Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa
File: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (raw, json)
Hash identifier: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=
Subject key identifier: D6:80:E0:60:95:5A:A3:2E:9A:D5:49:4C:26:35:7E:1D:E6:1A:57:1C
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 01942368C6B91C9E96E86328F1F65520069E
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48282
IP address blocks: 2a0d:8480::/48 maxlen: 48
2a0d:8480:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c6:b9:1c:9e:96:e8:63:28:f1:f6:55:20:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d680e060955aa32e9ad5494c26357e1de61a571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:df:96:4f:ff:5f:b8:da:82:72:68:70:56:
6f:e4:73:13:1b:8b:3d:7c:15:3b:96:38:28:87:62:
82:e5:b5:dd:d3:0e:5d:c9:cf:66:47:d4:91:82:7c:
55:29:c0:12:69:13:20:0b:86:86:db:0a:7a:b4:57:
6f:b6:e2:ff:5d:4f:45:f2:ed:32:ed:80:f3:17:c3:
a8:df:18:08:bf:81:c9:cf:16:9c:af:70:30:54:5b:
36:82:3e:94:be:8e:33:9f:d5:d9:a6:92:48:36:63:
79:94:bc:40:d5:be:b1:0c:f5:d5:5d:c8:4f:04:a6:
b7:6a:3f:5d:23:eb:7e:cf:bb:57:eb:19:07:53:73:
31:7b:16:40:88:c2:ef:25:76:10:08:87:9b:d8:0e:
23:dc:80:49:6d:71:76:5f:67:c8:62:ee:85:67:f0:
07:62:81:52:9b:67:be:9c:11:d6:a6:bc:65:0e:ae:
ad:7d:c5:df:4b:06:ed:72:ca:98:d9:9e:e2:98:63:
92:c6:c4:c1:78:af:b3:98:16:00:04:9d:ac:df:1e:
a3:18:f8:f0:55:3c:17:eb:06:0f:60:33:59:5f:ed:
45:fd:64:b4:a2:71:1c:7e:3a:c8:34:69:1b:a5:44:
93:51:1b:b8:08:dd:62:5c:62:fd:6d:1a:50:69:77:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:E0:60:95:5A:A3:2E:9A:D5:49:4C:26:35:7E:1D:E6:1A:57:1C
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8480::/48
2a0d:8480:2::/48
Signature Algorithm: sha256WithRSAEncryption
41:d2:bd:46:73:93:ec:bd:20:db:ad:0b:e2:fe:a5:95:91:34:
ab:9b:b9:1e:db:11:74:98:a8:c2:fb:47:30:b9:8b:73:7f:a8:
66:cd:2e:ff:64:22:6d:f2:e3:41:1b:28:48:be:07:04:53:0e:
3c:c4:e4:17:d3:7b:56:54:cd:2b:33:9a:aa:96:b3:e8:af:39:
17:f8:33:47:e4:ff:21:1d:f2:9e:1b:ef:79:40:34:66:12:98:
54:7b:d9:d4:45:38:e3:b6:ec:2d:d1:37:18:e2:a5:5f:b7:c1:
e4:99:89:74:f6:1a:18:15:0b:87:9c:c5:6a:ba:1b:94:fb:a7:
93:e1:e3:06:05:1e:60:b3:19:d0:ff:1f:42:ea:dd:5b:62:1d:
ba:f8:d0:75:a2:d1:dd:44:e3:e8:40:d0:a4:93:56:cf:dd:a8:
fb:a5:26:06:15:09:0d:1f:6e:2e:fa:65:8a:49:e6:ba:9d:ed:
f8:68:01:8e:39:88:50:9d:5c:56:3b:d0:46:0e:e3:9b:36:ee:
5f:d0:2e:b8:74:fb:80:f4:e2:44:e3:33:a4:ba:8b:f1:3a:5f:
56:78:f4:65:ba:e6:71:ab:6d:9d:03:57:aa:1b:04:89:62:98:
8c:07:16:79:8e:b4:12:79:60:43:af:da:20:72:fa:c1:0f:4d:
b4:94:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:58 2025 by rpki-client