Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa
File: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (raw, json)
Hash identifier: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=
Subject key identifier: 7B:1F:A4:D2:10:58:30:9A:77:5E:DE:B7:B1:B1:47:E1:D9:9A:3E:9D
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019423698C25132D2BE3FD2725B4C2B009F0
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216369
IP address blocks: 2a04:9307:10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8c:25:13:2d:2b:e3:fd:27:25:b4:c2:b0:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1fa4d21058309a775edeb7b1b147e1d99a3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:98:ad:20:b4:04:1a:0c:6d:8b:60:31:ee:
c4:0c:7a:10:0b:e1:91:6b:eb:4e:76:c0:a9:74:15:
9c:e8:cc:fa:0b:d8:12:27:3e:be:94:f9:cf:4b:80:
f5:3c:f5:cc:f1:bf:8a:b1:17:30:3c:3a:cf:6c:5d:
be:b7:e3:74:4e:cf:5a:04:58:b7:29:b5:2d:c3:a1:
7f:ea:a1:91:9a:6f:34:e7:91:39:1c:0b:22:9d:80:
db:d0:01:82:e5:54:bf:01:7f:37:73:68:f1:e4:c2:
69:6c:e8:5c:c5:3d:7f:47:e8:58:50:59:75:1d:8f:
5f:5b:9d:53:c9:21:f9:f6:f7:2c:38:b7:76:4e:59:
5e:8e:50:b8:f7:af:82:fb:5b:c9:8b:45:8e:e0:24:
1a:2c:1c:a8:1d:89:99:90:40:1c:9e:17:26:74:ec:
c5:11:da:43:f2:00:6d:8c:9f:73:a5:1b:f5:91:a6:
64:64:a0:cd:3a:b4:71:a1:d0:49:c8:e3:cc:73:46:
18:14:50:de:32:e1:03:95:2f:3c:10:0a:a9:6c:9b:
97:7f:b2:11:89:9c:7a:da:c4:26:0e:2c:1d:39:0b:
fe:08:2c:d2:41:da:37:9e:46:20:50:5d:46:24:96:
56:bf:d2:13:c7:40:67:83:a1:a2:12:d8:ee:7b:ed:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:A4:D2:10:58:30:9A:77:5E:DE:B7:B1:B1:47:E1:D9:9A:3E:9D
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9307:10::/44
Signature Algorithm: sha256WithRSAEncryption
ad:fc:b0:ab:4c:23:2e:e3:67:29:93:61:c5:a3:f8:0f:d1:88:
97:ee:01:45:da:ea:7c:f1:90:8d:c0:9d:e2:a6:da:f4:40:c7:
5d:0f:b4:fc:f4:55:af:9b:09:b9:23:d5:07:5b:bd:e6:47:62:
e2:a1:b0:ec:c1:c7:18:82:6d:1a:a8:5e:ea:36:7c:d4:cd:a0:
4a:78:a4:39:d0:6d:7b:e2:63:09:34:2d:6a:ad:b9:9b:cc:ca:
88:30:4d:61:df:a2:65:73:ea:f7:c0:32:d9:68:6e:f7:aa:71:
20:c7:1e:fc:76:b6:04:72:b0:2e:cb:b6:85:08:b4:d8:b6:9b:
a5:9b:f4:53:50:d5:c4:aa:3a:32:36:e1:1e:c9:f1:42:25:fc:
cc:08:f2:42:ca:b8:ab:d2:14:05:66:d4:02:3a:7e:11:3a:33:
e2:0b:78:34:df:43:10:52:ae:3e:7d:2f:b4:f0:51:70:0c:dd:
30:88:2e:20:ad:26:e2:eb:f8:6d:3b:f5:d8:72:ff:dd:f2:30:
32:56:61:1e:6a:50:96:a9:bc:a2:f7:6b:72:df:ab:25:91:82:
0d:b4:3d:f7:ec:c2:e4:5b:f1:cf:4a:ee:1e:4f:f6:47:4f:14:
9f:d5:f8:3d:0e:9b:17:8f:dc:a4:b4:e4:e8:92:7c:02:29:39:
64:70:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:20 2025 by rpki-client