Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Rn8OIh8zHAwmG50kXHn-kNbTEto.roa
File: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (raw, json)
Hash identifier: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=
Subject key identifier: 46:7F:0E:22:1F:33:1C:0C:26:1B:9D:24:5C:79:FE:90:D6:D3:12:DA
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019423D7D58B08986ECC5A3C68746617D364
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Rn8OIh8zHAwmG50kXHn-kNbTEto.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a12:5980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d5:8b:08:98:6e:cc:5a:3c:68:74:66:17:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467f0e221f331c0c261b9d245c79fe90d6d312da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:91:e3:d5:70:06:61:85:c0:61:a0:83:e1:
93:2b:dc:85:ad:40:42:90:e9:a6:15:20:9b:73:a0:
62:cd:b9:05:47:97:dd:df:5a:f0:4f:5d:14:a7:58:
39:c4:ae:30:f0:27:b0:ba:18:01:23:77:bd:11:8e:
a3:76:72:20:ec:e1:89:7d:d6:54:2b:c9:9d:9e:31:
ec:d2:4a:79:f2:00:92:78:9e:40:0a:5c:8c:2a:2e:
7e:e7:e9:3d:8f:b8:25:26:2e:97:0e:11:91:04:9b:
67:fa:7a:e3:89:c6:00:77:d8:e0:29:4b:ab:f8:54:
5d:e7:c8:a6:e9:f6:37:b8:c0:b7:dc:29:26:0f:69:
7e:b8:2d:4b:fe:74:97:c3:30:81:b9:19:72:19:44:
1f:75:70:24:51:88:29:3a:af:c7:f3:d0:0f:27:b4:
e5:3b:4b:37:85:39:84:d2:7d:b2:9a:55:82:59:6c:
7e:c2:4d:06:d2:84:fb:7d:c1:71:f0:8a:6b:97:5e:
b1:18:80:b2:a4:2e:28:a4:9c:26:ce:36:87:ce:07:
c7:68:b3:73:b0:be:00:88:0f:87:a7:6d:49:d3:d2:
17:c1:b8:42:6f:55:00:d6:c3:0f:d9:ad:7d:c1:07:
54:f3:1b:60:56:f5:7c:8c:79:13:08:0e:9d:16:3a:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:0E:22:1F:33:1C:0C:26:1B:9D:24:5C:79:FE:90:D6:D3:12:DA
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/Rn8OIh8zHAwmG50kXHn-kNbTEto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5980::/29
Signature Algorithm: sha256WithRSAEncryption
7c:26:c9:f6:73:05:8a:68:fe:ee:d5:a4:b8:5e:cd:a1:59:6b:
bd:3b:c2:69:57:7a:af:18:eb:9c:e9:01:29:f6:96:47:9f:b6:
31:21:cd:4e:bd:d0:21:0f:0f:aa:5b:b3:f9:fd:5f:33:91:dc:
fb:66:c1:50:47:f1:bc:7e:3b:44:b7:93:a2:78:95:ec:8d:15:
04:e7:16:ee:3b:5f:8b:c4:ee:84:01:45:a8:65:d8:2c:73:33:
79:51:6e:fc:68:16:d6:fa:8f:e3:ff:84:2d:fb:b0:99:fa:4d:
8a:0a:ba:89:d9:d1:be:b4:9d:db:56:78:07:e6:94:58:c1:36:
75:43:94:60:34:40:04:8c:30:6f:76:b0:16:d5:50:90:cc:f2:
cd:9e:2a:f5:43:19:cf:e0:1f:6b:ae:0d:ab:dd:ec:ef:aa:6d:
19:cb:29:64:13:c3:6b:80:4b:15:dd:a1:3a:bb:6f:aa:01:51:
e6:84:85:a0:22:b4:06:f4:50:0c:c0:e0:0e:5f:d8:99:07:9f:
26:ac:68:e2:7c:e3:27:bc:f0:40:2e:24:69:32:ed:47:74:bb:
d6:81:03:6f:aa:f0:2a:03:6c:85:0b:81:6c:c9:eb:7e:71:93:
08:51:98:a2:2d:77:36:54:ee:16:a8:2f:1e:71:01:25:14:25:
8b:72:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:57 2025 by rpki-client