Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa
File: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (raw, json)
Hash identifier: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=
Subject key identifier: FD:3A:56:3C:08:15:CC:64:1D:02:EF:1C:8D:1D:83:73:A7:BD:66:D0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01948F3F2078141967D7D3FDD59467A01ACC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa
Signing time: Wed 22 Jan 2025 18:21:06 +0000
ROA not before: Wed 22 Jan 2025 18:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213576
IP address blocks: 2a0f:b244:120::/44 maxlen: 48
2a0f:b244:140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:3f:20:78:14:19:67:d7:d3:fd:d5:94:67:a0:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 22 18:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd3a563c0815cc641d02ef1c8d1d8373a7bd66d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:7f:52:ed:f9:7f:15:99:9c:d3:b1:20:cb:
8d:51:6e:fc:25:a6:e7:5e:84:d1:4f:91:36:49:68:
82:ae:3c:be:a5:3a:41:10:af:06:01:1c:9e:d6:bb:
f3:08:54:51:6f:99:d6:71:29:a8:0a:4e:36:e9:51:
7b:15:df:1d:fd:e2:b2:8d:13:49:86:a5:25:6d:c4:
fd:b0:bf:6c:a9:80:6c:ff:62:ac:4a:1e:ae:f9:91:
72:2f:3a:94:74:30:7b:08:ac:b6:c9:ce:eb:3a:7b:
3a:f1:c7:e7:3f:98:38:f1:77:01:86:42:57:f3:7d:
4f:45:e5:e3:31:91:79:e4:54:61:4e:a2:ce:92:5c:
8e:18:fd:23:e1:c4:56:f0:4d:6a:bd:e7:2e:67:ef:
64:d8:3d:8b:ea:a7:5b:f1:db:1c:cd:1f:26:ae:3c:
00:34:01:64:c9:3a:d3:c1:04:83:ed:d0:a8:8d:de:
02:5b:6b:17:50:09:4a:e3:aa:e8:32:f9:4e:de:bd:
d6:9c:89:d5:9d:29:f7:2e:6f:d9:04:df:3e:06:c1:
dd:e6:4d:f1:49:eb:5e:d7:b9:b5:a3:45:f0:e8:d1:
12:bf:f8:df:86:a5:c7:48:c9:89:3f:3e:f1:fe:07:
a2:e6:87:d0:af:66:52:21:0b:dc:a2:0a:9f:dc:53:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:56:3C:08:15:CC:64:1D:02:EF:1C:8D:1D:83:73:A7:BD:66:D0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:120::/44
2a0f:b244:140::/44
Signature Algorithm: sha256WithRSAEncryption
57:72:48:f0:94:5b:42:8e:4f:cc:47:fc:75:2f:4a:ed:2a:6d:
09:0d:af:44:5f:17:38:d2:c0:46:a1:f2:47:a2:dc:8c:64:a9:
29:a2:5f:39:ac:fb:1b:cb:14:8b:4d:35:e6:ad:a3:ff:15:98:
fc:f7:1e:bd:2d:dc:bf:ab:cc:5a:bc:5b:bb:e1:68:d5:f0:4e:
02:e7:d7:6f:88:f4:9d:a8:fc:a0:76:4b:cf:e1:75:9a:2a:77:
3f:28:34:88:55:4f:cf:31:91:90:7a:a2:fa:29:b1:a2:d9:5e:
14:63:47:eb:22:8b:4d:ee:41:2a:cf:20:5f:19:41:c6:e5:02:
ee:76:e4:01:74:69:0d:a9:99:cb:43:15:ca:d9:8e:19:d2:84:
69:26:87:de:c2:27:47:78:9d:b0:56:29:d6:ec:6d:5f:6c:fc:
1e:0a:9e:0a:a9:70:45:49:1d:89:cc:77:4c:1d:f0:9c:8d:5b:
b6:c1:bf:e8:bf:e1:2d:a0:c5:9b:f3:95:5b:c6:5c:8c:53:d5:
b7:f6:ac:36:4c:d9:f3:7a:0e:78:8d:e0:33:77:76:24:8d:7a:
b1:4b:74:26:5e:88:cb:27:28:64:01:ce:3a:ca:6f:72:e2:b3:
6e:a5:6e:21:6c:1b:3b:81:15:29:24:0f:8d:df:61:e0:10:29:
40:6c:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:32:53 2025 by rpki-client