Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/pIpJ8fNC27Y24CDWefynJuipkU4.roa
File: pIpJ8fNC27Y24CDWefynJuipkU4.roa (raw, json)
Hash identifier: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=
Subject key identifier: A4:8A:49:F1:F3:42:DB:B6:36:E0:20:D6:79:FC:A7:26:E8:A9:91:4E
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 01942067EA18139A40C55F75F5729FBB306E
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/pIpJ8fNC27Y24CDWefynJuipkU4.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57483
IP address blocks: 2001:678:f5c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ea:18:13:9a:40:c5:5f:75:f5:72:9f:bb:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a48a49f1f342dbb636e020d679fca726e8a9914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:c0:7e:8b:c5:ac:94:b2:67:46:ed:d6:1a:
65:ee:0c:c8:80:08:fa:37:45:96:58:5b:04:ac:e7:
c9:30:64:4d:ed:d7:78:9a:fa:ec:1c:6c:7f:58:d5:
11:d4:ce:60:c9:98:cd:74:fa:85:68:f0:a2:c1:bd:
67:2f:d1:68:f8:bf:58:b6:27:bb:4f:21:e0:ac:d5:
f3:f1:40:5c:73:56:c6:e9:d1:38:94:9f:ef:a9:02:
31:ee:f2:2e:9f:ab:67:87:ff:8a:f9:09:2c:eb:b5:
fd:c8:37:fa:01:40:79:6f:19:86:11:ed:c2:e3:cf:
a2:58:7a:41:1f:52:96:56:9d:63:3b:fd:68:cc:da:
92:e7:dc:00:ff:fc:33:ff:99:8e:c9:35:f7:08:a6:
8e:2b:b2:55:05:d0:2c:54:42:1e:fb:37:d4:aa:95:
4f:24:45:f3:84:f9:35:f3:f6:25:e6:e7:69:28:72:
bf:52:a1:81:d2:b4:dc:3c:dc:5f:2d:e7:3f:c0:a0:
73:3a:b2:3e:e7:7c:d0:7d:55:f6:42:96:13:f2:38:
a6:78:3d:cb:c5:86:97:b2:1f:90:74:7a:4c:4b:61:
14:25:6c:16:9d:fa:c5:de:c1:ef:2b:30:2e:88:95:
ab:45:16:25:c5:a7:b0:e3:c1:8d:a6:5a:ae:8b:83:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:49:F1:F3:42:DB:B6:36:E0:20:D6:79:FC:A7:26:E8:A9:91:4E
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/pIpJ8fNC27Y24CDWefynJuipkU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f5c::/48
Signature Algorithm: sha256WithRSAEncryption
ba:cb:fe:3f:8d:41:51:ac:cd:1a:7a:73:24:f8:06:71:63:f0:
45:b0:c4:57:95:bc:0f:cf:9a:9c:ca:dc:85:6b:3e:aa:48:3d:
71:39:d3:e8:74:6d:60:f2:31:45:6c:bf:3f:44:89:5c:7c:07:
c6:06:b7:07:37:4b:03:14:33:32:da:54:63:4a:4b:ba:fb:02:
8a:8e:f1:32:99:d3:4b:6f:78:9a:70:c7:9f:99:d4:da:8b:5c:
e6:75:9a:42:3d:db:59:97:e9:6a:fe:20:e5:3d:55:7e:25:c2:
8d:20:8a:14:05:f9:e5:0d:fe:7f:ea:93:1c:d4:de:30:9b:a9:
0f:5e:96:8a:3d:73:7a:94:9b:6e:6b:b2:74:75:ee:ae:f3:7b:
1b:b8:c1:67:38:ee:a7:b5:c1:ea:b1:79:87:81:cf:d3:24:60:
7a:21:1f:1a:72:e9:72:87:95:02:cd:1b:16:b9:70:96:55:ae:
4a:e9:3f:cb:ed:01:1e:af:fb:75:1c:39:20:db:ee:6e:46:c8:
55:cd:c8:c3:b6:b8:17:f7:ce:75:bb:eb:e0:17:c7:95:ca:b6:
84:22:14:c8:4e:14:90:ad:95:ef:80:eb:eb:1d:5a:ba:3f:9c:
93:a9:9f:5d:c1:ef:59:6e:26:a6:59:8e:e7:78:9a:4d:f0:67:
dd:89:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:31 2025 by rpki-client