Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/_fujGwS7AvJPqoOsH0P26Tpg-to.roa
File: _fujGwS7AvJPqoOsH0P26Tpg-to.roa (raw, json)
Hash identifier: 0CM4FBddCR8HkfgMs3FXDrZ7XiEN9CRtp9A1ZKbe8P0=
Subject key identifier: FD:FB:A3:1B:04:BB:02:F2:4F:AA:83:AC:1F:43:F6:E9:3A:60:FA:DA
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0193152058929E70CE2FBFEFCA9A29671DB7
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/_fujGwS7AvJPqoOsH0P26Tpg-to.roa
Signing time: Sun 10 Nov 2024 08:11:01 +0000
ROA not before: Sun 10 Nov 2024 08:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:6284::/32 maxlen: 32
2a09:e5c0::/32 maxlen: 32
2a09:e5c1::/32 maxlen: 32
2a09:e5c2::/32 maxlen: 32
2a09:e5c3::/32 maxlen: 32
2a09:e5c4::/32 maxlen: 32
2a09:e5c5::/32 maxlen: 32
2a09:e5c6::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a10:4103::/32 maxlen: 32
2a10:4104::/32 maxlen: 32
2a11:4b46::/32 maxlen: 32
2a11:4b47::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:15:20:58:92:9e:70:ce:2f:bf:ef:ca:9a:29:67:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 10 08:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdfba31b04bb02f24faa83ac1f43f6e93a60fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:8a:ba:ee:7e:b8:82:49:42:14:83:82:55:
42:ea:cc:8c:1a:df:9e:50:c2:a2:99:b7:22:c5:bd:
21:78:02:a5:9a:b0:ef:4c:26:fd:92:f9:bc:55:ae:
41:ff:a8:b6:c7:8d:64:a5:75:cf:4c:43:d2:e2:fc:
dd:01:65:0f:14:aa:94:c0:9a:97:38:fa:98:ca:5c:
7f:7a:36:23:c7:ba:f6:5f:50:4d:9a:95:72:ea:e1:
ae:3b:75:d9:1a:15:9e:00:57:0c:68:1e:6f:c4:97:
af:15:bc:17:ab:9e:65:24:ed:c4:7f:89:45:56:64:
65:0d:b6:a0:30:46:b3:e6:3b:f6:a5:64:30:50:64:
36:ce:cf:cd:26:69:7f:73:69:6d:14:fc:05:15:45:
3f:f6:f9:82:07:ed:6e:18:95:c2:0e:48:01:4f:40:
f2:0b:d3:98:97:4f:02:a0:f9:b2:80:8e:1e:9c:7c:
1a:a4:c2:71:9a:ec:09:58:91:2d:aa:1e:e3:5a:9c:
0e:88:f4:ec:68:db:85:d9:c1:3a:0b:c6:c3:69:13:
dd:a7:84:b5:19:31:06:38:19:89:ba:d0:d4:4a:c1:
2f:9c:52:f1:5a:33:ad:6b:bb:8a:11:83:12:a5:7e:
2e:d6:88:e2:b9:d8:4e:86:db:82:d1:85:39:db:e6:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:A3:1B:04:BB:02:F2:4F:AA:83:AC:1F:43:F6:E9:3A:60:FA:DA
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/_fujGwS7AvJPqoOsH0P26Tpg-to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6284::/32
2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b140::/29
2a10:4103::-2a10:4104:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4b46::/31
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a346::/32
Signature Algorithm: sha256WithRSAEncryption
c2:ea:32:d7:58:48:7d:47:dd:74:0b:63:a8:3c:76:22:c7:04:
3b:93:34:db:2c:d0:fb:6e:f6:50:c0:85:44:00:15:c1:6c:d8:
e9:b1:b0:d8:4f:3b:f0:6c:30:4d:98:3b:9a:a7:83:80:8b:9d:
57:4b:91:ba:fa:02:08:75:7a:54:a2:21:ef:16:5b:80:cd:07:
81:8e:c0:56:58:c7:f7:d7:77:dc:a9:96:88:98:1f:40:87:2d:
c1:16:3e:f2:8f:4a:62:a3:8f:02:10:41:8c:7c:f8:48:06:43:
92:06:0a:b6:d8:17:f3:cf:89:98:41:ec:d4:85:27:3d:d7:65:
89:98:a6:4b:24:73:1c:85:08:79:d6:21:ed:e0:d1:4c:10:21:
28:15:22:3b:14:8e:3a:7c:1c:20:8c:1a:09:ff:41:8c:65:83:
c6:86:1f:cc:ba:92:f1:5b:bf:0a:dc:61:fc:42:00:df:d9:db:
6e:d5:29:64:ab:44:86:ec:f6:f6:bc:20:9d:d8:0c:ac:49:cf:
12:4a:f1:5c:91:8a:18:2b:5f:81:ed:15:a4:37:ac:34:cd:1e:
b1:bd:bb:1e:77:31:c7:31:28:e1:bc:11:a4:9a:be:2f:7d:e8:
cc:cd:05:f3:f6:e8:f0:ce:22:3b:04:c4:bb:37:76:01:5f:c4:
a0:c2:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:34 2025 by rpki-client