Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/P-3WPsxzJjEfo1fblfP6RKJSuMk.roa
File: P-3WPsxzJjEfo1fblfP6RKJSuMk.roa (raw, json)
Hash identifier: 9S6Tg0GaCIXSokwyy2tq+kgbf5yA9aYiTlT4v7uY+9c=
Subject key identifier: 3F:ED:D6:3E:CC:73:26:31:1F:A3:57:DB:95:F3:FA:44:A2:52:B8:C9
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BEBDBAB711500FF060C16716E0DE9
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/P-3WPsxzJjEfo1fblfP6RKJSuMk.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207401
IP address blocks: 2a0f:5707:fff4::/48 maxlen: 48
2a0f:5707:fff5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:db:ab:71:15:00:ff:06:0c:16:71:6e:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fedd63ecc7326311fa357db95f3fa44a252b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:91:b6:72:5c:b5:af:44:12:89:4c:c2:e1:
c5:3c:5b:83:50:36:29:cd:8d:3d:54:58:20:ba:53:
aa:72:2b:ef:50:04:f7:32:35:fe:c2:6c:36:9d:4b:
bc:2d:32:1d:96:1d:63:c4:51:8c:0b:37:91:b4:e9:
b2:b4:b1:35:00:3e:86:a9:8e:ce:31:48:77:16:10:
1b:2e:49:96:fe:78:4e:5f:63:b3:99:29:b7:5d:3e:
3f:8a:4e:3c:73:d8:42:a0:08:36:f9:7e:8b:1a:53:
2f:ac:bf:73:6c:26:46:b4:72:77:79:ed:0f:e4:85:
62:7e:e2:21:3a:ec:77:69:9b:39:4d:e0:0d:6b:6a:
22:15:65:de:a6:10:27:80:00:04:ff:19:b9:f0:6e:
ea:47:06:99:bf:dd:91:b7:8c:71:bc:a6:65:7b:cc:
33:02:65:4c:16:cf:29:91:3c:2a:e1:17:65:5f:68:
8e:ab:aa:e2:6b:c0:aa:2f:bf:03:65:c9:f9:1a:d3:
da:21:c4:ee:b2:24:ac:47:a8:14:81:0b:71:da:e4:
11:a5:1d:dd:80:51:46:74:56:dc:68:33:d5:f0:85:
b1:79:f3:63:a6:84:e3:4e:7a:01:98:ad:cc:a4:d5:
2e:c3:c6:f0:0d:31:45:76:2f:9c:f2:4e:e1:b6:1f:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:D6:3E:CC:73:26:31:1F:A3:57:DB:95:F3:FA:44:A2:52:B8:C9
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/P-3WPsxzJjEfo1fblfP6RKJSuMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff4::/47
Signature Algorithm: sha256WithRSAEncryption
42:5f:0f:98:cf:97:2f:7b:5f:6f:ca:c4:04:df:9a:23:b8:0c:
8c:95:d4:fb:88:c4:1d:33:85:4c:d2:86:3d:79:c5:50:e8:81:
31:c4:3a:6e:22:46:9c:da:19:d2:fa:41:8e:c1:77:54:a8:28:
90:8e:db:82:03:01:e3:f2:fb:41:3a:93:f2:ca:5e:96:bb:dd:
d3:fe:3b:c1:df:06:65:ec:73:95:12:c8:13:19:b2:79:83:f8:
7c:b8:32:9f:89:53:6a:50:4f:7f:08:e4:f3:77:00:2a:b8:71:
e0:8f:73:20:27:7d:ed:31:32:3c:5e:1f:a5:c9:12:5d:69:2e:
1f:15:bb:9d:53:50:57:ec:b0:4f:63:5d:c1:e5:51:64:83:1a:
2d:65:5f:2e:7f:2c:96:a5:85:fa:b8:cc:0b:d3:eb:6a:8c:5c:
e4:14:9a:42:78:fa:1b:6e:e0:7b:04:a0:34:b1:f8:20:7d:e0:
a8:ea:f1:7c:fb:5e:cf:05:27:3e:b9:58:00:a2:c9:fb:9f:0c:
24:9f:1f:a6:79:4c:01:86:ab:9c:35:24:4f:96:de:7e:5f:b2:
87:6e:8b:8d:25:ba:13:ec:3d:d2:1d:78:33:44:b7:8f:57:6e:
ee:fb:30:e8:8a:80:b4:7d:8f:1e:3a:e0:a4:40:7e:2b:a4:9f:
48:23:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:42 2025 by rpki-client