Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/1xef8JB14kgVdYbFNM-Oq6W7NWA.roa
File: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (raw, json)
Hash identifier: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=
Subject key identifier: D7:17:9F:F0:90:75:E2:48:15:75:86:C5:34:CF:8E:AB:A5:BB:35:60
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01942067EA015F8A0B5336DF1298A21CB10F
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/1xef8JB14kgVdYbFNM-Oq6W7NWA.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50022
IP address blocks: 2a05:7400:c000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ea:01:5f:8a:0b:53:36:df:12:98:a2:1c:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7179ff09075e248157586c534cf8eaba5bb3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:04:27:78:0c:d7:4e:af:74:2e:9b:f1:21:
bc:a3:c1:89:35:3f:2a:fa:af:03:de:09:1c:64:bf:
7f:69:35:fe:76:da:ec:aa:fa:9c:41:a3:a1:d7:73:
20:6f:04:16:84:fd:f6:fe:5b:7e:69:a2:ee:90:bd:
74:d7:bd:04:e8:bd:d7:cc:03:61:ed:9b:c2:6d:ec:
b7:4f:31:e5:34:87:84:10:63:67:ee:22:18:dd:b3:
b1:d1:a9:de:e5:cf:a1:04:d3:e5:b3:ec:f2:7b:16:
e9:60:f2:b4:06:96:1a:ba:ad:67:a7:3b:7b:e8:5e:
f5:c0:5c:b7:06:5c:7d:48:35:b3:00:88:cc:0d:44:
f0:02:33:28:f8:99:da:59:13:20:da:3a:ab:50:ab:
d1:e8:51:d6:e3:f0:c6:57:45:6e:f3:b3:75:fb:5c:
16:6b:b4:a2:78:dc:b7:6d:60:22:87:b9:0b:b1:a0:
4e:22:86:4b:56:36:f9:f3:da:3b:44:5f:fa:d8:fa:
bc:ae:7e:ce:41:d6:ae:ca:f4:fa:2c:a1:9a:a8:fe:
56:c5:1e:23:af:4b:78:77:09:7e:87:43:a1:7c:bd:
68:19:f9:b2:00:83:a4:01:d1:03:71:d8:7d:a9:c5:
0c:fc:ac:56:c2:4d:e0:54:e7:a9:2e:05:53:95:dc:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:17:9F:F0:90:75:E2:48:15:75:86:C5:34:CF:8E:AB:A5:BB:35:60
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/1xef8JB14kgVdYbFNM-Oq6W7NWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7400:c000::/34
Signature Algorithm: sha256WithRSAEncryption
11:03:92:71:fa:41:06:c2:ac:7a:33:04:ee:4f:15:00:e8:04:
91:0f:ab:00:d7:5d:01:62:ac:8b:6f:34:1e:0c:9a:27:f9:f7:
77:f3:37:7d:85:a0:fb:bf:36:59:b9:cf:f4:0b:4d:05:fa:fd:
24:60:a8:b8:18:5e:bd:b2:cb:e5:7c:43:94:b7:50:92:2d:cc:
c0:d7:ec:14:b2:40:6d:d2:4d:5e:d7:0a:07:56:66:a1:83:55:
bc:cb:b1:0b:fc:0f:d4:ec:99:96:60:9b:41:2a:26:58:09:d0:
2e:d7:13:76:7d:bb:ff:84:9f:a1:4c:d8:a8:76:38:98:a5:a3:
d0:05:7a:13:61:a0:93:8a:92:f8:a8:24:1d:d5:2d:3a:e5:ef:
e5:aa:7a:a8:38:b2:8a:5a:12:53:24:f1:83:0c:b7:d0:32:4d:
e0:0d:da:37:ea:39:09:17:c7:6c:d8:5a:bc:cd:a3:af:c4:7a:
eb:f0:b4:1d:97:c0:34:64:09:3a:71:d9:5e:7f:a3:b0:61:90:
a1:19:ce:7c:bc:9e:b6:be:ef:93:63:1c:59:4a:6a:a7:d2:d6:
2d:f2:b6:02:c4:b4:09:9d:06:c4:ff:8a:c0:f6:d2:66:a9:ba:
d4:57:c7:aa:b6:76:a4:73:d9:02:f0:c2:13:bb:25:2e:98:64:
aa:5a:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:32 2025 by rpki-client