Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa
File: G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa (raw, json)
Hash identifier: 6v8iJzBQxu1EBH72GEHMAvN+9lMnUKlEbyIa+l9gXGI=
Subject key identifier: 1B:AF:49:2A:B0:5D:0F:33:CA:67:7B:E7:6C:3B:AE:58:0D:6D:6F:B2
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BDF87A18E090BEFB319CAB20433FF
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0f:5707:ba0e::/48 maxlen: 48
2a0f:5707:ba0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:87:a1:8e:09:0b:ef:b3:19:ca:b2:04:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1baf492ab05d0f33ca677be76c3bae580d6d6fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:d3:ad:95:c8:d0:db:57:38:38:ac:f1:26:
a7:f3:45:8e:29:43:25:ec:e8:54:dd:09:6e:ff:a0:
ee:64:f9:6f:f9:7d:7b:7c:45:60:9c:42:4b:e5:cd:
f1:8f:51:bd:86:1f:35:29:3f:e5:5a:32:ca:be:ec:
d9:cd:e0:ad:90:bf:79:21:38:51:b1:1c:58:31:74:
ac:21:78:19:1d:5b:84:0c:02:66:6e:cd:80:ac:69:
2e:1e:43:0e:5d:ac:1d:59:20:d2:9f:01:de:a1:a3:
3b:04:be:f8:88:23:f3:a7:86:6f:4a:3a:17:f9:0c:
24:af:56:07:f9:74:6f:2e:34:9c:17:9f:5a:63:be:
ed:4d:f0:b7:13:00:70:f2:30:86:3e:47:e4:82:7f:
b0:c2:59:68:6d:d9:98:93:90:3d:87:41:f1:af:07:
df:ba:34:bd:00:44:07:e5:c0:89:92:28:a9:53:7f:
7d:af:06:a0:7d:09:58:05:96:53:0a:02:a3:40:b6:
fb:62:6b:d0:81:11:5e:b3:24:47:4e:73:a6:84:cc:
d5:b7:5e:3d:73:23:ce:d2:8e:94:f3:b6:90:f8:eb:
25:e1:c5:59:73:0c:7d:c3:7e:d8:d3:5b:53:af:18:
09:90:9d:83:4a:94:94:eb:d3:89:2c:bf:c2:11:e8:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:49:2A:B0:5D:0F:33:CA:67:7B:E7:6C:3B:AE:58:0D:6D:6F:B2
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/G69JKrBdDzPKZ3vnbDuuWA1tb7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ba0e::/47
Signature Algorithm: sha256WithRSAEncryption
9b:bb:c7:06:f9:d5:c6:61:bb:10:07:9f:f2:10:9a:e8:23:12:
5b:5b:04:60:fc:5a:7d:a3:fe:47:e2:f2:3e:cc:72:9f:18:71:
2d:7f:5e:06:bf:2d:e3:f4:6a:ed:70:2e:5f:7f:23:b3:d5:59:
b7:0c:dd:13:b3:74:d3:3f:69:05:e9:bc:2c:54:a6:53:07:93:
5b:cd:27:45:19:44:ac:f7:10:93:81:40:c1:fc:a6:10:7e:79:
53:f6:d0:b6:e9:b9:7f:54:8f:ac:39:6a:d4:57:13:3f:b0:f7:
5f:85:d4:29:ac:97:2c:22:99:f3:af:ff:d2:7e:5c:cc:5a:15:
7f:36:85:7c:73:a0:d4:5c:b1:8e:0b:81:58:90:70:66:e8:5f:
f5:40:59:d3:20:30:63:58:9b:f9:00:42:4d:94:ab:f1:02:1a:
8a:b0:ac:81:af:80:36:63:9f:ce:32:ce:4e:e3:7f:cd:3c:92:
86:db:d2:3d:f4:eb:16:a1:56:e5:88:77:9c:b3:74:9b:d4:89:
9e:b8:60:3d:2e:74:48:56:60:70:fd:15:ff:ac:64:00:38:b0:
e3:04:7a:36:27:ea:05:c1:0d:98:26:27:66:07:a1:39:2e:ce:
bc:9d:b5:81:99:56:93:94:37:44:cc:10:02:5b:81:7c:60:e8:
e0:6e:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:07 2025 by rpki-client