Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5GpN33ElR1lUI3r69WNur5XVlhs.roa
File: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (raw, json)
Hash identifier: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=
Subject key identifier: E4:6A:4D:DF:71:25:47:59:54:23:7A:FA:F5:63:6E:AF:95:D5:96:1B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0DC23DA045CA3234DF627285C212
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5GpN33ElR1lUI3r69WNur5XVlhs.roa
Signing time: Thu 02 Jan 2025 09:48:57 +0000
ROA not before: Thu 02 Jan 2025 09:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206361
IP address blocks: 2a09:ff00:300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0d:c2:3d:a0:45:ca:32:34:df:62:72:85:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46a4ddf7125475954237afaf5636eaf95d5961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:01:d9:72:fa:71:3d:9c:9e:b9:bb:ec:35:
3d:37:a5:25:58:57:41:31:43:5b:ae:95:72:d9:70:
24:0f:ac:a2:7a:5c:a5:b4:5d:1a:65:60:d8:c6:9d:
52:c1:bf:9d:6c:17:90:98:7e:40:03:f5:6a:d8:3c:
5a:dd:21:d3:7f:37:23:b3:26:05:7e:57:69:45:fb:
0c:55:7d:a8:65:fa:63:5b:d8:a2:1c:63:a1:6e:3f:
0f:a1:22:e9:d4:d2:c2:71:b9:cf:46:21:c3:72:e9:
93:9c:d7:ab:7e:a9:a0:05:b1:00:32:32:77:71:6a:
06:61:53:f4:3c:b9:89:57:83:f6:a2:87:b1:83:72:
f7:16:3f:5b:ee:83:51:38:d8:17:3b:b8:ab:62:e5:
61:30:48:35:2f:81:55:14:c7:ae:3f:7b:8a:9b:2b:
6d:7a:8a:5d:35:17:01:ac:4c:27:1a:71:7a:0d:2a:
35:ef:b1:ad:66:60:09:8c:59:b8:e0:18:18:1f:59:
1a:86:9a:79:c8:d5:1a:42:db:6b:c8:08:1b:40:e4:
3d:ac:88:4f:4d:84:7f:c6:73:2d:a2:86:c5:35:bb:
81:23:48:6d:a1:21:97:d2:b3:47:64:ab:71:3c:40:
03:21:e0:67:c6:d9:c7:63:2e:7d:8e:78:50:a7:bd:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:4D:DF:71:25:47:59:54:23:7A:FA:F5:63:6E:AF:95:D5:96:1B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5GpN33ElR1lUI3r69WNur5XVlhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:300::/44
Signature Algorithm: sha256WithRSAEncryption
55:ad:7b:57:cf:66:b0:dc:f9:9a:ad:f8:a2:64:61:94:55:6e:
20:b1:91:97:24:ca:4b:ef:0a:94:ff:89:54:ca:cd:5e:8a:01:
cc:ee:90:f2:df:36:fa:b9:da:21:ff:5e:1c:9a:9a:04:d7:17:
d2:ac:2d:5a:92:12:17:cd:ac:dc:69:13:3a:55:e7:24:c9:f0:
ef:37:dc:54:31:21:f5:dd:e4:bd:ee:3b:3e:85:15:be:d0:42:
05:ea:33:e4:97:2d:08:66:d4:cf:c2:c5:15:3e:ea:46:32:2a:
10:d1:d9:48:9d:f4:1a:e3:ac:1d:27:bd:55:a9:6f:cb:6b:da:
a9:1e:bd:b5:f2:ad:d7:14:40:8f:cd:80:56:84:a8:f4:a3:e1:
26:6e:2b:64:50:fe:a2:3c:9a:f4:ff:f7:02:ea:04:0d:5d:12:
a7:de:be:8e:e2:4f:2d:5b:b4:30:06:7c:d0:ec:24:6a:61:2b:
e4:0d:32:cb:ca:a6:7f:be:43:08:6f:b3:30:c5:c8:ce:19:9e:
2c:78:8f:2c:d9:ff:ff:67:44:b0:ed:c8:12:f3:e4:35:09:ab:
94:5d:eb:1f:98:41:5a:80:aa:d0:06:9c:82:da:f8:2f:45:be:
2d:3e:fa:6f:24:ea:c8:c3:3d:1a:45:57:d5:b5:c0:a3:a8:bc:
b1:ab:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:00 2025 by rpki-client