Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fdjq6aEZ6kd7DciK7Sgt4UqQMJE.roa
File: fdjq6aEZ6kd7DciK7Sgt4UqQMJE.roa (raw, json)
Hash identifier: emEfw6TwF1l/5DBgUz6HJD1Mcz4GJk0muuxgGMUi8zg=
Subject key identifier: 7D:D8:EA:E9:A1:19:EA:47:7B:0D:C8:8A:ED:28:2D:E1:4A:90:30:91
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018F4D463150AB472FD30A7916E6C6BBD647
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fdjq6aEZ6kd7DciK7Sgt4UqQMJE.roa
Signing time: Mon 06 May 2024 09:39:56 +0000
ROA not before: Mon 06 May 2024 09:39:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212786
IP address blocks: 2a09:e980::/29 maxlen: 29
2a0e:2b00::/29 maxlen: 29
2a10:14c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:46:31:50:ab:47:2f:d3:0a:79:16:e6:c6:bb:d6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: May 6 09:39:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dd8eae9a119ea477b0dc88aed282de14a903091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:29:cd:7e:d7:0f:e3:33:29:99:ae:15:6e:
a5:ad:42:74:a2:94:19:41:5d:a4:2a:7c:d0:8e:6d:
a0:3d:59:2b:ff:90:2f:0d:84:3f:01:78:3e:cd:5a:
00:6e:67:99:d3:c1:ce:83:04:f6:b2:b4:9d:44:00:
a3:a2:97:c1:ae:a4:21:7d:16:d0:ec:e1:d3:39:84:
6a:09:62:ea:6e:5f:2c:dd:56:03:02:38:21:de:04:
3c:90:3e:4a:40:2a:cb:79:c0:e8:dc:06:0b:ef:dc:
8d:ed:12:02:25:e0:8d:de:16:d2:35:06:57:fc:cf:
88:52:da:64:82:6c:22:8c:6d:54:bf:ea:f7:fc:d2:
e6:d9:7c:c0:45:d4:f5:7e:5a:19:ef:56:28:40:7c:
20:f9:e5:44:7c:c6:0c:50:10:87:a8:85:ba:28:be:
ae:7e:09:87:ec:ae:12:71:5e:2d:5b:9e:50:82:31:
61:1c:1d:63:2f:a4:04:a8:86:8a:9f:61:07:d2:9c:
89:c8:7c:15:c0:30:89:49:6a:f2:ef:3b:87:f7:74:
4e:06:d6:d4:63:10:f6:78:e5:23:3f:0c:16:eb:0c:
b7:f5:26:15:d1:b6:5f:79:9f:e0:2c:dc:ca:34:e2:
1d:57:b6:f1:58:eb:6a:40:6f:b9:00:ff:ea:42:d9:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:EA:E9:A1:19:EA:47:7B:0D:C8:8A:ED:28:2D:E1:4A:90:30:91
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/fdjq6aEZ6kd7DciK7Sgt4UqQMJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e980::/29
2a0e:2b00::/29
2a10:14c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:4b:ae:01:ee:e5:0f:b0:29:82:b7:ec:26:33:ce:79:ab:45:
23:88:dd:da:98:f9:bd:02:de:77:84:f1:05:3c:95:3f:26:92:
10:f5:0c:c8:22:fb:bc:d3:4a:9b:4d:8a:85:2a:c1:b3:01:13:
d0:3d:f3:09:95:bc:be:58:2d:c2:90:a0:f5:dd:36:7f:e3:dd:
e8:f8:53:89:9c:b9:27:9d:75:82:4b:79:bc:33:df:9f:10:48:
f3:80:d8:06:94:a8:f2:a2:5f:59:82:55:31:f4:54:0e:21:96:
39:57:21:f1:71:fb:bf:dc:77:13:49:bf:31:5c:1e:52:8b:69:
86:6d:4c:28:0d:ab:3a:17:14:fb:ef:cb:3a:87:38:20:d8:36:
9f:79:fa:4d:e4:bd:f1:5d:fd:2a:f4:b7:18:cd:64:8e:ce:3b:
7e:db:49:c9:a1:bb:8b:90:d1:93:7b:49:c2:f4:be:e8:53:d3:
bd:2e:a2:3a:04:96:32:cf:3a:8c:38:b5:1d:3f:04:ca:c8:c9:
19:a9:03:33:20:b2:c2:66:46:3a:a7:1b:dc:65:a7:16:bc:4f:
02:49:8b:b7:ef:16:04:0b:54:b2:98:53:9b:29:79:a9:0e:db:
13:76:b5:a7:36:89:40:75:e6:f4:f2:a3:aa:49:0a:f3:b4:7e:
89:6b:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:13 2025 by rpki-client