Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/cv52lnCd4OYEq3ChwVPuByt4EO4.roa
File: cv52lnCd4OYEq3ChwVPuByt4EO4.roa (raw, json)
Hash identifier: Y6tX9RqJ28Ihc1ndH1vV880Oy2R/oaI4x6kTnzu/ycg=
Subject key identifier: 72:FE:76:96:70:9D:E0:E6:04:AB:70:A1:C1:53:EE:07:2B:78:10:EE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BEE9673A4BF917E3F3E16D687E426
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/cv52lnCd4OYEq3ChwVPuByt4EO4.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210522
IP address blocks: 2a0f:5707:abe0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ee:96:73:a4:bf:91:7e:3f:3e:16:d6:87:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72fe7696709de0e604ab70a1c153ee072b7810ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:e4:c8:21:67:e1:0c:84:05:f7:df:30:3f:
6b:bb:1c:db:25:02:25:bc:f8:7d:eb:7f:9b:c7:7c:
a3:1b:31:b4:84:8c:47:78:02:d2:57:e4:dd:f0:76:
17:b3:1a:70:7b:6b:cf:57:4a:24:fb:fa:a5:25:98:
77:c8:0d:59:42:28:c8:b9:e7:ae:a6:f0:1f:ee:74:
b2:a6:28:9c:88:10:cb:d3:b7:18:a4:0c:9b:ac:53:
84:d5:b8:41:60:79:91:5d:a3:d2:aa:7b:15:50:92:
54:6f:a5:b6:a1:5a:80:eb:37:e3:4d:e4:37:f7:e9:
be:11:28:ad:0a:01:ae:86:83:9e:0d:53:12:d2:94:
29:40:1d:3e:6c:8e:35:07:9c:b8:3e:29:ca:b4:e9:
9d:cc:4a:9e:1d:91:5c:57:46:fe:f2:76:81:c3:94:
57:5f:2a:5e:a0:92:3c:44:c5:c1:d9:5b:59:d7:ff:
c9:c6:b4:c6:31:33:71:6a:e7:d5:b2:4e:8f:3a:ae:
e4:09:ac:89:44:b6:d4:22:53:7a:88:12:e0:99:c5:
e8:16:ae:7a:af:2b:18:51:52:01:31:78:80:25:fa:
73:d0:19:21:b2:af:6e:02:d9:f0:09:7d:c7:79:80:
4d:f3:4c:ab:77:14:e4:fe:df:10:aa:4f:51:64:91:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FE:76:96:70:9D:E0:E6:04:AB:70:A1:C1:53:EE:07:2B:78:10:EE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/cv52lnCd4OYEq3ChwVPuByt4EO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abe0::/44
Signature Algorithm: sha256WithRSAEncryption
96:26:92:cf:8d:a5:02:80:f3:84:11:af:c0:72:a3:1b:16:19:
fc:e7:c4:e2:66:0d:1e:09:eb:8e:50:de:f2:46:1a:61:2b:a2:
93:bf:1a:32:dd:0e:37:5b:5a:9e:3b:9d:b3:f6:be:5e:b6:51:
dc:ce:4c:8b:3c:c4:2c:0b:5a:0f:67:ef:88:4e:06:1a:91:40:
6b:87:29:fc:c0:43:c1:cb:44:0b:8b:5b:49:80:bd:d1:9b:9b:
d9:08:16:70:61:51:af:77:13:1e:b4:e9:46:f2:97:3a:44:f1:
ce:1b:fd:40:25:e9:8e:a3:fd:51:87:cb:04:6b:11:23:98:a1:
66:d4:ce:c0:d4:ae:47:b3:83:86:c6:e7:eb:60:17:9f:7c:d2:
eb:dd:92:c8:a5:38:8f:5b:6e:fc:07:e3:34:b3:06:fa:68:a8:
d1:e2:c3:fc:b7:55:14:c5:a9:d2:dc:67:80:ea:b3:42:0a:0d:
4e:13:da:d8:ca:11:ec:ea:75:36:06:c5:f7:03:34:be:56:fc:
e2:c6:21:d4:3d:fd:17:43:71:33:5c:72:31:40:06:3c:d6:bd:
ed:20:af:7f:a1:72:6b:d4:c0:6c:6c:cd:5c:5f:35:07:66:7d:
fa:2e:17:60:6a:54:6b:4e:0d:18:5e:e5:1b:98:a8:37:9a:fa:
67:1b:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:35 2025 by rpki-client