Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/R5Y0djQcssCZ701JjQDPk4xfdyk.roa
File: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (raw, json)
Hash identifier: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=
Subject key identifier: 47:96:34:76:34:1C:B2:C0:99:EF:4D:49:8D:00:CF:93:8C:5F:77:29
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0194266BB9E13111B85190EC13CA599525C6
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/R5Y0djQcssCZ701JjQDPk4xfdyk.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215495
IP address blocks: 2001:67c:dec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b9:e1:31:11:b8:51:90:ec:13:ca:59:95:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47963476341cb2c099ef4d498d00cf938c5f7729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:92:3c:b6:2d:3f:99:76:d8:55:31:df:7f:
f3:2b:5d:01:0d:79:3d:6e:a9:ff:bf:5c:86:0d:d4:
37:7c:84:f3:69:e6:61:e1:04:ed:d9:87:5e:d5:ff:
25:a0:2b:d9:de:e7:47:6d:c9:48:ef:86:35:77:3a:
42:64:e3:15:07:09:5e:15:f4:f7:27:a8:65:51:ba:
f1:b6:42:5f:3b:e3:92:c8:34:40:8b:ab:92:0c:8f:
e5:0d:ff:2d:96:ac:22:0c:1d:9f:2e:66:06:71:0e:
7b:6e:b9:fb:2e:09:ca:06:ad:60:1f:96:81:ce:12:
6a:a7:c8:93:e9:77:07:dd:16:24:73:24:a3:fa:08:
0f:b6:08:a1:c2:91:d0:06:a8:b6:83:6e:b4:2e:5b:
22:58:73:25:f0:21:45:56:b4:e3:9b:d5:f8:e8:f0:
61:42:7b:23:5b:a5:d7:9d:12:6e:eb:e8:4c:6d:71:
cf:b8:fa:88:2a:5e:76:7a:43:b5:db:a0:34:fc:33:
3c:15:26:5a:77:4c:c3:15:5c:da:d9:9b:39:1b:b0:
a1:f8:ef:fd:3d:a0:6c:9d:9f:81:50:66:e0:e8:ef:
f2:46:5e:3d:a8:11:12:00:28:47:38:f8:cc:15:b0:
71:f2:7d:5d:a5:55:28:44:ed:37:aa:0b:2d:a3:19:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:96:34:76:34:1C:B2:C0:99:EF:4D:49:8D:00:CF:93:8C:5F:77:29
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/R5Y0djQcssCZ701JjQDPk4xfdyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dec::/48
Signature Algorithm: sha256WithRSAEncryption
69:24:ba:75:6e:06:98:9f:c4:c9:58:1d:6c:a6:fa:95:d0:1e:
de:0e:53:70:47:17:ab:53:2c:d6:50:c2:e8:7d:28:ab:fb:0f:
14:34:21:bb:ce:4d:cb:16:98:e1:41:b7:22:39:e6:07:6e:37:
f4:fe:e1:3e:c8:08:db:b5:0b:4a:a7:f1:30:80:ca:05:a8:48:
8f:42:8a:9e:1b:76:5f:91:b9:41:de:61:c1:39:87:0c:32:07:
49:14:a1:12:79:89:f9:08:ec:cc:52:c2:3e:60:98:d1:36:a9:
23:ae:59:fa:b1:c8:a2:f7:7b:7d:b8:55:c0:28:c4:ef:a2:ea:
fb:af:4a:e3:55:e4:a2:92:33:48:cf:d4:07:c5:92:27:65:62:
46:48:0f:a0:0f:78:30:29:c2:a9:2b:42:9f:b3:0e:fa:ff:10:
b3:86:de:cd:bc:2c:1d:bd:b1:3f:31:09:7b:6b:63:8d:3e:d8:
4b:11:7d:5f:a1:1c:e1:27:61:3b:57:00:d2:98:bb:bf:90:a8:
a2:32:15:78:ab:d9:6b:18:25:81:59:99:19:5c:fd:48:6a:86:
f6:22:e3:ac:7d:e5:18:8f:1b:45:05:34:88:61:62:06:ce:6b:
eb:20:45:76:12:df:d7:0b:c2:24:05:bf:e9:90:10:c6:b1:79:
eb:7d:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:58:51 2025 by rpki-client