Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa
File: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (raw, json)
Hash identifier: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=
Subject key identifier: C3:F0:FD:CE:6D:06:E9:DF:B1:80:B6:19:0E:4F:FA:93:41:5D:A3:46
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 019427B367D3D185C413E3554CA03D03EDA8
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa
Signing time: Thu 02 Jan 2025 15:47:36 +0000
ROA not before: Thu 02 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214390
IP address blocks: 2a0f:3400:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:67:d3:d1:85:c4:13:e3:55:4c:a0:3d:03:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Jan 2 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3f0fdce6d06e9dfb180b6190e4ffa93415da346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:57:d7:92:82:6e:c0:9d:db:8f:29:ef:7a:
7e:1f:be:0a:78:3e:e6:d5:77:0f:6f:55:30:1d:97:
03:a1:bc:d3:a5:d7:01:69:0e:1f:50:4e:17:8e:69:
93:94:36:03:22:8b:03:72:78:c4:f2:9b:20:94:d0:
c7:3f:e7:27:93:e9:2c:7e:6f:3b:bf:07:17:e2:26:
84:5a:39:3e:bf:7b:8d:85:a8:d2:59:28:48:ac:de:
17:6d:cc:ea:16:aa:3c:52:fc:62:d1:ac:ab:c3:25:
ac:b6:03:06:c8:a1:95:48:22:d3:b8:b0:8b:80:b3:
5c:c4:8b:86:3b:46:b6:cf:bc:99:47:e6:79:a6:06:
b2:ee:35:65:77:69:c6:6f:c5:cb:42:4e:10:bc:66:
a5:aa:d7:a3:26:d6:36:61:b2:03:8a:5b:55:6a:3e:
07:ba:64:8c:11:72:da:d4:29:7b:73:fd:c6:d8:d7:
35:75:2f:8e:13:29:3e:00:58:0d:e7:c6:72:8c:da:
55:3c:e4:66:a3:a0:8a:bc:3e:d7:18:08:a3:71:12:
c4:c0:f3:df:4d:85:f2:82:11:b9:30:d4:06:9a:a0:
4d:78:0d:ec:0f:5f:76:95:3b:49:69:15:28:67:18:
a4:85:bf:1d:72:2e:fc:3c:7e:7d:17:aa:b8:a0:23:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:FD:CE:6D:06:E9:DF:B1:80:B6:19:0E:4F:FA:93:41:5D:A3:46
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3400:100::/40
Signature Algorithm: sha256WithRSAEncryption
50:17:4e:b2:71:36:92:5d:5a:f2:6a:46:b5:d9:b7:31:49:23:
55:b2:eb:d2:46:b3:0d:c4:5f:ac:06:3f:fd:2b:29:0e:f4:91:
32:59:63:15:95:01:58:8e:c8:53:f8:bf:51:e8:41:b7:65:6f:
b8:99:a5:95:95:45:57:a2:2f:8d:04:d9:29:d5:30:83:db:65:
9e:3d:2c:95:0d:96:8d:b7:70:66:f0:71:ea:ce:86:b7:ea:99:
2a:df:27:e7:20:cc:ab:5f:e0:2e:68:51:0b:af:4e:9c:10:2a:
ff:6b:29:38:55:c0:9d:c3:1b:ee:52:80:df:51:97:1d:a9:b1:
78:c5:37:24:c2:49:58:2c:86:c7:bc:f1:0d:7e:69:60:84:9d:
13:fe:15:2b:bf:f2:1e:96:94:1e:52:a8:08:b6:f9:0c:16:12:
df:23:c2:c1:c6:c1:51:7e:d4:37:35:fb:fe:e8:c3:7d:9d:b3:
25:e0:1f:47:89:92:20:8d:96:dc:b0:6b:c9:84:b1:6c:2c:a3:
5a:8d:37:4e:21:bd:2e:11:87:d4:7c:71:d6:ed:6d:0c:5c:b2:
fe:47:e2:bd:7a:67:3d:b1:30:c9:8c:22:9a:d9:b3:a2:f6:c6:
4b:f7:d4:69:7e:5e:30:4f:6f:ae:5e:d1:de:0b:2f:6e:46:ac:
46:eb:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:18 2025 by rpki-client