Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDxPi8BRPkDLzZbmkdDL47rj_X4.roa
File: dDxPi8BRPkDLzZbmkdDL47rj_X4.roa (raw, json)
Hash identifier: cURf3T662dF1AkSPhSrUJ4QpWy5vQ1/EJ0cJLgED/TY=
Subject key identifier: 74:3C:4F:8B:C0:51:3E:40:CB:CD:96:E6:91:D0:CB:E3:BA:E3:FD:7E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0194282579604BCEE0E8443E59BE9690A2F1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDxPi8BRPkDLzZbmkdDL47rj_X4.roa
Signing time: Thu 02 Jan 2025 17:52:11 +0000
ROA not before: Thu 02 Jan 2025 17:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215665
IP address blocks: 2a0f:b241:25::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:79:60:4b:ce:e0:e8:44:3e:59:be:96:90:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743c4f8bc0513e40cbcd96e691d0cbe3bae3fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:fd:ff:30:f9:04:4f:e8:38:c0:24:73:7d:
28:79:0d:d4:9f:f3:e7:b2:fb:8d:d0:84:20:67:51:
58:af:68:52:2f:30:78:13:3b:67:11:32:b2:e9:45:
46:80:9c:6b:e3:46:92:fb:72:43:58:84:78:4d:8b:
9a:93:ef:f4:31:6e:03:1f:35:8b:b6:5a:99:44:32:
dd:e4:c1:1e:a7:c9:68:d9:f1:3b:20:e5:e5:be:94:
7c:62:e3:df:5b:6d:99:d7:dd:ef:c7:23:f7:0e:88:
e3:a4:7f:c0:cf:4e:f1:2a:0a:dc:8e:a1:b7:dc:9a:
a7:52:cb:dd:10:5a:cd:10:71:2e:60:56:b9:4f:16:
c3:ae:8b:95:23:91:a9:60:2d:ee:17:58:4c:73:54:
a4:60:67:ab:c8:98:27:21:21:c3:8f:0b:c5:22:05:
31:fe:52:b3:b1:95:f6:57:0c:b2:84:77:00:c2:87:
f7:10:24:54:56:c9:69:4e:72:56:bd:9d:c5:22:ef:
28:cf:a1:c0:d4:ce:f5:98:04:f3:e8:9b:43:30:34:
ec:97:04:bc:d2:06:95:ee:76:8d:18:75:3d:d2:98:
37:4b:16:ba:73:0b:c8:f2:b6:74:19:df:08:61:9c:
70:5a:89:dd:5d:95:48:fd:a0:c4:90:52:9c:1a:4e:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:4F:8B:C0:51:3E:40:CB:CD:96:E6:91:D0:CB:E3:BA:E3:FD:7E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dDxPi8BRPkDLzZbmkdDL47rj_X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:25::/48
Signature Algorithm: sha256WithRSAEncryption
2f:df:4c:78:a5:9d:ba:e0:9c:84:16:5f:79:ef:8f:51:b8:33:
36:45:74:3d:6a:9a:01:1c:b4:63:5d:8f:d9:7f:fc:11:8e:ca:
c7:16:1f:06:85:fd:51:77:4b:f1:33:8f:5d:e5:d2:cd:e4:77:
c2:ab:ac:18:e6:72:f8:88:52:73:bf:eb:1e:7e:08:ed:27:4b:
f7:c6:2b:02:19:83:cc:fd:42:a5:80:f3:f2:f1:f5:60:de:8f:
66:c3:de:42:90:fa:e4:58:0a:50:22:40:81:1e:40:76:b2:ad:
15:3e:64:f9:74:f4:c5:31:a0:e7:13:c4:34:ad:1c:3e:4d:f2:
1f:6f:fb:5e:9c:ea:26:67:00:00:91:2b:f5:9c:6b:55:82:53:
b9:fe:c1:5f:01:d6:35:d5:72:a7:d7:fd:64:bb:3b:93:06:0d:
73:e3:69:80:fe:71:21:a2:8b:b7:12:88:2a:9a:17:45:df:86:
f2:6b:40:a0:99:da:ab:ac:16:07:12:0d:a8:c6:18:76:f7:5e:
ea:ba:cc:d6:5d:f4:6b:0d:c2:fa:5a:50:d8:7d:f5:ed:d6:98:
be:5b:7a:a8:56:1f:5d:d1:b5:ac:fc:f3:29:a7:c3:f2:b8:48:
78:df:c6:90:d9:33:af:bc:9c:b8:48:4a:1d:89:f8:02:7e:de:
da:c0:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:01 2025 by rpki-client