Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3kFx79lq8RLjaPjIfF_sgcfV-aA.roa
File: 3kFx79lq8RLjaPjIfF_sgcfV-aA.roa (raw, json)
Hash identifier: SIPueaksy4uymOcGKt5yTpR1gL2/CyGODpC+zjv3jB0=
Subject key identifier: DE:41:71:EF:D9:6A:F1:12:E3:68:F8:C8:7C:5F:EC:81:C7:D5:F9:A0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4E3777591834C96BCEFF535FA4DD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3kFx79lq8RLjaPjIfF_sgcfV-aA.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205613
IP address blocks: 2a06:8ec6:1::/48 maxlen: 48
2a06:8ec6:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:37:77:59:18:34:c9:6b:ce:ff:53:5f:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de4171efd96af112e368f8c87c5fec81c7d5f9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:0a:d0:47:38:c5:fd:ad:52:0b:f3:8b:bc:
e4:98:14:3c:3e:34:aa:cc:60:e4:59:b5:53:0f:9e:
5f:e2:a1:6e:bb:7f:3d:c6:c0:07:ea:17:11:83:95:
68:f4:0c:c9:0f:0a:6f:c7:60:8d:7a:3c:0c:ec:3a:
95:2e:b4:79:95:46:29:08:db:33:0d:f0:08:20:4a:
e2:e1:03:3d:53:2f:56:f3:63:ba:e6:69:13:e7:7b:
0a:e0:5d:db:83:1b:c4:d7:e8:79:73:02:ed:c3:af:
06:74:31:0e:24:26:41:29:cf:6f:6b:a0:2b:e2:b3:
77:9f:fb:96:91:80:68:df:63:72:2d:60:3d:21:e1:
61:ee:2f:ed:33:a6:e3:3e:cc:b4:a3:c3:7c:f3:ed:
12:ec:1a:d7:2f:ab:ec:7b:41:f1:d3:fa:1b:3c:53:
d6:8a:6c:4d:09:9a:23:6d:64:21:f1:a3:b7:ac:53:
84:a2:0e:fc:1f:e0:c0:9b:4f:d9:4e:05:42:26:77:
22:54:a2:9c:eb:82:6d:18:f2:c2:70:8e:8c:1a:87:
f5:f9:ec:2e:ea:7f:5e:55:48:39:c2:38:c0:80:f6:
fd:0b:4e:da:75:d6:e7:ec:1c:e8:e2:d9:49:ba:b0:
48:62:df:05:86:9c:5e:ac:2d:e7:7b:37:6f:33:c2:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:71:EF:D9:6A:F1:12:E3:68:F8:C8:7C:5F:EC:81:C7:D5:F9:A0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3kFx79lq8RLjaPjIfF_sgcfV-aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8ec6:1::-2a06:8ec6:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:77:38:33:de:52:05:53:fd:20:41:66:9f:e7:7a:0d:97:d7:
3c:a1:76:12:34:9c:7c:ed:68:af:00:6a:ed:d8:50:ed:85:5b:
ad:9b:8e:62:71:65:42:b3:7e:f4:94:2a:d1:3a:ff:66:bc:7e:
c5:b6:e8:ce:8d:f3:54:d4:4a:79:39:18:3c:21:9f:3b:a6:15:
05:bf:5e:45:b1:a2:3e:3f:4d:d8:ad:fe:aa:e0:4c:9f:9b:cc:
2e:7d:8b:f0:27:27:08:c6:14:0b:24:e6:48:8d:5b:a3:fa:a2:
39:9b:f5:ec:98:76:b0:d9:de:cc:80:56:96:8d:de:77:9a:47:
17:eb:4b:0e:1a:e2:09:16:a0:05:da:34:2f:21:e0:07:b6:a6:
8c:06:bb:e8:eb:c3:b4:0e:9c:89:89:f1:39:5c:d8:ac:9e:7e:
2d:22:49:02:9e:b0:5a:e0:8b:51:c3:fd:ec:69:3a:59:40:e5:
01:b2:e3:74:9a:be:7f:c7:0d:63:14:30:75:a5:26:71:90:5d:
da:09:ab:9e:93:77:91:26:91:04:8a:e3:8f:ed:f7:2e:4f:b7:
b8:ec:3c:87:57:cd:00:85:d4:12:e6:55:1a:ee:0d:36:b0:d6:
a8:f4:dc:89:d6:39:36:01:b3:42:2a:65:c4:ea:42:8b:68:b2:
e4:27:65:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:20 2025 by rpki-client