Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vXB2CSOpLu5YCagKwPCgx0qQAy4.roa
File: vXB2CSOpLu5YCagKwPCgx0qQAy4.roa (raw, json)
Hash identifier: MdpH62wl57aHODz4hVBa/Wbx/0k7xjws01Xa7PDYJwM=
Subject key identifier: BD:70:76:09:23:A9:2E:EE:58:09:A8:0A:C0:F0:A0:C7:4A:90:03:2E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE65E809C9A1E9605F81B7610C6BB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vXB2CSOpLu5YCagKwPCgx0qQAy4.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207755
IP address blocks: 2a06:e881:7108::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e6:5e:80:9c:9a:1e:96:05:f8:1b:76:10:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd70760923a92eee5809a80ac0f0a0c74a90032e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:84:43:4f:2a:c7:21:53:14:67:25:26:da:
15:fd:f2:be:70:78:5e:11:80:5f:b9:a4:18:3a:d1:
de:7d:f7:8f:d9:bf:fc:d8:0b:0e:37:df:75:dc:9a:
e2:0d:86:2f:d2:f9:1c:ab:84:10:d7:73:75:85:9b:
5c:71:2f:f0:26:50:da:ff:21:cc:1a:86:cc:b8:8e:
7f:ef:f1:ef:70:00:e3:ed:95:50:5f:67:15:f0:1b:
0f:dd:4d:fb:aa:f5:7e:31:62:69:35:3b:c0:5b:0e:
99:26:50:e2:a8:48:85:19:90:8a:3d:e6:c0:ca:52:
dd:65:1f:66:d1:2e:a8:e5:85:3e:a0:44:20:d5:37:
b7:86:90:aa:c1:dc:ed:f9:a4:d3:88:d0:9f:dd:d3:
ee:13:5c:77:bc:3f:a1:61:15:3b:61:5a:43:59:96:
04:a5:f0:e0:9b:0c:84:f0:35:a7:e7:b6:d1:bc:7c:
4a:d2:7e:39:18:fd:49:01:d5:f2:1a:12:3b:f9:1e:
96:56:d9:52:d2:5f:cf:82:8d:05:28:24:2a:8b:7b:
60:e8:38:b1:a9:bb:94:23:a9:11:36:c3:ee:3e:73:
db:1e:e5:23:67:30:57:9b:25:3c:0b:88:20:40:3b:
da:e8:b1:55:5a:5e:ec:26:a6:f0:0f:4f:ac:60:3c:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:76:09:23:A9:2E:EE:58:09:A8:0A:C0:F0:A0:C7:4A:90:03:2E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vXB2CSOpLu5YCagKwPCgx0qQAy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7108::/46
Signature Algorithm: sha256WithRSAEncryption
0f:6b:46:65:97:72:3e:cd:65:01:ae:59:09:c5:10:fc:64:f7:
75:f5:df:9c:a3:56:7b:43:65:7d:85:1a:d2:58:11:81:33:79:
53:56:2f:4a:84:d4:66:77:d9:5c:ed:18:0e:de:7b:8c:f1:d0:
5b:97:02:5d:be:91:d1:dd:bd:7a:73:5a:ef:e8:c2:1c:ee:cf:
54:94:d9:9d:7f:18:29:41:97:73:97:96:2c:17:86:5e:71:0d:
cf:f1:51:a7:cf:30:0a:dd:ba:db:fa:4c:89:65:d4:d1:47:a0:
fa:ad:14:f0:1a:5e:17:ef:62:bc:bb:7f:95:ed:51:33:be:f4:
19:26:8f:fb:d7:ad:d1:12:ef:1d:1d:2e:33:58:37:85:6b:e3:
d6:75:80:b3:60:a0:c5:58:96:67:9d:00:33:84:48:b4:56:e3:
a5:61:ad:5c:e9:21:f3:8c:b5:5e:fe:04:e8:27:9b:d6:ea:62:
c9:88:2c:da:20:54:0b:40:de:ef:67:19:a5:e3:b6:59:43:d1:
ba:02:00:66:60:c3:cc:0e:85:61:bd:8d:91:0c:6a:41:33:3b:
28:95:ea:5f:ac:46:0b:df:06:06:0d:1e:21:0b:e4:2c:8d:b9:
60:6d:85:a2:91:be:70:1f:79:3e:d5:00:16:f5:14:88:70:69:
dd:1c:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:38 2025 by rpki-client