Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa
File: DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa (raw, json)
Hash identifier: 0vKa1p+Btf2J4Hc1AcLpA50JbzMhVeF3FjwclweUf0I=
Subject key identifier: 0C:8B:0C:EE:A3:86:23:9F:D9:8A:D8:2B:6D:63:FD:A2:FC:92:FB:C4
Certificate issuer: /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial: 018F441E71BAAC2B9A9D62D495CA12E99C88
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa
Signing time: Sat 04 May 2024 14:59:56 +0000
ROA not before: Sat 04 May 2024 14:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205028
IP address blocks: 2a11:a600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:1e:71:ba:ac:2b:9a:9d:62:d4:95:ca:12:e9:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
Validity
Not Before: May 4 14:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c8b0ceea386239fd98ad82b6d63fda2fc92fbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:c4:e2:55:9c:93:81:ca:69:ef:38:7e:05:
78:2f:84:3f:a3:f7:d6:21:29:dc:01:ea:3f:f9:9f:
20:ef:cb:aa:5d:02:34:a2:5d:2d:0e:e7:3a:ff:54:
9f:74:49:35:cc:7a:d8:f3:f7:38:4f:c1:4e:3f:8a:
81:9f:9e:75:36:87:aa:cc:77:91:57:15:e3:ce:8b:
77:6b:20:1a:6b:c1:77:0e:7e:df:39:8b:ad:0b:2e:
a5:20:8a:9b:db:0c:d8:8f:e4:d7:88:69:d0:06:69:
4c:26:03:34:7a:6f:ea:25:71:17:e4:94:9f:0f:4e:
2f:30:1e:ba:d8:59:3f:d3:b6:26:a5:b7:9f:8f:4d:
5d:29:0f:6d:d2:52:ca:3c:6e:b7:11:81:a3:fb:40:
09:53:38:39:49:df:61:c7:e9:e6:a3:b2:06:fa:b9:
79:ee:81:34:df:62:c7:ae:b1:4e:b1:f5:af:55:07:
d8:6f:cd:68:a2:b6:aa:dc:f8:17:f3:33:eb:55:2d:
d3:0e:1b:d2:69:90:93:3d:41:6f:56:2f:fe:81:7d:
b2:77:16:2c:6e:b9:21:9b:e7:8c:9c:4c:fd:0d:26:
7b:1f:7a:6d:76:8d:94:5d:a7:ce:93:22:12:16:26:
aa:21:82:cb:70:72:20:24:06:2b:f8:7b:c0:e1:cc:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:0C:EE:A3:86:23:9F:D9:8A:D8:2B:6D:63:FD:A2:FC:92:FB:C4
X509v3 Authority Key Identifier:
keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/DIsM7qOGI5_ZitgrbWP9ovyS-8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a600::/32
Signature Algorithm: sha256WithRSAEncryption
83:20:5b:ae:89:1f:ab:9a:f3:a1:a5:ac:23:01:62:a1:ae:af:
d0:50:0e:cb:f4:48:92:44:43:61:5a:6d:23:eb:d6:32:cb:35:
36:00:f8:83:b8:98:81:9c:66:02:6c:f8:2c:d2:d7:d8:70:cf:
13:97:33:ea:d8:85:de:bc:e9:40:7e:7a:f3:62:21:c0:68:b4:
73:b3:20:cb:6b:c8:b6:d4:d6:3c:66:96:e3:13:32:a7:ff:20:
18:ef:1b:6a:ea:2a:ea:42:21:bb:d9:12:07:57:0a:16:7f:ee:
04:51:40:00:a4:81:6f:e4:e1:54:34:09:8f:a4:b0:3a:75:10:
5a:66:3c:fc:2d:87:77:b8:f2:53:ea:f9:77:5d:4c:f4:4f:55:
58:09:21:92:2b:fb:bb:90:f9:ea:cb:0b:9d:cd:04:0c:c6:5c:
69:a0:2b:25:bd:b4:4d:a1:1d:bc:9b:08:96:a4:08:1e:1f:19:
65:55:d6:01:19:96:88:1c:e1:8c:2a:5d:86:75:39:af:9b:41:
0d:8d:f0:18:df:b9:9b:c7:aa:17:04:5b:94:9b:d7:6c:f6:68:
dc:25:f1:81:44:7b:88:05:64:92:4c:5b:f8:cd:5f:a7:f1:ca:
a8:8e:ed:46:d4:8a:79:5f:ea:b3:41:f9:ad:07:7a:c3:2c:00:
78:eb:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:04 2025 by rpki-client