f:2c:4b:08:fb:
07:38:ea:4c:f3:3c:10:af:f6:1f:bb:12:1b:3f:4a:d4:44:b3:
b3:8f:50:2e:f7:76:14:37:e5:e7:dc:6f:85:d8:aa:88:0b:c0:
43:89:5b:2f:d9:d1:65:ff:f9:f9:5d:24:75:17:5f:ca:b1:4a:
7e:fb:98:fa:1a:4b:e8:9f:72:c0:ce:55:61:8f:9e:db:80:a7:
9a:28:6f:43:6a:11:65:49:66:32:da:f1:e5:88:f4:f5:36:d4:
88:ef:5e:07:78:4d:88:67:0a:5d:ec:7e:b2:f9:a5:e9:5c:7c:
d6:e6:e4:73:56:73:5b:a9:06:02:3d:04:24:2a:65:61:91:85:
66:e1:21:59:d4:57:60:c9:f1:f8:53:25:9c:5f:52:5a:b2:b0:
58:0d:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:01 2025 by rpki-client