Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa
File: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (raw, json)
Hash identifier: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=
Subject key identifier: 81:7E:62:0D:FD:8A:22:BA:E6:F2:01:FB:C9:6F:8D:3A:52:69:20:35
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271BF7E3653C38D4C01D9588B8690C
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa
Signing time: Thu 02 Jan 2025 17:53:59 +0000
ROA not before: Thu 02 Jan 2025 17:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212008
IP address blocks: 2a0e:46c4:2300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:1b:f7:e3:65:3c:38:d4:c0:1d:95:88:b8:69:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=817e620dfd8a22bae6f201fbc96f8d3a52692035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:5a:8d:41:6a:c0:41:5c:4c:77:68:9c:10:
08:a7:94:31:62:01:54:0a:85:9f:62:95:bd:e8:eb:
f9:ea:56:96:d7:f2:26:8b:2a:e5:44:d9:cc:d4:66:
2f:7a:03:45:14:c5:7d:19:a9:04:a3:52:c8:59:c6:
f6:b0:0c:81:83:ad:f0:6c:5a:71:eb:1e:eb:78:d8:
54:66:4e:28:74:dc:8c:5d:02:82:c8:ab:94:e4:50:
de:55:19:68:78:00:f9:75:b9:8c:84:49:e2:e7:4b:
c8:c0:2e:ca:f7:e7:59:89:76:b9:27:a4:62:4c:13:
da:09:93:0a:c9:88:aa:db:ad:42:2e:79:1b:e8:f2:
f0:7f:e4:cf:d7:5d:d8:58:d7:c3:c4:f6:2c:f2:49:
be:c5:f8:68:83:ad:f3:12:b5:e0:89:b4:79:00:93:
dc:26:57:8f:7f:48:f2:6a:25:d3:81:d8:85:62:ef:
62:f1:2f:5a:c8:f2:43:1d:ea:1e:b4:b0:d1:a5:a7:
e6:d5:6f:77:fa:6e:6e:3b:1a:23:c0:b0:f4:4d:2f:
15:8f:e4:2f:9f:13:1e:15:2d:cf:93:c6:26:6a:47:
c2:47:ba:b3:97:46:b4:95:ac:24:e2:35:b5:f3:2f:
b7:1f:21:e8:cb:ee:39:b2:49:07:c6:a4:46:81:a9:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:62:0D:FD:8A:22:BA:E6:F2:01:FB:C9:6F:8D:3A:52:69:20:35
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2300::/40
Signature Algorithm: sha256WithRSAEncryption
0a:6e:f1:27:0e:bb:73:1c:42:5a:a3:b7:37:a4:c7:51:b2:46:
cd:b3:b8:7b:b5:85:4a:0b:2f:55:cc:eb:af:6d:17:0d:54:a2:
69:35:d0:b3:93:40:aa:18:36:4b:4f:e1:69:2c:49:83:f3:9f:
b8:00:e5:e8:68:59:6c:c3:5c:4e:3e:6a:77:24:6d:f7:07:e4:
d7:9d:9c:c3:12:37:5c:31:cc:63:11:33:9d:8a:ab:93:a2:cb:
8c:93:49:51:83:74:2e:f0:54:ca:79:a3:31:13:50:60:12:90:
6d:5d:01:fb:35:86:24:ab:33:23:b0:85:63:0c:1d:8c:97:44:
f1:34:9e:f3:bd:31:e8:70:1b:ee:03:4d:b4:29:2e:a3:62:b4:
68:6c:0f:3e:c6:41:41:07:0a:73:3a:c3:34:4b:cc:fc:39:f0:
e4:7e:d3:d0:37:d3:2c:62:b2:dd:9e:72:bc:28:3a:2e:82:0c:
48:2c:e9:69:b6:fd:ac:b1:24:49:7e:b0:58:90:de:d4:4a:4e:
4f:9b:1e:54:ca:6f:c6:7f:27:05:01:25:10:3e:f7:ff:2b:30:
2e:28:41:73:75:6f:00:fc:6c:77:39:18:1f:88:17:0e:04:07:
63:45:b8:c1:3f:0f:9a:30:d8:66:9f:f7:41:d9:92:bf:97:77:
01:38:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:42 2025 by rpki-client