Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dibbWupOsWc9H79KFYrhZmdqT1Q.roa
File: dibbWupOsWc9H79KFYrhZmdqT1Q.roa (raw, json)
Hash identifier: lkObvsnKEVhS2EFxcuzbjYFVtWgxrplK0vfD1TuC/I8=
Subject key identifier: 76:26:DB:5A:EA:4E:B1:67:3D:1F:BF:4A:15:8A:E1:66:67:6A:4F:54
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01948C2732604B4F98E65201DE331FC2D41E
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dibbWupOsWc9H79KFYrhZmdqT1Q.roa
Signing time: Wed 22 Jan 2025 03:56:06 +0000
ROA not before: Wed 22 Jan 2025 03:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214016
IP address blocks: 2a0f:b244:200::/40 maxlen: 48
2a0f:b244:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:27:32:60:4b:4f:98:e6:52:01:de:33:1f:c2:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 22 03:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7626db5aea4eb1673d1fbf4a158ae166676a4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:c8:55:87:75:32:79:c6:91:8b:df:75:c5:
aa:1f:a3:85:e9:d5:14:a3:f3:d8:46:0c:d9:4b:fa:
8a:d5:04:3e:81:de:dd:bc:d3:47:c8:aa:f1:69:d9:
c4:ab:3c:76:20:17:0c:ca:ec:7b:b3:93:13:5f:d3:
42:d9:ea:45:11:49:db:f3:6e:95:2f:6e:a2:97:a3:
be:ed:a3:6f:dd:4d:0b:ed:87:13:e1:08:f9:af:0b:
e9:33:51:42:29:5d:7c:14:fc:27:c4:39:ad:c5:cf:
7f:0c:57:ae:91:0c:e2:5e:e8:5e:d4:5a:84:95:06:
ec:d9:ab:dd:7b:b8:20:a9:b7:27:61:1f:36:de:0a:
5e:55:92:5d:a6:f3:50:12:db:1e:07:2b:b1:a2:b3:
54:2e:f1:62:44:d0:54:b9:54:0e:03:46:a9:24:77:
ca:17:e4:b1:06:ed:53:bb:95:64:f4:96:53:f3:5c:
3c:00:c8:78:94:9f:f5:ef:5b:71:2f:7a:4e:a6:fc:
f5:74:95:d6:ef:8d:19:a0:d7:ec:66:05:d4:8e:e8:
05:94:ad:de:5e:fa:d4:cf:4c:a2:56:48:cd:86:4a:
bb:de:cb:68:84:f0:e5:be:fe:24:83:e3:49:4e:f1:
2b:98:22:b2:50:34:f8:f0:28:7b:1b:12:70:ff:ce:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:DB:5A:EA:4E:B1:67:3D:1F:BF:4A:15:8A:E1:66:67:6A:4F:54
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/dibbWupOsWc9H79KFYrhZmdqT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:200::/40
2a0f:b244:1000::/36
Signature Algorithm: sha256WithRSAEncryption
01:9c:58:f8:cf:9c:7a:b0:dc:db:c1:cb:37:c5:fa:fb:45:d3:
71:9a:c3:d6:ed:09:5d:a3:16:14:a5:3c:4e:36:c7:90:67:f6:
9a:bd:b6:2e:01:80:63:89:14:2f:13:a7:0a:d2:ac:f7:48:18:
db:b5:80:35:91:72:7d:19:5b:0f:65:31:d4:46:f8:e7:3a:bd:
1c:e5:5c:36:3d:6d:4d:5d:9a:07:24:61:d0:a8:4c:c1:0a:36:
f0:b0:21:7a:2e:d5:23:9f:ee:80:2a:ea:c3:50:60:f9:dc:15:
d3:13:8f:b9:0d:1a:45:61:4d:8f:11:99:6a:33:1a:92:cb:c2:
1c:23:50:9e:42:09:c2:c1:b6:a7:fd:5a:34:2c:ec:dc:7a:0a:
a8:e8:e4:30:ff:a4:d4:fa:47:66:af:ee:08:8e:7b:d9:52:3d:
05:b8:dc:7b:d7:09:a2:61:22:d4:3f:e9:c2:25:4b:8f:c0:1b:
3e:9c:ac:c7:2b:85:98:fa:5e:28:41:03:7d:9a:ae:c6:2e:73:
71:aa:13:32:41:48:a0:f4:96:44:44:0a:80:f5:3a:45:3c:2f:
d7:39:61:8c:82:8b:e1:3a:fc:1f:46:a3:55:22:83:52:f7:8a:
a0:16:8e:41:c4:d8:0d:31:d8:5b:cd:0b:23:a4:99:f6:0b:08:
52:95:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:19:17 2025 by rpki-client