Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/flaz1xJzJbLskC85NHwoY-FiH-w.roa
File: flaz1xJzJbLskC85NHwoY-FiH-w.roa (raw, json)
Hash identifier: kp6voCJ3lmIKhRVQ6jvJ7wvjybUbCeOArUGHvdmj2vs=
Subject key identifier: 7E:56:B3:D7:12:73:25:B2:EC:90:2F:39:34:7C:28:63:E1:62:1F:EC
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDD5D35C3DD2ACAC8F58FC7CB79C2
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/flaz1xJzJbLskC85NHwoY-FiH-w.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204003
IP address blocks: 2a06:e881:5800::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dd:5d:35:c3:dd:2a:ca:c8:f5:8f:c7:cb:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e56b3d7127325b2ec902f39347c2863e1621fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:ec:a6:9c:0f:7c:05:4f:06:79:b2:7f:5f:
1b:20:30:a9:20:b2:16:6a:a6:f6:e5:1c:b0:4c:fa:
02:9e:c0:35:d3:62:86:13:77:d4:df:56:87:28:51:
71:59:8c:8b:00:d2:de:77:94:70:31:a7:17:49:f4:
4a:e5:37:77:92:d1:3d:bf:e1:f2:77:c3:6e:f2:ac:
84:c2:0c:b2:7b:6f:7c:26:8f:55:a6:48:7b:53:7c:
9e:23:0c:3c:67:f5:d2:5c:ab:3e:4d:88:8d:e1:f7:
e8:fe:1c:36:fa:bc:2e:86:ad:dd:32:72:d1:f8:89:
94:62:fd:c8:19:88:e0:dd:4b:f4:23:bd:98:66:9e:
6c:dc:eb:d6:32:8d:e6:18:3d:b4:9a:2b:3e:98:bb:
f7:60:2d:52:28:44:70:5d:a8:b6:1b:2a:ae:fd:23:
99:c2:64:e2:66:91:5d:aa:38:8f:7b:46:96:f1:97:
a1:26:b1:a8:b5:d6:19:3c:b7:7e:9e:b5:f4:16:dd:
62:d2:b6:6d:8e:39:d6:e7:46:2e:bf:fa:bb:62:1a:
30:e8:97:6b:28:32:66:5a:d7:fd:7b:53:94:82:21:
4b:27:5f:22:20:8a:a1:5b:8e:c7:dc:e2:ff:67:58:
ef:4b:31:c0:d3:fc:de:7e:26:fb:c8:d4:95:91:3a:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:B3:D7:12:73:25:B2:EC:90:2F:39:34:7C:28:63:E1:62:1F:EC
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/flaz1xJzJbLskC85NHwoY-FiH-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5800::/44
Signature Algorithm: sha256WithRSAEncryption
0a:11:45:b8:84:e4:fd:12:a8:45:1d:d4:57:29:25:6d:39:6f:
42:20:00:f7:29:fc:dd:bf:93:44:16:16:5e:ae:8d:db:8e:a9:
09:7a:9d:09:7a:b7:b8:fc:ec:bf:ca:b9:01:47:f2:67:b3:2b:
66:40:59:e9:7e:a0:d8:3d:45:71:ae:e2:ef:68:cc:8b:a2:a2:
51:85:90:78:33:da:0f:13:77:f5:eb:66:83:40:67:ff:c5:26:
92:da:57:46:0f:e5:d9:e9:32:56:77:d0:02:13:09:af:9f:83:
71:e4:89:61:91:00:bc:12:63:a1:9a:53:fb:d6:41:91:f6:61:
12:ac:ac:82:80:d7:af:a4:4d:05:9c:8f:c0:82:be:af:db:f8:
ee:d3:34:71:01:75:0d:7f:9e:a0:fa:b1:ef:04:7c:b3:1c:a4:
47:1e:ff:c6:c6:7a:8b:36:d3:b2:43:33:fa:23:7c:78:55:bd:
c6:79:0e:6c:14:71:0f:57:40:49:b7:0d:91:e7:6f:c8:42:d4:
c9:12:4f:e6:00:7c:09:b6:70:fe:8c:93:3f:49:20:26:e8:0e:
5a:a2:f0:69:40:0c:7a:47:a1:8e:98:d7:06:b9:25:74:83:87:
96:a5:b0:bc:63:5f:ec:2b:a2:c4:07:83:d8:51:e2:bc:81:ca:
2a:0b:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:26 2025 by rpki-client