Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D2gzabnohRmXUwYpTFRwAJEplHM.roa
File: D2gzabnohRmXUwYpTFRwAJEplHM.roa (raw, json)
Hash identifier: /mYBU+5YS5RxljeBXOgh1kckBkv+IL7IPWLmQwjibgc=
Subject key identifier: 0F:68:33:69:B9:E8:85:19:97:53:06:29:4C:54:70:00:91:29:94:73
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE939FC6E4F4943D91C6D46F6B1CB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D2gzabnohRmXUwYpTFRwAJEplHM.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209864
IP address blocks: 2a06:e881:5500::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e9:39:fc:6e:4f:49:43:d9:1c:6d:46:f6:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f683369b9e88519975306294c54700091299473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:ff:17:e7:f5:0a:18:c7:31:c5:55:a8:84:
8f:80:46:07:fb:18:c7:bb:67:95:a0:ee:14:c1:29:
eb:66:10:5b:a5:f9:2d:f9:08:3d:ac:c4:63:5b:c9:
df:d8:31:e0:5e:8c:ea:2e:1d:d1:b0:3c:78:21:39:
62:9d:aa:9f:88:26:06:a8:a4:a6:4a:f6:92:d1:15:
61:fe:26:6c:b3:f7:9f:73:55:ef:fb:54:6c:1e:8f:
2b:09:fb:af:e1:be:24:3a:2b:ce:36:dd:a3:a1:b3:
64:b4:e5:04:13:79:3c:b9:3b:92:22:7d:cd:d5:87:
9d:dc:06:5a:7a:95:ad:91:d7:f9:b1:6c:b5:cf:e8:
04:ea:53:4e:24:19:c8:79:b4:c8:5c:14:c3:7f:8a:
d6:5e:d7:28:d2:f2:b5:57:9d:05:95:2c:14:04:8d:
47:d6:16:ff:ee:30:8c:bf:c5:d8:4f:25:79:63:92:
23:9d:09:67:6d:1f:ab:b3:69:e9:f0:81:1a:58:f2:
be:62:3b:bd:18:52:45:4f:a2:cf:6f:44:fb:63:26:
b5:8f:de:35:98:25:b6:25:32:e1:00:29:16:3e:7d:
3e:7d:5e:91:01:ce:82:dc:2d:5c:92:95:72:b1:df:
0c:a3:07:78:0a:5d:51:56:f1:36:a2:77:ea:6a:82:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:33:69:B9:E8:85:19:97:53:06:29:4C:54:70:00:91:29:94:73
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D2gzabnohRmXUwYpTFRwAJEplHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5500::/44
Signature Algorithm: sha256WithRSAEncryption
61:c2:4d:09:b3:be:b5:a7:09:91:8a:86:45:48:9d:c5:73:93:
0f:b7:7c:5c:cb:be:de:c2:20:bd:5a:5e:27:67:16:ee:9d:22:
a6:09:93:d0:da:41:65:a2:2b:54:d3:ac:e3:d0:53:73:de:43:
f6:1a:7c:84:3f:f8:97:a0:7f:48:bd:3d:49:11:3c:22:da:3f:
2b:71:3f:f7:69:6b:c8:85:53:4a:30:da:c9:01:79:e8:43:66:
14:ab:80:b9:82:fa:49:e3:5b:c6:bd:17:ef:ee:bc:82:d0:6c:
8c:dd:59:bc:0e:8f:a0:77:e1:56:1e:c1:76:63:06:24:26:2c:
4b:77:53:c9:f5:fa:99:04:d2:9a:03:4b:59:e1:fb:7d:45:63:
1b:b9:ab:12:32:30:3d:8f:6b:af:ae:92:50:6c:22:02:c0:b5:
b1:3c:ec:5a:95:01:9d:6b:85:61:a2:79:ce:7c:04:d6:e6:5e:
93:c1:84:15:83:50:ab:30:13:09:94:05:18:f3:46:6b:01:f0:
68:7e:42:f6:2e:3d:0b:2c:4d:bc:df:cc:f4:e9:b7:42:5d:30:
5d:83:3d:d4:5e:56:64:fc:5b:0b:99:f3:2b:3b:42:5c:06:21:
a3:96:40:d8:46:fc:46:81:c3:92:35:eb:7e:cd:eb:26:68:77:
37:c7:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:21 2025 by rpki-client