Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa
File: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (raw, json)
Hash identifier: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=
Subject key identifier: DB:1F:21:BA:04:B8:52:2F:4A:69:3F:8B:6A:A7:5B:51:FD:20:A9:FA
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 01941F8C9C1BDAE06F2B4608F58080103044
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201281
IP address blocks: 2001:678:794::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9c:1b:da:e0:6f:2b:46:08:f5:80:80:10:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db1f21ba04b8522f4a693f8b6aa75b51fd20a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:51:53:10:26:d5:b8:4a:d9:2a:3e:a1:dc:
61:4c:1c:d6:5b:09:1f:0e:d4:5d:e6:c5:4c:05:73:
0a:e2:75:89:64:06:bf:cd:7d:ce:cd:72:82:b4:7d:
06:d7:20:23:f4:17:d5:4b:78:52:e2:c0:07:a9:e2:
1a:28:7f:b6:88:e6:c6:ea:89:cf:97:ee:45:0e:a0:
d0:77:6f:8f:31:d4:44:ef:4c:60:2e:ce:12:e2:57:
8b:c8:2e:ba:fc:c8:b3:e5:af:6b:fe:ec:06:fd:eb:
df:a8:cf:9b:af:29:a2:86:06:59:b5:5d:4e:e9:50:
cc:5a:38:1d:8e:37:df:8e:00:36:93:44:d5:ff:e0:
55:d5:8a:ab:d9:ff:f4:f4:7b:39:cb:7b:ce:df:ae:
ff:f7:17:ac:96:4f:51:a4:0e:cc:26:28:06:51:85:
ec:f5:8e:13:82:4b:1f:dc:35:1e:91:02:e4:d4:9e:
e5:6c:66:72:59:53:a2:a8:6b:cc:6e:62:c8:2f:43:
ac:b8:09:ac:12:9d:5b:5d:97:1f:b8:e4:8b:f1:a4:
0c:ea:79:14:15:85:02:d0:a6:ff:20:05:20:56:3d:
98:6a:e1:78:a6:bb:79:a6:b0:94:de:5f:10:3f:b5:
ff:d7:56:d4:81:88:40:4a:7c:e0:8a:49:24:4c:ee:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:21:BA:04:B8:52:2F:4A:69:3F:8B:6A:A7:5B:51:FD:20:A9:FA
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:794::/48
Signature Algorithm: sha256WithRSAEncryption
e3:16:da:19:48:e2:89:e9:2e:17:c1:96:39:8d:79:6e:3c:f0:
44:1b:8f:a7:14:62:ef:19:9f:24:52:87:3f:ae:60:b9:12:1d:
7b:fa:8c:0f:e1:ed:4d:cb:91:65:7e:af:cf:52:c2:78:22:b8:
a7:10:a7:04:c5:2b:c7:3f:9d:c8:98:10:00:77:14:36:f1:26:
1d:35:a2:f0:bc:a5:3c:bc:f2:c6:cd:50:9a:e2:a7:fb:c3:86:
57:72:eb:c6:28:13:b8:fc:f4:62:fa:fc:dc:27:53:5c:1e:6e:
36:1e:4a:b3:32:62:b7:c0:a4:2f:09:52:16:69:fc:17:95:e1:
7a:78:34:42:ac:fb:97:24:ac:61:be:4f:02:82:83:6b:a0:ea:
3b:c5:7f:66:18:57:9c:cc:c4:59:a2:28:8f:63:b8:8a:d8:bc:
f1:52:46:e5:67:da:c9:f7:13:5b:a3:32:83:23:c8:f4:24:b5:
6f:2b:cb:b7:3c:d1:8b:c9:9c:86:10:37:e0:7d:d0:15:df:0f:
91:a1:bc:69:07:d4:30:17:d2:55:2d:fe:42:85:77:40:e8:1b:
e5:66:c5:15:28:49:42:11:e4:d8:fe:3e:aa:3d:38:d9:0a:04:
e7:ce:81:eb:cc:52:47:ea:3d:d2:a9:3f:ad:d1:35:d2:55:52:
2d:84:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:23 2025 by rpki-client