Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/DYfn4v-d9LSJeRa5vvT-XfYyk70.roa
File: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (raw, json)
Hash identifier: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=
Subject key identifier: 0D:87:E7:E2:FF:9D:F4:B4:89:79:16:B9:BE:F4:FE:5D:F6:32:93:BD
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0194258FCD05D790E4594BD2621E5B95F360
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/DYfn4v-d9LSJeRa5vvT-XfYyk70.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 2a07:6d40::/29 maxlen: 29
2a07:6d40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:05:d7:90:e4:59:4b:d2:62:1e:5b:95:f3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d87e7e2ff9df4b4897916b9bef4fe5df63293bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:f4:05:8b:cc:25:c7:d7:65:79:a0:3f:c5:
45:2a:e9:30:a8:3b:cf:a1:80:a0:06:5f:0b:76:23:
fc:13:c4:13:a4:cb:63:a8:88:12:6d:7f:90:0a:6c:
b9:23:26:32:50:3d:ac:a7:16:0a:73:2b:fb:17:52:
41:cb:b3:d7:7d:a2:b1:85:55:87:08:9d:a5:1f:ef:
e9:f4:5e:3c:70:ac:86:49:73:b9:cb:47:b6:d3:2a:
73:8f:cf:00:93:44:0c:f8:d0:f5:89:f2:d8:ea:0d:
61:da:3a:61:92:76:b0:3c:25:2f:67:3b:78:cc:cb:
5e:6a:cd:5a:aa:55:65:7f:83:92:b1:de:39:97:64:
de:cd:4f:bd:ff:6f:b9:1e:76:8a:e7:91:58:66:be:
8a:7a:03:6f:8a:d4:0a:67:f7:21:9c:56:c7:75:3c:
99:85:12:b4:83:66:28:e8:c0:02:46:e0:59:6d:04:
ee:7f:4b:5c:b3:46:8f:27:64:18:9f:f9:a1:a7:96:
b9:66:a8:ba:27:82:d9:8c:c9:6b:43:e1:68:a3:7c:
2a:b9:0a:6e:21:4c:91:af:2d:83:2e:b6:b6:ca:9e:
8c:fc:9d:b8:99:b5:4a:dc:f1:00:1c:6f:d9:40:42:
b2:70:df:bb:8a:55:60:4b:10:5f:fd:ad:05:66:b8:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:E7:E2:FF:9D:F4:B4:89:79:16:B9:BE:F4:FE:5D:F6:32:93:BD
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/DYfn4v-d9LSJeRa5vvT-XfYyk70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
93:11:64:c6:7f:d5:85:56:9b:94:26:21:55:b7:59:8c:84:e8:
7f:72:04:00:28:97:f0:32:30:09:46:ee:23:42:82:3f:38:73:
0f:47:b6:ce:1e:81:ae:65:48:af:74:f2:3c:85:da:9d:4b:1d:
4a:08:09:b0:29:cf:56:41:fa:04:3d:0f:f5:0c:d8:ef:08:99:
68:59:a8:df:6d:b3:d2:05:41:01:80:42:64:09:fe:2c:d7:f7:
04:ef:6e:2b:5e:64:15:91:7d:4c:ed:a9:f3:57:a4:06:4a:17:
f5:22:6c:3b:3d:0b:67:be:08:5c:0f:11:c2:25:59:4d:86:03:
22:4e:2b:73:5d:a6:4c:71:2a:71:37:bf:c6:9a:24:98:e6:a5:
b0:44:fe:c4:a6:72:fa:60:f2:d0:c9:e2:98:f1:88:09:4d:67:
26:ed:b6:e1:19:a8:aa:f1:c6:df:09:de:d0:b3:55:64:cc:02:
78:a7:f3:6d:00:75:d9:b7:a8:54:bb:aa:ee:79:05:ac:fd:04:
09:e9:02:02:bf:df:1b:c9:39:4e:84:65:58:a2:bb:0d:4c:18:
2e:c9:6b:ea:3b:f5:0c:ee:d8:9d:7c:c9:96:eb:52:41:49:92:
41:75:a9:a8:21:22:c1:9b:93:46:b2:f2:3d:71:81:2d:fc:a8:
a9:cd:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:40 2025 by rpki-client