Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/bdN5bSk-xsk3V329iHiH8aXvTdI.roa
File: bdN5bSk-xsk3V329iHiH8aXvTdI.roa (raw, json)
Hash identifier: B5/9B1uBl6eNvv9W6TPaWnFzqWQvfYoiY7n1wWqxjpc=
Subject key identifier: 6D:D3:79:6D:29:3E:C6:C9:37:57:7D:BD:88:78:87:F1:A5:EF:4D:D2
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01942067C8B01395A755770D61B7151D2ABD
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/bdN5bSk-xsk3V329iHiH8aXvTdI.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215434
IP address blocks: 2a01:f3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c8:b0:13:95:a7:55:77:0d:61:b7:15:1d:2a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dd3796d293ec6c937577dbd887887f1a5ef4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:a9:a4:fd:de:4b:41:46:20:e7:aa:db:49:
c9:3d:c6:49:a1:53:f2:80:cd:21:99:af:9e:89:f4:
6c:da:9e:85:8e:d4:83:c8:4d:83:52:42:fd:67:a7:
a6:31:3a:33:2e:02:c1:ea:ba:2e:a2:2f:43:9f:ee:
d3:27:44:14:47:25:b1:45:a4:78:b9:99:96:30:ce:
3d:ca:f2:71:4d:bd:1a:b7:c6:c4:8e:74:44:ee:4f:
53:4c:40:7e:27:62:83:2f:72:9c:29:65:b3:76:c7:
d3:18:d6:50:85:15:47:a2:ab:21:b2:67:71:bb:e7:
b6:02:e7:39:66:47:12:f9:bf:c8:0a:33:82:df:4f:
b9:6f:9e:2e:83:90:f7:01:1c:a0:f5:4d:1f:84:b5:
22:04:b4:e2:aa:e0:dc:8a:9a:1f:8e:c3:d6:ee:b0:
e8:53:70:36:85:18:bb:50:20:da:e8:c9:2c:b2:d5:
36:1f:18:cd:9a:5e:14:89:67:d4:fb:8a:80:d9:a3:
a1:4b:f0:ea:04:05:77:c8:22:91:ea:c3:56:59:93:
ea:fd:f3:fe:aa:7b:d9:2d:00:af:91:69:d8:fa:5d:
0c:65:ae:b4:5d:62:19:7c:79:f8:9a:77:c7:02:73:
60:a0:36:1f:48:57:5a:31:79:15:e4:f9:64:04:8c:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:79:6D:29:3E:C6:C9:37:57:7D:BD:88:78:87:F1:A5:EF:4D:D2
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/bdN5bSk-xsk3V329iHiH8aXvTdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:a6:85:ff:3a:2b:06:51:92:18:0e:58:ba:c5:04:46:c5:43:
ef:76:3d:7e:ae:c8:93:37:95:c6:00:8c:5e:78:21:47:7a:fc:
7e:bb:99:ea:6e:6f:87:d7:22:50:df:0b:99:1c:46:b6:ef:a8:
82:fa:2c:26:c5:5b:df:a9:70:43:04:5f:ba:10:47:bf:ac:a0:
e3:35:a8:9d:be:df:22:fd:16:bc:b5:86:05:06:a1:14:93:c6:
ec:8f:a6:c5:99:4f:f9:27:63:3c:6a:fe:69:a0:a2:2e:53:e8:
23:e1:f3:16:39:31:b8:81:90:8d:76:93:b6:b9:d4:56:d1:d8:
93:37:ee:09:a9:65:16:7a:49:58:cf:5c:cd:e2:80:7b:a3:c4:
d2:20:a4:bb:ec:1e:ea:e1:e9:64:0e:ff:95:a6:fc:b0:e3:d1:
35:e1:0a:42:75:4e:66:bb:6c:57:1a:50:32:82:e9:78:01:74:
18:4d:1d:d7:52:fe:bd:f6:82:6c:17:2b:e8:b9:25:ba:ff:fc:
28:c2:1e:1e:df:bd:bc:9d:ac:d7:45:b9:3e:1d:9c:01:6a:13:
61:d9:8d:1d:da:71:b1:4a:6d:2f:3c:03:69:e1:a5:d7:40:c0:
3a:9a:e2:cd:2e:b9:42:33:4c:bc:4a:5d:dd:9b:1b:72:f9:4b:
81:43:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:40 2025 by rpki-client