Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/31Tgo6hkUgGEDxpcJDek08Avr_U.roa
File: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (raw, json)
Hash identifier: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=
Subject key identifier: DF:54:E0:A3:A8:64:52:01:84:0F:1A:5C:24:37:A4:D3:C0:2F:AF:F5
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0194252138DA406246EB383E3126CA988491
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/31Tgo6hkUgGEDxpcJDek08Avr_U.roa
Signing time: Thu 02 Jan 2025 03:48:41 +0000
ROA not before: Thu 02 Jan 2025 03:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44752
IP address blocks: 2a04:a684::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:38:da:40:62:46:eb:38:3e:31:26:ca:98:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 2 03:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df54e0a3a8645201840f1a5c2437a4d3c02faff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:df:ab:2e:d9:f1:c6:8e:69:ff:92:e4:0d:
ef:bf:f2:7c:10:0a:bd:9e:81:5f:c7:0a:ba:e6:88:
80:bc:6f:5a:a1:ca:f8:0f:0c:78:d5:58:a4:11:29:
8a:ff:60:4d:de:9b:73:66:e1:24:ce:28:72:2e:f4:
f0:fb:8e:a6:84:f0:0d:ef:0e:47:c3:61:b0:c8:6e:
9a:37:01:54:50:85:00:0d:ac:a0:0d:d7:d1:df:e4:
2e:23:bf:a9:84:b4:a7:72:e8:f1:4a:55:2d:75:71:
e7:4b:0f:5b:ca:ef:a3:30:37:9f:1f:e7:75:d4:6a:
a2:dc:d2:fc:7b:ef:a7:ed:54:da:41:f7:33:f7:54:
4d:16:4e:4d:e5:8f:12:22:ce:3c:7f:65:89:f2:a9:
b9:32:b5:8f:dd:93:ac:d8:32:14:72:f5:e6:40:ec:
da:de:61:38:05:a0:59:9c:42:7d:e2:c5:19:18:bb:
86:5e:61:a6:a3:d6:a3:e9:2b:49:bd:2a:e1:8a:27:
38:f8:e0:22:34:9a:01:3a:38:3d:a7:c9:fe:07:e5:
b0:17:6b:1c:ce:b7:41:4d:f3:4a:4b:c7:62:a8:37:
3f:f8:6d:b7:86:fd:6b:83:02:11:8b:12:26:a3:a6:
55:ce:48:2d:d6:e4:e6:be:40:69:3a:73:86:6b:e3:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:E0:A3:A8:64:52:01:84:0F:1A:5C:24:37:A4:D3:C0:2F:AF:F5
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/31Tgo6hkUgGEDxpcJDek08Avr_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a684::/30
Signature Algorithm: sha256WithRSAEncryption
10:0f:cc:ef:cb:d4:b8:84:93:de:6f:6d:0a:75:a8:94:3a:80:
66:34:5c:c4:c4:8c:d7:9e:31:ec:94:0e:59:1a:f4:4d:78:1d:
ff:d5:62:de:06:33:df:2f:5e:ee:0d:07:a3:42:39:11:8a:ef:
7a:63:10:fd:13:85:c6:35:96:e3:6d:17:cf:03:d0:93:31:0c:
58:5c:86:f7:ff:15:8a:5a:f6:26:71:da:39:92:02:e6:10:74:
a6:d8:0e:09:07:b5:81:3b:b5:b6:2c:32:07:7e:6d:20:dc:68:
81:7b:0c:cf:cb:02:4d:05:0a:3c:d7:61:67:69:85:54:61:7b:
e0:ac:ac:c3:65:39:1f:a4:18:47:df:9e:1d:9b:c5:44:7b:a0:
43:1c:e2:bc:9c:8f:a2:39:03:92:5e:05:60:91:eb:2b:97:6b:
3a:2c:1d:c5:14:67:5f:58:76:32:3f:01:58:a6:48:81:5d:9e:
f8:e4:d4:bf:03:f9:98:e2:44:da:a1:88:ff:ae:3a:8b:3b:84:
84:9b:fa:7e:37:fa:cb:73:e1:27:3f:5a:4e:31:d1:00:33:21:
85:a8:da:ce:c3:97:2c:37:e2:27:29:85:15:d8:0d:09:da:a5:
5e:d5:75:f6:2b:6e:34:82:7c:79:2a:c3:62:9e:14:e9:69:f7:
ee:54:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:24 2025 by rpki-client