Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/RAGCS9u8ujR5bbjSyLNzznVVUwY.roa
File: RAGCS9u8ujR5bbjSyLNzznVVUwY.roa (raw, json)
Hash identifier: 1yl5B/mUT2m92b5OiQZaHtDxDqju+ib1S6he/hE1h2s=
Subject key identifier: 44:01:82:4B:DB:BC:BA:34:79:6D:B8:D2:C8:B3:73:CE:75:55:53:06
Certificate issuer: /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial: 3EA1D9
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/RAGCS9u8ujR5bbjSyLNzznVVUwY.roa
Signing time: Sat 01 Jan 2022 01:00:50 +0000
ROA not before: Sat 01 Jan 2022 01:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210777
IP address blocks: 2a10:6747:5::/48 maxlen: 48
2a10:6747::/32 maxlen: 32
2a10:6747:a::/48 maxlen: 48
2a10:6747:f::/48 maxlen: 48
2a10:6747:4::/48 maxlen: 48
2a10:6747:9::/48 maxlen: 48
2a10:6747:e::/48 maxlen: 48
2a10:6747:3::/48 maxlen: 48
2a10:6747:8::/48 maxlen: 48
2a10:6747:d::/48 maxlen: 48
2a10:6747:2::/48 maxlen: 48
2a10:6747:7::/48 maxlen: 48
2a10:6747:c::/48 maxlen: 48
2a10:6747:1::/48 maxlen: 48
2a10:6747:6::/48 maxlen: 48
2a10:6747:b::/48 maxlen: 48
2a10:6747::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4104665 (0x3ea1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Validity
Not Before: Jan 1 01:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4401824bdbbcba34796db8d2c8b373ce75555306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:11:34:c8:6f:a5:c2:93:54:ce:88:96:97:
70:bb:62:92:5b:a3:65:7d:e5:fe:27:78:56:81:6b:
ab:ba:22:28:ec:d0:f5:fa:86:d6:88:09:ff:46:48:
9c:d1:79:57:72:c6:a9:1a:e5:51:0c:32:ae:f3:bb:
87:68:5e:22:42:07:6c:d7:0e:2f:81:f1:ad:b4:41:
78:59:e5:02:2d:f0:ba:4d:65:ec:df:04:f3:d8:e8:
18:c8:ec:0a:91:24:53:8f:32:a4:12:ff:15:2a:3c:
d9:5d:30:ba:44:c0:d2:38:a4:6b:21:87:c1:ab:14:
59:44:2e:15:fb:28:f6:41:5f:ef:ff:c0:ed:c1:82:
bc:92:92:db:2d:17:16:1c:60:ef:a7:92:a5:68:85:
be:ae:6d:3e:ae:f4:78:0f:e4:c4:e9:b0:a5:0e:a5:
63:82:45:67:b6:77:06:e5:81:16:6c:d6:69:f5:e0:
98:99:7c:ad:9b:4a:8a:de:3d:ed:d1:6b:73:c7:33:
ec:3f:a6:74:97:39:4b:70:89:64:c9:23:aa:39:3f:
5f:c2:08:f7:07:98:27:a5:e5:fb:d9:63:52:7c:b7:
5a:5b:d0:11:0e:9e:6f:17:10:73:21:79:02:26:13:
52:89:69:31:78:b1:af:21:41:c7:f9:6b:f4:42:fa:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:01:82:4B:DB:BC:BA:34:79:6D:B8:D2:C8:B3:73:CE:75:55:53:06
X509v3 Authority Key Identifier:
keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/RAGCS9u8ujR5bbjSyLNzznVVUwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6747::/32
Signature Algorithm: sha256WithRSAEncryption
95:d7:57:64:5a:8a:f9:f6:e7:8a:b7:4f:13:20:24:0d:6d:02:
8f:ad:4b:bb:78:c0:39:25:92:a5:94:6a:3d:a1:64:29:92:6f:
99:3e:f9:e0:b1:09:84:70:71:7d:f3:b7:96:cf:3f:e6:a7:61:
76:38:ff:bd:64:f4:64:ae:1d:a8:02:57:87:25:3a:fa:39:11:
b1:bc:fc:49:5d:1a:c0:de:e7:42:62:21:d8:2f:12:86:f6:30:
57:e7:b0:48:27:91:ba:56:34:2c:e5:36:6e:0f:a4:4f:e9:03:
79:d0:9b:4d:87:8f:5f:0c:2e:45:a8:40:36:f6:3c:f8:45:6a:
fb:ef:43:e8:3a:ce:8c:ef:60:3a:12:10:01:f0:29:bb:8b:51:
c9:a3:1a:61:a7:f5:09:93:10:62:a9:1e:7f:33:5a:b8:d5:0c:
22:11:9d:99:3f:e1:d1:d0:48:31:37:41:21:7a:e2:8f:e7:ff:
1b:66:a8:04:2b:b2:fe:6c:2f:0d:b3:7f:e2:20:4e:00:75:5c:
bd:06:e6:90:d8:6e:50:d7:76:04:fa:88:9c:7b:e4:af:d0:32:
c9:b2:99:e7:4f:09:3a:65:d0:64:b0:fe:2e:59:09:55:85:c0:
83:6f:2f:99:c0:19:64:1c:48:16:cb:ab:ca:5d:32:70:4f:ea:
a7:82:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:47 2025 by rpki-client