Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/D6utyj3K9SAqxS4dkUeVkfs8Xro.roa
File: D6utyj3K9SAqxS4dkUeVkfs8Xro.roa (raw, json)
Hash identifier: +jkCENy17WpGrNyETa8EimNqsX35G7KW6Zs2d5w62eM=
Subject key identifier: 0F:AB:AD:CA:3D:CA:F5:20:2A:C5:2E:1D:91:47:95:91:FB:3C:5E:BA
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 018F9B549C2508FF565F4AB591025CDFA4CA
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/D6utyj3K9SAqxS4dkUeVkfs8Xro.roa
Signing time: Tue 21 May 2024 13:26:04 +0000
ROA not before: Tue 21 May 2024 13:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38949
IP address blocks: 2a02:c80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:54:9c:25:08:ff:56:5f:4a:b5:91:02:5c:df:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: May 21 13:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fabadca3dcaf5202ac52e1d91479591fb3c5eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:54:16:b5:e6:b8:25:b7:01:73:33:c8:1d:
2b:54:42:16:c9:ef:dc:df:47:c6:3a:29:e5:18:a2:
8a:ea:f3:78:ee:fb:a7:c2:04:b0:94:3c:e3:d6:b8:
5f:1b:c1:ef:d0:01:53:6a:50:0c:fc:6f:90:07:52:
f4:35:f6:2c:d9:43:51:da:43:bd:d9:4d:90:f5:26:
e1:44:6f:59:e7:a2:40:d7:0f:f6:b7:ae:38:16:f8:
c4:9b:65:22:13:36:89:23:17:5f:89:3e:a5:1f:1e:
66:57:64:ae:ca:62:4a:af:e7:d4:cc:fc:fc:4e:02:
a0:b8:fd:af:3c:2f:69:83:17:08:61:e5:33:52:a7:
33:9a:8c:6c:1a:9e:b5:d1:da:fb:6a:d3:cc:c8:09:
8b:b4:cb:5b:02:ca:ad:f3:55:ff:f3:84:be:70:f9:
cc:06:9d:ec:65:92:03:d7:b5:59:f1:71:0b:b8:7b:
5b:83:73:94:a7:02:70:5f:0e:1c:e9:9a:43:94:8e:
db:e5:1b:f8:2c:0a:02:d4:17:f8:65:56:2d:99:9a:
ce:96:68:b4:96:b5:41:ef:bb:28:c7:3c:80:56:fc:
74:ed:01:7d:c9:61:d3:22:5d:03:e8:ea:f4:c9:70:
f7:67:43:aa:6c:e0:33:b8:ff:7f:45:00:f9:25:8c:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:AD:CA:3D:CA:F5:20:2A:C5:2E:1D:91:47:95:91:FB:3C:5E:BA
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/D6utyj3K9SAqxS4dkUeVkfs8Xro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c80::/32
Signature Algorithm: sha256WithRSAEncryption
3a:14:5e:21:c9:ff:ff:75:2c:43:27:ab:c2:f0:5d:3f:fb:81:
4c:6e:c1:8b:6d:77:88:c0:96:7f:7d:d6:ea:3e:0b:fd:e1:54:
84:46:70:20:7d:98:25:56:a6:68:36:2c:6a:ec:78:13:6d:0c:
11:9e:d4:d5:df:28:6f:fc:64:52:ae:c2:a8:ac:92:0c:e9:e9:
57:58:b7:ec:9c:cd:6d:11:9c:33:4b:ae:db:be:82:74:62:47:
81:59:0e:4e:ca:a3:e3:a6:d7:d5:98:6b:1e:f5:1f:d6:dc:33:
f0:f3:a4:ea:e7:64:f4:84:6c:a1:60:06:b2:5b:ae:03:32:cb:
08:dd:4d:a2:3f:7e:c1:f5:57:0a:dd:44:1e:ee:71:c6:59:93:
68:b3:b3:5b:7f:88:a8:65:83:8a:6d:70:2e:49:0f:4d:56:b6:
26:cf:db:d5:ff:bd:95:db:a4:06:6d:cc:6e:32:bd:5f:0e:21:
6f:cd:e1:d3:61:2e:3f:54:7d:1e:e6:6c:a3:3f:e4:b8:bf:47:
88:ac:bb:38:35:2e:27:2d:0f:f1:4d:6b:64:8d:c1:53:31:82:
2b:56:37:e3:aa:5e:e5:97:1c:98:e6:3b:9f:0d:ca:5f:29:13:
41:9f:fe:11:9b:03:d3:55:83:50:ca:88:43:a0:e4:84:41:7b:
98:8d:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:44 2025 by rpki-client