Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KFcp7LdjVy35SahWFoUS7kgm_jY.roa
File: KFcp7LdjVy35SahWFoUS7kgm_jY.roa (raw, json)
Hash identifier: qBkHofmKdbWf5SOainG+rxowFZlm817tFXm74T4JNR8=
Subject key identifier: 28:57:29:EC:B7:63:57:2D:F9:49:A8:56:16:85:12:EE:48:26:FE:36
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01957F3737170298ED45B63B7983F33AC4C6
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KFcp7LdjVy35SahWFoUS7kgm_jY.roa
Signing time: Mon 10 Mar 2025 08:41:19 +0000
ROA not before: Mon 10 Mar 2025 08:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a09:6280:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:37:37:17:02:98:ed:45:b6:3b:79:83:f3:3a:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 10 08:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285729ecb763572df949a856168512ee4826fe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:5a:d2:6c:3f:7e:43:24:20:41:f7:54:67:
4e:65:22:43:dd:4c:78:d2:26:4a:2c:05:0f:9b:be:
5a:50:c3:47:ab:aa:89:f9:d6:4b:6a:1e:38:63:9b:
4e:06:e0:c7:ad:3c:90:1a:2c:e0:25:91:5e:c8:4b:
0f:9a:b1:48:8b:52:82:3c:6d:5c:4b:04:ad:f2:7e:
fe:54:87:34:fb:c2:42:7f:2b:fd:82:d6:ca:a4:0b:
7b:c7:79:54:cb:b4:90:da:b0:43:07:45:f7:cf:fe:
e0:f1:1c:60:4c:15:0c:7b:35:fa:5a:f7:72:8a:a8:
1d:a2:58:35:fd:cd:08:dd:8d:dd:0c:d5:4c:d2:64:
23:93:b7:d3:4c:31:82:39:87:a4:e1:4c:d8:87:cc:
2f:ef:99:4d:2b:e8:b9:da:da:cf:88:a5:06:64:b7:
d5:63:31:12:d8:1b:bf:3d:1f:52:85:55:47:07:63:
52:de:26:0c:88:51:59:6e:fc:75:06:82:0b:23:57:
ed:59:1a:f9:57:2e:3e:a9:fd:97:06:b7:58:e1:9c:
cf:8b:d7:10:b2:e6:50:06:1c:5e:a4:b1:2f:f4:3f:
bc:78:d1:b8:11:0a:71:a3:7b:a5:e3:8d:6b:84:93:
8d:40:28:7f:a3:22:45:30:eb:2c:f8:28:ee:08:96:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:29:EC:B7:63:57:2D:F9:49:A8:56:16:85:12:EE:48:26:FE:36
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/KFcp7LdjVy35SahWFoUS7kgm_jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:b::/48
Signature Algorithm: sha256WithRSAEncryption
64:ed:bd:6e:b1:85:14:ad:f3:47:2a:60:dd:73:cd:b0:e1:64:
d9:bf:b9:85:f5:8f:90:f1:ed:bc:1e:c7:01:69:58:7c:35:95:
49:99:d6:b3:ba:bc:a6:00:4c:e6:c0:ae:36:b7:1e:16:ec:74:
a3:56:d1:5c:22:4f:db:79:c6:37:01:0b:e8:82:7b:e4:9b:33:
28:bf:90:42:f5:16:8e:b5:39:ce:55:1a:19:53:65:fd:04:29:
a9:0c:03:9b:06:fa:a8:1c:3d:19:f1:d6:96:31:ca:c3:56:86:
b3:b8:9c:8e:ef:01:a3:1c:58:ec:ed:ad:76:7f:94:d3:2d:d9:
00:a8:5a:0a:c2:b4:8d:25:6f:02:34:8a:58:5b:ac:5d:6d:91:
2e:00:b4:5b:8e:6b:5b:71:fe:61:13:9c:07:ad:2b:49:43:60:
4e:e6:83:8d:a0:72:7e:82:55:4c:af:5b:da:34:86:8d:cb:01:
ed:aa:c3:32:4c:23:16:a1:e1:8f:26:ff:7b:7b:72:40:66:a8:
5d:74:30:54:61:3d:5d:c8:e1:ab:74:d4:fd:d5:2d:ac:60:89:
bf:d9:11:18:95:ff:4a:6f:34:1f:c6:b4:6c:51:f8:1d:da:c2:
d1:05:89:49:8b:0b:99:36:57:21:8c:df:9e:96:1b:9d:aa:56:
09:9d:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:58 2025 by rpki-client