Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/amm4UyE6_-2iIfziflS9OWcpi0I.roa
File: amm4UyE6_-2iIfziflS9OWcpi0I.roa (raw, json)
Hash identifier: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=
Subject key identifier: 6A:69:B8:53:21:3A:FF:ED:A2:21:FC:E2:7E:54:BD:39:67:29:8B:42
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7EAD3B317A9C2BDCE3E7CE2CBD1E
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/amm4UyE6_-2iIfziflS9OWcpi0I.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210344
IP address blocks: 2a01:e901:104::/48 maxlen: 48
2a01:e901:114::/48 maxlen: 48
2a01:e901:124::/48 maxlen: 48
2a01:e901:134::/48 maxlen: 48
2a01:e901:144::/48 maxlen: 48
2a01:e901:154::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:ad:3b:31:7a:9c:2b:dc:e3:e7:ce:2c:bd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a69b853213affeda221fce27e54bd3967298b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:8a:01:8d:c1:70:b8:65:ed:85:10:c2:ae:
57:09:e5:6a:ce:50:17:7f:8d:23:31:07:0e:ce:0d:
20:68:b9:06:4b:e8:cb:2e:6f:86:dc:7f:97:f6:ac:
b1:7d:45:48:e7:06:49:4a:f5:4d:26:1e:23:f9:09:
9a:39:06:7b:68:3e:fd:06:3f:28:da:cb:2d:c2:06:
6b:de:a3:25:03:b5:d8:37:7c:86:76:ca:ee:74:98:
4b:16:99:fc:dd:50:a7:92:a5:46:31:bc:db:5b:3f:
cc:d3:bf:fb:bf:21:71:25:78:a7:06:70:4e:a0:db:
4f:76:33:eb:fb:a6:78:bc:6a:ea:8d:42:05:6e:ac:
f6:7f:d1:df:aa:2d:b8:ad:eb:19:49:44:63:fd:8b:
fc:21:e8:0c:4c:70:3c:89:64:96:52:88:68:42:f9:
fa:2b:1e:1f:79:14:c7:2c:40:02:f9:02:2c:68:0e:
fb:e5:28:cc:84:54:e3:52:b8:4b:27:ad:76:ff:36:
4f:0b:e0:7b:da:f3:b8:17:c6:53:cc:9c:e1:fa:2d:
7a:f3:30:4d:3c:1e:c6:9c:59:04:25:12:07:2a:91:
e2:2e:04:a9:4a:2f:4d:93:88:ff:d0:0c:82:40:7d:
fb:cc:6d:f2:3d:ce:15:b1:cd:d6:24:2d:f2:6c:77:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:B8:53:21:3A:FF:ED:A2:21:FC:E2:7E:54:BD:39:67:29:8B:42
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/amm4UyE6_-2iIfziflS9OWcpi0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:104::/48
2a01:e901:114::/48
2a01:e901:124::/48
2a01:e901:134::/48
2a01:e901:144::/48
2a01:e901:154::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2e:f8:68:03:66:22:75:78:1e:48:10:e8:ab:b5:a0:0a:c6:
12:57:29:e4:45:4a:a0:ee:c0:3d:bf:a5:18:05:40:49:ba:ef:
cb:bb:1d:b8:12:83:a8:f7:d7:ec:37:f1:a5:c5:1b:3a:38:37:
bb:50:d8:be:01:50:fa:78:ae:d2:6f:60:7e:0d:07:ce:9d:37:
f1:0c:fa:fb:5d:89:6a:31:32:43:ff:e3:42:6e:3c:5c:7e:b5:
60:45:99:6a:fa:15:90:26:f1:17:b9:87:27:c6:a3:60:f6:e8:
29:25:67:72:6d:28:0b:d5:4e:3a:34:1b:38:45:a1:64:e5:53:
1d:b4:c8:97:ec:41:c8:e4:c2:b9:ee:81:3f:11:f8:15:ae:e1:
88:04:4e:3c:4d:89:f4:0c:5c:43:46:9d:92:4f:5c:fc:e8:76:
b5:ea:4c:30:20:7d:5c:36:42:34:79:80:fe:f9:6d:9d:dd:36:
6d:b4:a7:0f:0b:53:9c:7a:78:72:38:e2:35:2a:fd:d0:5e:0a:
93:8f:ee:56:28:8c:43:eb:26:2e:76:19:15:ec:0a:37:53:57:
34:d0:b5:5e:c7:48:3d:70:db:6c:8d:92:cf:6d:8c:47:70:df:
9d:ae:91:8e:14:0a:a8:e9:9a:02:6a:15:ed:2d:63:3b:d8:3d:
a7:9b:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:08:23 2025 by rpki-client