Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa
File: Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa (raw, json)
Hash identifier: uqU7Z+1Ai65Iy0koLlSQKkjmTH9OHYbhCjqXFSnYbA8=
Subject key identifier: 63:3D:45:DA:BA:AF:25:37:2A:1B:78:3A:57:4B:C4:48:77:28:59:09
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0194A3854054AFFBB4A626552165ACB32E19
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa
Signing time: Sun 26 Jan 2025 16:50:06 +0000
ROA not before: Sun 26 Jan 2025 16:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0::/48 maxlen: 48
2001:30c0:30c0::/48 maxlen: 48
2001:30c1:30c1::/48 maxlen: 48
2001:30c2:30c2::/48 maxlen: 48
2001:30c3:30c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:85:40:54:af:fb:b4:a6:26:55:21:65:ac:b3:2e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Jan 26 16:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633d45dabaaf25372a1b783a574bc44877285909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:40:9d:15:b4:93:f4:46:29:81:8f:3e:26:
5c:ea:1a:70:6a:8a:1e:44:ba:fe:bd:af:e7:bd:72:
88:46:68:3f:33:c9:1c:ea:a2:ec:ab:a0:73:3a:e8:
c0:91:66:a1:6b:93:56:94:b8:77:91:5f:0c:3f:30:
ba:0f:42:40:55:0f:e1:2b:4f:ae:f1:dd:05:a2:71:
df:52:49:7b:5a:b1:71:4c:db:1d:9c:c1:ed:24:18:
72:10:21:45:ac:b9:66:45:5a:8b:8d:19:fb:f9:08:
31:2a:5d:5d:0e:fe:43:58:e6:61:05:10:80:57:a3:
a9:7b:5f:de:93:09:54:54:8f:10:c1:66:f9:20:3a:
30:fe:3d:bd:a1:cb:93:fa:be:e9:0c:6d:e4:36:d9:
88:6b:ce:e4:9d:86:c6:b3:d4:ca:12:3c:08:d5:0a:
6f:5c:1e:50:77:20:cc:e6:3c:f1:f3:80:1f:57:ed:
6e:15:89:a0:76:da:df:0f:bc:bb:bd:29:a0:d2:f0:
6a:b6:27:df:d0:1b:80:6f:cc:ec:86:44:f4:30:4e:
4c:19:19:2d:35:3d:bf:1e:0e:2a:18:e4:40:1c:d9:
83:6f:3b:50:1c:f0:bd:eb:e3:8c:be:f9:03:9f:f4:
1a:b1:61:e9:74:3d:58:b5:6a:5b:3f:2b:70:91:39:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:45:DA:BA:AF:25:37:2A:1B:78:3A:57:4B:C4:48:77:28:59:09
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0::/48
2001:30c0:30c0::/48
2001:30c1:30c1::/48
2001:30c2:30c2::/48
2001:30c3:30c3::/48
Signature Algorithm: sha256WithRSAEncryption
48:45:3f:b4:97:ba:ef:c3:82:c4:c1:ea:b9:c6:92:5a:f7:60:
d0:35:19:10:71:c8:95:39:af:cb:6c:09:0f:47:ca:28:2a:78:
68:cd:0b:40:86:4a:7f:6d:4b:e0:63:2b:2c:f7:17:2d:2f:28:
36:51:9e:a7:44:67:d7:81:e6:de:cb:6a:e6:c5:35:a9:74:47:
c3:21:5d:e0:fa:56:03:81:5a:c8:9d:0b:42:fd:0e:9a:1c:6d:
2d:04:c9:38:45:4c:14:ea:6a:b7:17:75:36:b1:a2:e0:0e:19:
90:a3:1a:8f:b9:f3:fa:1b:b4:2a:07:94:ab:61:9e:1f:e4:85:
0a:cf:24:1e:b3:2e:2c:8c:1c:f2:01:1d:54:09:d6:d4:73:81:
0c:1d:54:a4:3b:49:a8:d2:db:58:1e:61:75:7d:40:4a:ca:f8:
ba:aa:14:5f:ba:a7:d5:32:fd:26:61:68:1b:4c:cb:a7:93:7e:
cb:6c:80:1b:b8:6c:a7:86:51:09:41:be:2f:bd:27:26:8e:19:
2f:d0:84:f2:d4:e0:a0:d2:54:b5:ca:63:2a:01:dc:fe:61:69:
e1:07:e1:13:3a:a0:d5:60:7b:22:eb:6e:0a:f9:72:71:91:e5:
6a:8c:ee:a6:31:53:7d:b8:75:74:74:e1:df:1a:cc:91:e9:a1:
b2:06:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:56 2025 by rpki-client