Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa
File: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (raw, json)
Hash identifier: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=
Subject key identifier: D5:10:19:4A:AE:FF:04:22:17:30:F2:E6:08:D6:01:C2:74:4F:55:E3
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01942745CEAAE0C1E5650E7BCC5F540710F8
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa
Signing time: Thu 02 Jan 2025 13:47:53 +0000
ROA not before: Thu 02 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51558
IP address blocks: 2a03:2100:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:ce:aa:e0:c1:e5:65:0e:7b:cc:5f:54:07:10:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 2 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d510194aaeff04221730f2e608d601c2744f55e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:76:12:23:3f:ec:a1:e3:7f:c3:b5:1b:70:
d4:2b:0b:1f:59:03:ab:ac:ac:4f:94:b2:e9:b1:ac:
66:ff:d2:56:72:03:85:72:47:e8:58:7d:65:47:da:
8f:4c:31:f7:ed:30:94:89:a8:0a:a4:92:d9:58:61:
b5:2f:80:ad:38:24:5a:70:e3:6d:39:a0:fe:80:35:
fd:dc:3f:3a:db:16:8e:a9:2e:ae:c6:17:a9:46:d7:
a7:da:a6:2d:25:a2:a7:fc:e0:5b:a3:75:6b:cb:29:
ef:12:3c:2f:51:be:56:a2:94:44:65:45:e9:b1:58:
14:8c:cc:ed:29:96:18:ad:d8:f0:bc:5b:27:d6:a4:
f7:cf:a7:6e:98:b5:9e:9b:57:f6:59:70:fc:9b:ea:
a3:a6:8b:59:04:1d:da:d7:73:58:f0:76:0a:cf:5c:
97:9f:45:b6:84:25:a2:1b:43:a7:c4:54:45:33:25:
27:48:7b:9d:18:da:7e:cb:e2:83:ee:93:65:15:3a:
da:57:ad:96:29:66:f7:12:51:da:a7:59:8b:56:44:
9a:fe:ed:05:b3:f8:1e:c8:7c:73:23:8c:9f:54:28:
6d:f9:f4:d1:75:29:ef:64:2c:d7:7b:3e:ec:6d:6c:
fe:5b:a3:7c:20:f4:80:24:5e:97:d0:97:8d:24:5c:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:19:4A:AE:FF:04:22:17:30:F2:E6:08:D6:01:C2:74:4F:55:E3
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2100:1a::/48
Signature Algorithm: sha256WithRSAEncryption
72:f0:c9:f1:91:f4:5a:41:5a:99:2c:10:0a:35:5d:83:aa:48:
ce:f5:97:c1:4f:f9:6f:64:3b:be:86:ec:f2:bb:2a:d9:43:76:
ff:2e:b2:8d:84:c9:16:43:7f:f4:e8:b2:87:86:d7:8a:e8:c2:
b4:8f:85:a7:d3:16:8f:30:95:fe:34:46:23:14:2d:af:d4:21:
a0:e8:c9:32:06:28:e2:fd:12:d7:92:75:5d:e9:b0:b8:fa:6e:
b4:e8:6e:ba:52:a9:ac:a2:34:94:7b:e7:f1:6c:0c:a0:b4:ff:
d9:a9:76:5c:6f:a5:0c:e2:a4:ee:15:b8:11:dc:ee:d9:f4:25:
dc:cb:d8:58:a4:95:66:06:f9:54:61:d4:c3:d8:94:44:96:dd:
11:ba:29:69:50:54:85:80:4f:0e:9d:fe:f8:92:bd:38:29:f4:
ac:9e:9b:23:f1:00:cb:56:ab:f8:47:6a:e9:70:ed:4c:cb:73:
cb:d5:fc:2b:63:d8:bf:61:be:66:0b:48:68:00:ef:21:4f:39:
40:35:0d:da:af:11:4b:10:fa:56:68:ea:9e:8f:93:98:c3:47:
14:55:59:c3:2a:91:7c:ec:13:94:cc:ef:af:91:65:41:7f:f8:
92:20:6c:ad:2e:4f:51:a8:6a:94:da:3e:6c:d7:2f:bc:6d:1d:
81:78:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:57 2025 by rpki-client