Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/psFfy-RTu56maJeiy5fjnXb37D8.roa
File: psFfy-RTu56maJeiy5fjnXb37D8.roa (raw, json)
Hash identifier: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=
Subject key identifier: A6:C1:5F:CB:E4:53:BB:9E:A6:68:97:A2:CB:97:E3:9D:76:F7:EC:3F
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019425FD61E0A55F514235F25389C7E25ED8
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/psFfy-RTu56maJeiy5fjnXb37D8.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21396
IP address blocks: 2a05:98c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:61:e0:a5:5f:51:42:35:f2:53:89:c7:e2:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c15fcbe453bb9ea66897a2cb97e39d76f7ec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:ce:7f:41:71:b9:de:15:a2:a2:1c:54:c9:
4d:02:8a:81:eb:2a:c4:c0:09:5e:c2:bd:dc:cc:90:
ca:44:0f:c8:89:e9:65:9d:d5:9e:02:fa:5f:28:fc:
f2:e7:5c:90:9e:44:73:27:fc:fb:77:3f:0c:e3:c5:
32:cb:ef:8c:98:e5:16:d3:ff:18:4e:d2:22:d4:d2:
ea:81:48:cf:9d:20:96:3c:ff:29:04:19:39:ab:82:
10:cd:0c:9a:cb:37:f6:7f:f5:73:a6:44:01:13:22:
7c:ed:42:26:83:83:80:99:c9:97:a6:91:1b:09:2b:
5f:70:13:bd:0b:ba:fd:24:23:21:a8:73:2d:a4:e5:
28:72:20:da:cf:04:d0:df:ad:ba:1b:f1:94:1b:c6:
c1:e2:cd:bf:62:67:7f:6f:67:a7:d0:2e:f4:8a:eb:
01:3f:c6:ff:9d:f8:8f:10:db:fb:6e:06:36:4f:84:
03:10:28:40:07:a1:00:a5:44:fd:d0:cd:10:e1:ff:
97:3e:8f:83:ff:b4:08:b3:56:29:11:a2:f7:12:e1:
fd:70:fb:d0:e7:26:6c:b4:78:a7:f8:b4:2a:2f:4c:
c8:cd:65:9d:a5:9f:8c:c7:58:b4:50:2e:da:96:1d:
50:db:bc:32:f7:a9:d3:44:c7:36:ca:01:f3:e2:93:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:5F:CB:E4:53:BB:9E:A6:68:97:A2:CB:97:E3:9D:76:F7:EC:3F
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/psFfy-RTu56maJeiy5fjnXb37D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:cf:0d:f1:8c:e1:f7:a6:c8:59:99:ad:e7:5e:eb:33:7b:22:
84:b0:c0:33:86:bd:01:a1:94:f3:09:57:a6:ae:91:51:9c:48:
a4:9d:07:14:99:be:00:e6:65:cc:0c:95:9c:b4:f3:d5:33:bc:
8b:35:c2:ee:7e:b5:41:75:4c:67:2e:ab:75:19:53:91:60:a5:
1d:3f:6f:3f:fa:8c:5a:a3:de:33:1b:7b:c8:00:9f:85:8d:44:
d2:94:d2:59:36:4c:69:33:2b:39:cb:2b:f3:dc:66:c9:1b:a3:
53:8a:2b:8a:9d:bc:22:8e:24:88:ed:54:6c:ea:d8:7b:76:88:
16:71:06:5a:00:9f:dd:8f:d1:a1:8f:fb:af:49:e1:84:15:f0:
a1:6f:e4:b5:af:b1:d8:af:93:f1:c9:38:5a:c0:04:7d:a2:87:
cb:ba:5c:9d:dd:ce:c5:0d:1b:9a:e8:ee:12:96:6f:a7:5c:ef:
63:b4:61:ad:d4:23:e8:4f:9d:63:b6:47:f1:98:77:d0:be:d9:
1c:b9:39:06:1d:fc:bb:dc:08:d8:fa:21:1b:2f:c1:67:15:d9:
4b:10:fe:bc:57:0d:e6:f2:47:0b:4d:8d:0b:4c:03:5f:69:ce:
be:4e:42:f9:29:9c:83:24:c3:04:20:86:48:de:50:15:57:a1:
1d:10:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:29 2025 by rpki-client