Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa
File: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (raw, json)
Hash identifier: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=
Subject key identifier: 8B:60:AB:E8:F4:96:51:CA:0D:AE:E5:9D:6D:D4:7D:EC:49:B4:0E:1E
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA81B304BAD1114FD86375114BE50F
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61050
IP address blocks: 2a00:ece1:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:b3:04:ba:d1:11:4f:d8:63:75:11:4b:e5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b60abe8f49651ca0daee59d6dd47dec49b40e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:a3:13:4c:e7:a6:eb:19:c1:ed:30:31:ae:
5c:91:5c:33:6a:6e:79:6c:f4:86:04:f4:0d:b3:19:
32:a6:77:12:9f:fd:40:e0:58:db:06:2e:da:ce:23:
d8:e0:b2:b5:e7:3e:e8:26:50:f0:0a:c2:33:7b:ea:
e7:b7:23:ad:e2:a5:c1:9c:62:16:6a:b3:de:d1:26:
cc:2d:ba:0c:6f:45:29:3e:bc:18:e2:8c:4b:f7:65:
53:a3:12:f4:03:b1:f1:69:3e:b4:bd:af:1f:65:6b:
39:c2:bf:05:ac:85:6b:08:f4:78:68:13:de:30:de:
ec:a0:1b:e7:de:05:a8:80:eb:43:d3:c3:25:26:60:
47:b2:a3:2d:08:1d:7c:0b:48:6f:a0:17:57:90:78:
ec:72:1a:3c:65:95:ae:6f:3d:aa:02:e6:33:d2:17:
cb:c3:e5:fe:7a:d1:5e:ce:f6:90:38:10:7b:d1:55:
e1:9d:fd:c7:9c:86:32:43:93:e7:e4:6f:28:14:d8:
b7:75:36:8f:b8:7b:f9:8d:35:54:9e:6d:8a:16:93:
19:bb:f5:59:43:d9:fd:e7:da:27:5f:8e:de:63:ee:
95:4c:e6:87:dd:b6:03:ab:c1:51:4e:13:ac:a6:17:
34:57:aa:c1:6d:de:12:15:00:1b:44:45:1c:ea:4d:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:AB:E8:F4:96:51:CA:0D:AE:E5:9D:6D:D4:7D:EC:49:B4:0E:1E
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:0a:35:a6:b0:ec:86:86:6e:d2:57:64:98:b4:67:6d:5d:4d:
6c:db:62:4f:d5:5c:e4:00:e8:6b:30:b7:1d:11:c1:73:21:43:
b1:82:24:7d:6f:67:8e:45:3c:45:1c:a0:a0:21:3a:5a:a1:59:
62:e1:da:00:7c:04:dc:89:3a:41:8a:85:e7:ed:db:cf:99:f4:
13:bd:1a:50:84:9f:88:7d:27:46:32:f7:e7:70:04:14:75:54:
6a:db:47:e8:9d:73:50:2d:84:1c:27:e4:7e:f6:3f:36:7f:f5:
f3:6a:95:25:18:59:ac:94:6d:af:a8:90:89:04:2a:af:de:a6:
94:33:ec:36:e3:26:1a:d0:0b:70:a0:20:b2:06:e8:e8:ec:14:
d4:c6:20:1a:64:b3:44:f7:7b:78:c7:01:11:34:88:7d:60:fe:
38:7c:66:50:58:63:44:94:1b:08:ef:6a:41:3e:2a:14:ea:d5:
54:2c:dd:73:17:27:17:45:45:12:58:af:93:04:7f:03:2c:d4:
68:e6:9c:02:5e:94:b7:f5:f0:6e:7c:4c:bd:e3:14:6c:24:1d:
46:04:5d:5d:e5:67:8b:64:f1:8d:11:a4:ae:6e:8a:71:df:91:
65:41:a0:78:86:5a:88:f4:3b:a9:37:e5:0e:9a:2d:ba:59:07:
42:6d:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:01 2025 by rpki-client