Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/4yVsgvk6SLCJV8wa4346xJZDFYQ.roa
File: 4yVsgvk6SLCJV8wa4346xJZDFYQ.roa (raw, json)
Hash identifier: xnXZIOF2gWuWZQUCR0po4lqk5c3HkrOwMun+Me3xU0o=
Subject key identifier: E3:25:6C:82:F9:3A:48:B0:89:57:CC:1A:E3:7E:3A:C4:96:43:15:84
Certificate issuer: /CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Certificate serial: 018CC94DDE99FDFA16A7BFC329E6161C2CEA
Authority key identifier: E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/4yVsgvk6SLCJV8wa4346xJZDFYQ.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48448
IP address blocks: 2a06:4d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:de:99:fd:fa:16:a7:bf:c3:29:e6:16:1c:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3256c82f93a48b08957cc1ae37e3ac496431584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:63:0a:67:59:61:d8:27:89:3f:db:db:1d:
35:ac:1d:da:d8:2e:d1:4c:32:d6:6c:5b:57:b4:08:
02:8c:7d:c9:00:4a:11:32:07:d3:75:98:0f:d9:5e:
a6:38:0d:4c:f5:f3:ed:32:6a:dc:4b:65:02:a4:ff:
29:cb:0a:2c:81:71:6f:dd:3b:49:c5:cf:1b:bd:7d:
66:f5:c3:57:1c:d0:54:19:36:c2:5f:b0:7d:96:da:
59:b2:8f:b3:25:32:16:00:54:1b:60:ed:d9:ba:6a:
d8:98:c2:cd:7b:65:3d:b5:d0:42:4a:dc:52:0c:0d:
da:48:5b:44:77:cf:04:08:0a:17:ed:23:c0:5a:54:
d7:96:22:63:44:98:f9:b8:6a:76:ad:3f:66:8f:f5:
7b:64:f1:60:3d:ad:8f:ec:5c:23:c0:db:fd:e1:88:
01:0b:b2:46:15:41:de:34:d0:41:02:3d:00:0f:62:
86:81:1f:69:c2:26:49:58:31:c9:fa:19:a0:5b:d4:
90:2c:32:68:cf:1c:ba:73:b9:16:b2:b2:cd:3a:6e:
f4:2e:13:10:e0:fe:df:6e:10:d0:4f:80:bd:6a:be:
a8:2b:43:5e:43:ca:ee:38:2a:dc:f0:29:aa:da:d2:
91:eb:6d:8e:2e:90:9b:15:55:06:b4:de:db:ce:8f:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:6C:82:F9:3A:48:B0:89:57:CC:1A:E3:7E:3A:C4:96:43:15:84
X509v3 Authority Key Identifier:
keyid:E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/4yVsgvk6SLCJV8wa4346xJZDFYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
56:93:c2:1a:0f:f7:de:60:99:21:4e:92:5c:9e:a6:f3:b5:6a:
d0:12:d5:1f:f5:ca:73:2b:43:c2:e6:a3:34:aa:42:c5:b7:09:
a2:fd:79:99:26:b4:ee:82:cd:4c:06:1c:da:c3:66:6e:d6:3b:
97:78:7d:4b:90:71:a3:be:40:2d:5f:c9:9c:2b:3c:f4:dd:cc:
79:91:b1:8e:63:90:86:37:6f:2f:57:1d:30:16:77:d9:10:74:
6c:34:d9:ed:16:e8:fb:53:2e:2f:61:d1:4b:96:08:59:e9:3b:
5f:6e:31:10:5b:3e:53:ac:1a:2a:10:e0:e7:4e:f8:b2:8b:6b:
e5:bf:c4:6f:57:b8:67:bb:52:23:c2:88:59:9d:87:e1:9f:2b:
da:82:76:78:a7:d2:5b:c6:0a:dd:56:72:dd:7f:09:0b:1d:f7:
8e:9d:26:f6:17:ee:04:b2:a9:39:0f:35:71:37:24:17:8d:ea:
f4:c6:6b:f2:04:18:8c:8e:b3:73:dc:e7:7b:f9:95:ee:66:5c:
7b:fb:62:73:d7:33:5c:f6:a1:ed:68:46:51:6f:d0:82:3c:78:
67:e7:f4:39:17:b7:4d:9a:ae:79:a7:81:20:c7:41:bd:e3:b0:
f2:43:cd:0a:6a:ae:2e:87:7b:7a:5e:d4:59:ea:9f:3a:ac:18:
53:8e:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:31:12 2025 by rpki-client